Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: 5p5t9C3SrRmQILcbRbtb1RX8Ip4dCYCD9ODHBJ3AnYg=
Subject key identifier: A0:17:C0:0C:7D:42:BD:2E:8E:C5:B1:77:BB:1F:E1:88:F8:BC:1D:E3
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 01A0DB3BAD8367A7B9D4639107C6AE3A053C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 0712
Signing time: Sat 26 Sep 2026 01:01:56 +0000
Manifest this update: Sat 26 Sep 2026 01:01:56 +0000
Manifest next update: Sun 27 Sep 2026 01:01:56 +0000
Files and hashes: 1: INyi55Cem-fKRbCyhWoBxset2V8.roa (hash: ewguotn20Zrkv6k2+CkZNOeCi50wOffr5aj3RIiSuA0=)
2: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: y5aVds9L8qIYR6H5VkZyFtUgMVJt6UmVmd2T4/fFg8o=)
3: lot016U7U6JL43wtM60yljMjF4I.roa (hash: 18/d/s7/WmFdWb3qjzEB9yH+6YTufgLNjpNy8KhdOs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:ad:83:67:a7:b9:d4:63:91:07:c6:ae:3a:05:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Sep 26 01:01:56 2026 GMT
Not After : Sep 27 01:01:56 2026 GMT
Subject: CN=a017c00c7d42bd2e8ec5b177bb1fe188f8bc1de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:9e:bd:c3:9a:34:52:02:5c:b9:4e:e1:5e:
d3:ac:5c:54:e2:86:2f:eb:89:96:c8:5c:86:0b:26:
86:f7:ea:9c:21:8c:1d:d4:16:69:2f:b2:17:77:c2:
ea:f4:6e:a5:ed:e9:4a:6a:59:cb:ba:0e:b1:de:ea:
b6:91:f4:b7:54:e9:c6:52:d4:b1:69:d3:47:03:ab:
24:28:26:03:fd:1d:28:37:72:66:31:fe:96:91:01:
e2:82:5b:ac:93:e8:85:12:2f:f9:f9:6a:49:f7:40:
45:96:53:ab:43:01:a2:fb:4b:ca:27:dd:bc:cd:ca:
73:98:f3:20:f0:34:ce:de:b2:93:ba:64:ba:fb:e3:
9e:8e:a2:f6:4f:76:6a:7d:0b:16:58:50:33:2e:87:
76:53:62:0b:7e:46:40:1b:5f:18:c4:9a:85:9c:55:
f5:f5:06:de:25:fc:da:fd:e7:1f:69:dd:39:64:3b:
8a:63:48:39:e5:c7:49:a4:6f:86:5a:a6:59:45:56:
71:bd:b1:5c:06:2a:25:26:19:2b:2d:c1:0a:76:16:
5b:0b:a6:67:f0:a7:72:fc:59:eb:51:89:e9:8d:1d:
63:eb:ae:78:4c:14:a3:a9:5e:0a:eb:66:1a:39:db:
65:0d:e6:ac:42:31:88:ae:33:1b:7d:17:cd:6a:18:
b5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:17:C0:0C:7D:42:BD:2E:8E:C5:B1:77:BB:1F:E1:88:F8:BC:1D:E3
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:3b:dc:01:40:73:66:1a:bb:67:a3:3e:34:4d:bc:17:29:88:
0d:5c:f0:7b:cd:ef:2a:f0:79:f8:5c:e4:94:7d:cf:14:45:2a:
f9:9b:2a:31:87:24:18:0f:a4:26:14:e3:d0:4b:c5:75:45:0f:
a7:8e:db:b0:83:86:16:d7:12:b7:00:de:31:f5:d4:9e:a6:2f:
7c:3f:ef:fb:91:d0:c2:a5:0b:4e:7a:b1:64:29:ee:c7:61:40:
e2:e2:f5:e2:03:1c:24:e8:9a:8a:b7:f0:ca:b2:8d:cb:54:64:
7a:2d:08:e1:2b:25:a2:a5:58:7b:31:46:c5:53:fa:65:5f:4a:
d5:d7:3d:4d:17:37:d9:ea:97:84:60:41:e2:3e:62:87:af:2c:
b3:21:20:cf:fe:9c:10:03:80:1e:02:9a:81:13:df:43:14:41:
ca:73:18:32:cc:8c:e1:f2:6b:2c:85:f4:b8:71:a8:a7:0e:55:
c7:48:25:25:a9:70:f2:44:00:b9:80:9b:91:eb:4a:ad:d2:4c:
c4:1b:c3:32:cc:96:6b:25:60:b3:f8:31:16:7e:89:34:35:7a:
c8:98:84:cb:41:7b:97:e1:93:8b:12:ef:cb:19:40:bf:6e:50:
f1:65:74:91:59:87:60:d2:6f:8e:54:21:04:88:a8:b7:bc:f1:
17:73:a6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:24:34 2026 by rpki-client