Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: nfdl1W9CRtYOGlmrO0AxbPF81taNZdaf+72sZUlMtl0=
Subject key identifier: 42:EB:8A:CD:99:4A:D6:20:CF:08:3C:D6:B7:AD:26:E8:A4:EA:EE:6F
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 019E1E3595B83B28C12920D2F6D936257CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 05A7
Signing time: Tue 12 May 2026 22:01:28 +0000
Manifest this update: Tue 12 May 2026 22:01:28 +0000
Manifest next update: Wed 13 May 2026 22:01:28 +0000
Files and hashes: 1: INyi55Cem-fKRbCyhWoBxset2V8.roa (hash: ewguotn20Zrkv6k2+CkZNOeCi50wOffr5aj3RIiSuA0=)
2: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: FlHN/EjUDniy39EZIKTownLjapjafTSy8oOW1BWe9mo=)
3: lot016U7U6JL43wtM60yljMjF4I.roa (hash: 18/d/s7/WmFdWb3qjzEB9yH+6YTufgLNjpNy8KhdOs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:95:b8:3b:28:c1:29:20:d2:f6:d9:36:25:7c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: May 12 22:01:28 2026 GMT
Not After : May 13 22:01:28 2026 GMT
Subject: CN=42eb8acd994ad620cf083cd6b7ad26e8a4eaee6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:1b:38:7a:ca:7e:5e:99:3f:64:86:bc:84:
81:f7:61:b4:53:92:04:65:bf:a2:90:d1:10:d5:53:
92:a3:d3:60:26:0e:51:65:b9:a8:d2:d6:83:8d:ee:
9c:28:cc:47:ef:7b:da:ec:a1:46:6d:12:82:60:ef:
5f:0d:5e:d5:a1:89:3e:25:01:4b:b0:95:94:7f:01:
e2:6f:80:e5:ed:5d:4c:28:1f:0b:af:d1:0a:16:c1:
68:4c:45:e7:42:0c:b8:60:df:83:72:df:da:9b:87:
83:cf:a5:a6:22:e0:51:80:10:64:f6:f5:44:2b:a3:
1e:19:b8:19:20:3e:73:20:85:f9:f4:40:33:46:29:
66:17:f0:7e:e0:3b:6e:4b:9a:9b:14:b6:5f:bc:1b:
bc:82:cb:c5:59:48:2d:d6:e0:a4:b8:61:aa:7f:47:
6a:f2:e1:e9:43:ae:09:75:4f:9a:7f:44:bf:8e:7e:
f8:7f:fc:1f:ce:8c:f7:52:e6:2d:ac:ae:b7:ce:10:
9a:09:26:35:95:14:6a:fb:10:bb:e3:47:6f:ec:5b:
d5:d1:29:39:49:a9:fa:84:30:82:f8:7c:cd:0a:58:
90:42:a4:e6:29:d9:16:47:86:c4:ca:97:45:bc:d9:
0a:9b:07:92:9c:eb:cd:d8:8e:6c:95:be:71:15:d8:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EB:8A:CD:99:4A:D6:20:CF:08:3C:D6:B7:AD:26:E8:A4:EA:EE:6F
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c1:8c:6b:74:7d:29:86:1b:69:e7:61:74:4b:00:7b:45:bb:
a5:3e:71:a9:93:20:06:fb:02:27:02:cc:9c:58:eb:35:01:c7:
ae:45:ce:25:fa:17:89:38:80:29:8d:a5:97:2f:62:f6:1e:64:
b7:7e:6e:ac:a4:4e:62:36:0a:71:e7:0c:38:01:fb:86:7c:81:
75:96:a4:92:a2:50:73:02:78:b8:6e:69:b5:11:f6:fa:c9:70:
e3:cb:70:27:63:6b:de:d2:ed:a6:18:ed:ea:65:43:53:a7:b9:
f0:8b:19:0e:92:74:9d:ff:74:2c:97:a1:d0:92:30:15:d4:c0:
1d:71:16:0f:1c:57:9a:14:d6:d6:a3:54:40:a6:c4:48:1f:db:
2e:21:3d:ad:51:65:13:71:e6:d5:3c:c8:af:bb:2b:e3:27:32:
26:37:0a:25:d5:89:0e:ac:d8:71:37:7c:dd:b6:ee:51:5b:b5:
17:59:ef:4b:37:2f:5b:7b:77:a5:aa:39:91:c9:33:db:a7:eb:
1e:6b:fd:a2:9a:c4:29:20:89:7d:e1:f9:58:09:99:55:0f:f4:
9a:2f:02:c3:a3:1d:54:eb:da:2f:4b:7b:4e:66:56:bb:8f:0b:
19:ac:d4:8e:40:cd:43:b0:4a:9d:00:32:66:b5:88:e6:1f:31:
c3:fd:6b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:52:33 2026 by rpki-client