Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
File: lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft (raw, json)
Hash identifier: raC6LllGiCiAUJlUa/W81iJSaX8HVA60E4iHDd1gDws=
Subject key identifier: 7A:B7:3C:C1:0B:D7:80:D6:5A:6A:D8:90:88:85:3F:32:FC:02:A8:80
Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Certificate serial: 01A0032673EAF584C257B3614942FB8BC4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
Manifest number: 1A02
Signing time: Sat 15 Aug 2026 02:00:46 +0000
Manifest this update: Sat 15 Aug 2026 02:00:46 +0000
Manifest next update: Sun 16 Aug 2026 02:00:46 +0000
Files and hashes: 1: H_aIB34XXRbiPvATUkCbAHJuZks.roa (hash: GmWrAgdFKtzaI9LiJNA5YbFMAcvIbrgKGLYesLFjTmw=)
2: QHQB5R-_IHEKwwGTKDoZ2Ksm3ts.roa (hash: RSCo2PpN2aVf+mUteSJphpe4hoO5sJZI7c95rlwWbrM=)
3: lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl (hash: PQAvmsHKDcYJvHE6rB/hfV3FymEIAyYfwQkmTNpQVv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:73:ea:f5:84:c2:57:b3:61:49:42:fb:8b:c4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Validity
Not Before: Aug 15 02:00:46 2026 GMT
Not After : Aug 16 02:00:46 2026 GMT
Subject: CN=7ab73cc10bd780d65a6ad89088853f32fc02a880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:70:c8:79:00:d8:06:30:e2:60:b9:1d:a9:8a:
05:2e:c9:e8:ec:99:df:04:b1:1b:fa:11:64:d0:9a:
38:61:a8:9b:1d:9c:c4:9b:ca:f4:6a:d4:bc:72:8d:
de:6d:e6:29:4f:5a:6d:d3:d1:35:8e:20:7c:e1:a8:
85:de:37:20:5c:c2:34:60:f1:ca:d4:d7:cc:86:9a:
a6:92:82:1c:c2:eb:19:11:9c:7f:c7:93:52:c8:01:
82:88:f6:48:fb:c1:39:38:e1:f2:3c:71:f8:77:96:
54:ae:94:bb:c6:bd:9b:f5:18:e9:0c:a3:ee:cc:4b:
10:51:a6:65:cb:ed:cd:46:6c:65:01:33:13:72:06:
0d:0c:4e:5d:89:31:87:5f:82:b7:d9:c9:65:a4:42:
72:9e:ed:84:46:af:47:97:22:e0:8d:b7:f5:fb:67:
c6:86:88:b9:35:ca:e4:59:6f:c9:3f:ef:ba:69:cd:
c6:43:01:b2:fc:3e:66:e8:f0:f8:a5:1b:fc:0c:1c:
78:35:b6:7b:5f:a0:7c:6f:f9:0e:ab:8a:5c:ce:71:
a4:ae:1f:ec:4e:5a:e3:1c:eb:b3:46:9f:7c:e4:fc:
a4:61:07:64:11:fe:46:a0:33:22:d9:10:42:e6:3a:
fb:0a:ef:9d:4d:31:3e:a5:21:25:62:d8:ba:28:1a:
aa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B7:3C:C1:0B:D7:80:D6:5A:6A:D8:90:88:85:3F:32:FC:02:A8:80
X509v3 Authority Key Identifier:
keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:96:97:37:94:c5:a7:f3:8c:5b:0d:7d:6e:86:86:42:e7:c5:
a2:f6:ae:63:be:ed:bd:25:51:97:9f:e2:99:fb:b2:b5:5e:10:
5b:3b:d7:aa:8f:46:77:6b:9f:e8:a7:ab:2e:61:59:d5:6d:14:
49:b9:b8:75:a4:3f:87:04:62:8c:2c:a5:fc:73:da:cc:07:12:
78:47:e0:ff:cb:07:52:b1:ab:fb:08:2a:c4:7d:51:ef:3d:e6:
e9:b4:c8:53:15:3f:e8:92:79:0b:2d:e0:56:f4:5f:2c:98:a6:
1b:33:17:51:6d:64:05:48:bf:23:21:b2:42:a4:6c:eb:e7:f3:
ef:fe:a1:f1:0d:fd:1d:b5:23:fb:e6:2f:08:ee:3e:6e:17:9f:
a8:c4:33:fa:b1:5d:41:e8:d9:23:10:d3:f7:1d:12:0a:c3:de:
5f:f2:0e:cb:de:c8:a5:96:f9:2f:fc:d3:6f:f0:ea:dd:ea:f8:
5b:d7:ab:f3:74:7e:43:e5:ba:f6:2c:36:c8:0a:8a:0e:32:16:
fe:88:d2:b1:b4:11:f8:97:ce:8f:3e:3b:e8:e2:29:c7:51:eb:
c9:fe:53:1f:8a:8e:11:62:d7:fe:0d:bb:98:51:70:67:5c:95:
72:01:fb:ad:31:af:82:09:8d:0e:ce:c3:4c:6b:16:53:ab:39:
fd:ee:02:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:55:35 2026 by rpki-client