Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: A0vGAy4JHbB2Tj0yooeljHXkJXVPuxxXO+kW3r4jlZs=
Subject key identifier: 37:66:7D:A0:65:7C:CA:6D:29:13:E6:C5:C3:8C:96:30:9F:87:0D:57
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 019D28F323310396E04854191A927F9C0BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 0528
Signing time: Thu 26 Mar 2026 07:01:56 +0000
Manifest this update: Thu 26 Mar 2026 07:01:56 +0000
Manifest next update: Fri 27 Mar 2026 07:01:56 +0000
Files and hashes: 1: INyi55Cem-fKRbCyhWoBxset2V8.roa (hash: ewguotn20Zrkv6k2+CkZNOeCi50wOffr5aj3RIiSuA0=)
2: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: 1njDyq5vVz8Tw+LulL7+joED+04baKots/BDfzTe1ow=)
3: lot016U7U6JL43wtM60yljMjF4I.roa (hash: 18/d/s7/WmFdWb3qjzEB9yH+6YTufgLNjpNy8KhdOs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:23:31:03:96:e0:48:54:19:1a:92:7f:9c:0b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Mar 26 07:01:56 2026 GMT
Not After : Mar 27 07:01:56 2026 GMT
Subject: CN=37667da0657cca6d2913e6c5c38c96309f870d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:54:5d:2b:de:7d:00:75:46:bd:5a:91:a8:
c6:05:9d:6d:b7:73:ed:98:20:1c:bd:b6:01:ef:5f:
6a:da:5e:d1:b5:db:3b:7d:da:70:12:23:06:0f:1d:
ca:c0:59:1a:f4:0e:bc:27:ed:08:13:0b:15:7b:2f:
26:79:a3:57:7d:ba:9b:1f:8c:0b:e2:07:78:02:ef:
e0:be:38:16:a4:cd:b9:fa:4e:77:6c:c3:d1:41:e2:
f3:f6:b3:c2:40:95:9d:b1:0e:72:95:10:32:06:dc:
82:71:7e:af:54:26:70:ba:fd:a8:6b:b4:c8:fc:f7:
cc:d9:a0:40:a8:12:e4:c6:cb:95:2b:0d:cc:e2:ab:
ba:f0:19:4a:bc:1a:79:d6:ac:cd:94:8c:99:4c:ae:
5b:d1:62:e2:20:64:3a:0d:7c:67:33:a4:7f:41:22:
a0:80:a5:1f:f8:e2:37:9a:61:6e:2c:65:5d:00:46:
80:91:83:55:bf:32:b8:8b:dd:c3:49:28:dc:cc:65:
99:b5:b5:59:cf:dc:e8:a5:58:22:63:92:82:54:e4:
b8:2a:33:ff:5c:36:29:7e:a0:bc:7a:d5:4e:8a:ba:
b0:47:56:c2:87:02:65:36:93:26:2d:ea:89:4b:80:
59:bf:39:83:1a:55:43:9b:7a:f5:9d:5f:b9:f2:e2:
57:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:66:7D:A0:65:7C:CA:6D:29:13:E6:C5:C3:8C:96:30:9F:87:0D:57
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f7:b2:2d:5d:b5:58:cc:ec:70:aa:58:30:3b:71:dd:dd:68:
9e:86:d2:29:ca:eb:31:08:ec:62:6a:56:bd:40:d8:3d:f1:58:
b3:42:c0:ce:5f:b1:2f:49:70:c0:e0:8c:0a:e4:02:76:6c:ef:
f9:fa:c0:53:60:e1:d5:e5:8c:42:87:bb:6b:01:26:6f:8f:2e:
1d:8a:06:e3:83:bf:8a:80:74:43:49:ae:5b:4f:83:dd:7e:07:
1a:1b:16:5c:ed:43:c0:90:8d:f5:30:1c:dd:e4:08:32:ed:da:
0a:8d:7c:d8:b1:79:7a:ee:f1:78:8d:13:ee:a4:61:06:d0:0b:
d9:7a:d2:60:07:83:e9:47:93:89:1f:9d:e2:c6:e8:0e:80:65:
c4:f6:b0:d5:12:4c:79:7b:c4:42:6c:38:12:02:55:b8:27:78:
20:db:9c:f4:8e:18:01:e6:d6:63:76:24:0c:d0:fd:ac:70:01:
9c:3b:98:32:20:df:71:ff:58:64:d4:36:cc:55:ec:07:b2:6d:
ce:12:34:5e:8d:ce:ea:1e:db:27:ae:46:18:98:b4:83:b6:58:
f5:a8:e6:cb:86:a6:a3:c9:c1:0c:42:45:14:20:0f:19:33:37:
76:b7:5a:44:b9:a7:17:a6:9b:a6:af:97:b3:5b:0c:9f:ef:e6:
87:21:bd:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8yMxA5bgSFQZGpJ/nAupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OTliM2U3ODIzNzBkYzI4MTRmNTI1YzFkNmVjZTg0ZDhm
NzBmMzYwHhcNMjYwMzI2MDcwMTU2WhcNMjYwMzI3MDcwMTU2WjAzMTEwLwYDVQQD
EygzNzY2N2RhMDY1N2NjYTZkMjkxM2U2YzVjMzhjOTYzMDlmODcwZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX5UXSvefQB1Rr1akajGBZ1tt3Pt
mCAcvbYB719q2l7Rtds7fdpwEiMGDx3KwFka9A68J+0IEwsVey8meaNXfbqbH4wL
4gd4Au/gvjgWpM25+k53bMPRQeLz9rPCQJWdsQ5ylRAyBtyCcX6vVCZwuv2oa7TI
/PfM2aBAqBLkxsuVKw3M4qu68BlKvBp51qzNlIyZTK5b0WLiIGQ6DXxnM6R/QSKg
gKUf+OI3mmFuLGVdAEaAkYNVvzK4i93DSSjczGWZtbVZz9zopVgiY5KCVOS4KjP/
XDYpfqC8etVOirqwR1bChwJlNpMmLeqJS4BZvzmDGlVDm3r1nV+58uJXjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdmfaBlfMptKRPmxcOMljCfhw1XMB8GA1UdIwQY
MBaAFJWZs+eCNw3CgU9SXB1uzoTY9w82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80MGExMDItZWZjZC00ZmQyLTkzNzMt
ZDA2YWE1MThhYTZkLzEvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi80MGExMDItZWZjZC00ZmQyLTkzNzMtZDA2YWE1MThhYTZk
LzEvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVveyLV21
WMzscKpYMDtx3d1onobSKcrrMQjsYmpWvUDYPfFYs0LAzl+xL0lwwOCMCuQCdmzv
+frAU2Dh1eWMQoe7awEmb48uHYoG44O/ioB0Q0muW0+D3X4HGhsWXO1DwJCN9TAc
3eQIMu3aCo182LF5eu7xeI0T7qRhBtAL2XrSYAeD6UeTiR+d4sboDoBlxPaw1RJM
eXvEQmw4EgJVuCd4INuc9I4YAebWY3YkDND9rHABnDuYMiDfcf9YZNQ2zFXsB7Jt
zhI0Xo3O6h7bJ65GGJi0g7ZY9ajmy4amo8nBDEJFFCAPGTM3drdaRLmnF6abpq+X
s1sMn+/mhyG9Iw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:51 2026 by rpki-client