Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
File: lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft (raw, json)
Hash identifier: XlpFQayFUrhhnFszue1avYxpFt7oB4l58bxyLWKstPo=
Subject key identifier: 52:0C:80:D5:38:B3:11:99:46:20:9D:3D:0B:78:87:8A:7A:54:E1:2D
Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Certificate serial: 01A1174F33406F5ED821C627169547E128C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
Manifest number: 1A91
Signing time: Wed 07 Oct 2026 17:00:28 +0000
Manifest this update: Wed 07 Oct 2026 17:00:28 +0000
Manifest next update: Thu 08 Oct 2026 17:00:28 +0000
Files and hashes: 1: H_aIB34XXRbiPvATUkCbAHJuZks.roa (hash: GmWrAgdFKtzaI9LiJNA5YbFMAcvIbrgKGLYesLFjTmw=)
2: QHQB5R-_IHEKwwGTKDoZ2Ksm3ts.roa (hash: RSCo2PpN2aVf+mUteSJphpe4hoO5sJZI7c95rlwWbrM=)
3: lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl (hash: +uV9YVG1qG5DxT6qBuKFeXvJsS9P6GLUIjDRQFbilDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:4f:33:40:6f:5e:d8:21:c6:27:16:95:47:e1:28:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Validity
Not Before: Oct 7 17:00:28 2026 GMT
Not After : Oct 8 17:00:28 2026 GMT
Subject: CN=520c80d538b3119946209d3d0b78878a7a54e12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:b2:d8:49:8d:40:1b:89:a0:10:0d:67:ff:
67:4f:52:95:bb:a9:26:ab:19:5f:b4:be:76:fa:ce:
34:58:5f:e2:c8:35:32:55:28:7d:3f:37:ea:51:27:
7d:23:60:cc:66:a8:0a:52:2b:c6:fb:b2:d9:5f:ba:
df:0e:68:2e:3d:0b:39:2f:b8:86:1d:3e:ba:da:39:
24:a1:c5:b6:86:ad:9e:c5:ac:44:d6:18:59:1d:88:
fe:17:93:ec:af:34:64:94:7e:b6:68:65:74:e5:3e:
75:9a:9e:e6:c5:78:54:21:af:b2:25:17:d7:0c:fb:
39:f3:04:9b:ef:ce:8c:63:df:c6:50:5a:51:76:38:
78:a2:6a:d4:c8:5a:7e:eb:75:db:d9:50:5e:e9:92:
0a:1b:bd:7d:b8:c4:f1:21:76:30:71:ed:68:6d:4b:
53:6b:65:6e:e2:a0:11:4e:11:5c:4b:13:ab:a4:7c:
96:1a:a5:39:87:2b:78:ce:50:22:f0:bd:63:ed:2d:
0f:3e:5a:45:fd:06:8e:c6:47:68:32:81:92:e1:e5:
60:0b:02:40:86:9a:86:d6:4d:1d:84:ee:f4:27:ac:
66:17:80:4a:a9:e3:3f:de:17:77:af:78:b7:7b:cd:
0e:5f:31:3a:5a:96:02:dd:97:df:ad:29:a9:c2:a0:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0C:80:D5:38:B3:11:99:46:20:9D:3D:0B:78:87:8A:7A:54:E1:2D
X509v3 Authority Key Identifier:
keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ad:84:ce:c6:cc:57:3e:a1:8f:b3:8c:c7:90:68:37:e0:eb:
ae:c1:c3:dd:85:b9:ae:60:7e:3d:2e:7e:43:55:b8:cf:73:75:
42:49:a2:7d:21:87:7c:77:89:15:f1:8b:a2:e8:37:8c:7f:de:
21:8d:dc:80:f8:c9:03:1a:e9:e1:41:b7:82:46:06:07:e5:3c:
ce:45:99:fc:1a:0b:30:ba:d1:ad:fc:bd:29:2c:73:93:04:1c:
b8:2c:cf:08:1b:ea:4e:d7:41:6b:58:47:81:b4:1e:59:df:45:
25:f5:2f:77:a9:98:c9:50:8a:4f:3e:2c:70:28:95:9f:b4:ff:
dc:2f:6b:0e:4b:3e:8c:da:34:d2:1f:79:16:16:4f:d0:60:8c:
8c:f4:33:c0:13:5f:c6:91:9b:10:2d:78:67:d3:b0:22:b8:94:
00:8e:7e:a9:4b:f3:fd:e3:dc:30:29:4b:29:c0:49:3a:4f:52:
1d:6a:56:8c:2e:5b:f8:35:a1:b6:7e:bf:5e:ad:e2:dd:c5:a3:
2b:a9:36:75:92:26:b4:33:89:ea:46:08:47:99:9d:a5:8c:db:
93:59:f8:a1:03:a6:84:99:6f:43:91:5e:a2:11:ec:c5:0d:81:
5d:a6:b8:78:cd:17:e7:88:87:1c:2f:c1:5c:28:98:0a:df:11:
85:7b:a0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 20:29:25 2026 by rpki-client