
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
File: LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft (raw, json)
Hash identifier: j1D9BbRmXxhQMCaRkHOovbSUQM2QFn8UwaT6kbVNfGI=
Subject key identifier: 80:A0:5E:9C:0D:5E:F3:0A:1E:2E:2A:F8:91:E8:EB:B3:17:11:A5:11
Authority key identifier: 2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
Certificate issuer: /CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Certificate serial: 01A06D5DD7730C027E1103BF459B5B32CDD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
Manifest number: 01FA
Signing time: Fri 04 Sep 2026 17:01:01 +0000
Manifest this update: Fri 04 Sep 2026 17:01:01 +0000
Manifest next update: Sat 05 Sep 2026 17:01:01 +0000
Files and hashes: 1: 0xXbCURhYGAah-ub3QgpVnkd5sc.roa (hash: Q0oF/ybiwcu5gijOk6b+e5zoOovn/M1MtfwaMpdjGcE=)
2: 9yvmVURUkLMHk20MVeDjqLMtnVE.roa (hash: /RYvywBfKnZxdvL0x6U6DMMb9MrbE+OssqTLAfPCxa8=)
3: LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl (hash: cedUYfQDgHfpMxBNlbUosRU7mGmR8/cytjw8YAN5+ks=)
4: Nequ1Lfv45A-4d-1Vk4dCZmbP8I.roa (hash: bLVnDdjoc9G1dickoCoDDOI7CZ2glnUV81dCe9iXEnE=)
5: eFeaVaRSBkGil76pjqqdgdUkbzI.roa (hash: mK68NwlgziX7HL5QUueavEEpH7AmEQ0bjY5gVUd0cuc=)
6: rxqd0Gry-OP0vQizZ8B0iUOlhQk.roa (hash: YqR2/1gTcjcRib7Q7eC6pgNPFlvqofC4cwX5ccdPO5s=)
7: sk6WLXVZEkboXRVPMZBoeqCrxVY.roa (hash: 4xjEoOdVMoXraD+ur+OZrTrLjOFEYcxLVFCWWAfHvz8=)
8: uIxLvhO87cm4uLEN6CRbiRRAprg.roa (hash: /WkNAUA3svepJJ+1z611s33eGYD9olxUjtZpjS5M7lk=)
9: uhrvAuxzS5aftx3VHfde8tRACMk.roa (hash: 8t8x2EpQlFENAHhuFsJA0XsBIYVQrZTRSbhmAKKQQcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5d:d7:73:0c:02:7e:11:03:bf:45:9b:5b:32:cd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Validity
Not Before: Sep 4 17:01:01 2026 GMT
Not After : Sep 5 17:01:01 2026 GMT
Subject: CN=80a05e9c0d5ef30a1e2e2af891e8ebb31711a511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4f:8e:51:8e:65:79:ee:94:cd:57:35:5d:86:
4b:11:5b:06:c4:e7:f6:3c:34:16:b9:f8:be:5a:5f:
55:2f:36:07:52:d9:17:09:13:ac:98:75:70:32:e8:
80:8e:a5:bb:aa:4e:60:fa:5c:da:c6:37:52:bf:8e:
7a:82:9f:3c:cf:9b:8a:5b:3b:f7:18:a8:4e:da:a3:
8d:8f:3c:8a:a0:19:c5:f9:98:99:ad:86:ea:25:a4:
ee:05:b6:b9:53:56:71:82:ec:05:61:ab:26:78:16:
8f:da:cf:2c:3d:8d:87:20:7f:aa:96:63:4c:16:34:
b8:8a:25:d1:ff:36:c1:3d:d9:f7:66:45:f6:db:c1:
4d:e5:7f:9d:82:28:17:cb:43:30:ea:c6:60:cf:51:
4f:1a:c2:70:58:40:0d:95:b9:a2:02:9a:72:10:d0:
ba:21:36:66:f8:20:d8:db:6a:91:b3:d4:06:c2:6b:
f3:8a:c0:e1:20:97:db:9e:11:f2:f4:2d:88:23:e3:
e8:18:e6:18:ec:b0:b4:d1:04:37:ad:79:e5:6a:c6:
63:d4:a0:9d:44:7a:ea:fd:72:e0:bd:b8:e6:af:ca:
29:db:65:50:db:6c:57:f3:5c:a8:e2:c6:bf:2f:66:
aa:12:4e:6b:a1:20:37:f7:a8:b2:a2:88:4b:54:63:
c5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A0:5E:9C:0D:5E:F3:0A:1E:2E:2A:F8:91:E8:EB:B3:17:11:A5:11
X509v3 Authority Key Identifier:
keyid:2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:34:f7:13:41:8c:22:bc:53:53:bd:24:50:e6:1f:74:4a:03:
dc:b1:1c:c4:5a:72:9d:f5:62:9b:aa:bd:20:b4:f3:ce:0f:09:
be:c7:b1:3f:96:52:c8:00:2b:b2:d2:3c:cf:64:c7:12:c4:f6:
62:90:45:61:18:4b:6b:33:ec:8f:1c:93:e2:e7:cb:28:8d:7b:
c5:fc:a7:f6:b3:c0:a1:99:26:7e:e5:de:53:96:64:59:ac:6a:
f5:d3:6a:ce:22:8e:3e:ff:ed:8b:57:30:41:5c:97:9c:d1:13:
16:ae:ca:d8:29:d3:1b:7a:59:10:1d:bd:6b:24:1c:79:6a:15:
ee:2c:e5:4d:1f:ec:e1:25:5f:72:60:81:a5:e2:d3:c1:7d:8f:
80:7d:41:de:99:da:62:61:c5:71:a1:29:ad:b2:61:e6:48:63:
1f:e9:4a:a0:f2:b9:d2:16:d8:e8:e8:35:fa:0d:4a:96:97:79:
0f:94:1b:46:f9:b0:62:c0:9e:6f:63:ba:72:0a:63:39:f4:01:
08:f5:ab:bc:8f:25:b3:5b:19:f6:bb:18:7a:fc:ec:f2:94:b0:
7d:f0:7c:02:2b:dd:d0:6a:29:dc:32:e5:90:13:2d:8f:bc:30:
5d:5c:0a:93:0a:db:a5:c0:05:0d:69:66:4f:53:8f:36:74:4d:
ee:5c:51:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:26:14 2026 by rpki-client