Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: S2Sx+i2S442i1O/HbOzQGBgHFQZ0mDOiBgG7smpXRfQ=
Subject key identifier: F7:80:72:7E:C0:C7:CF:E6:EB:E9:DD:B3:B0:E4:75:CE:3D:17:16:DA
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 019D2703CBFE025D32CA8D3CCDE25C0F9EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 0527
Signing time: Wed 25 Mar 2026 22:00:53 +0000
Manifest this update: Wed 25 Mar 2026 22:00:53 +0000
Manifest next update: Thu 26 Mar 2026 22:00:53 +0000
Files and hashes: 1: INyi55Cem-fKRbCyhWoBxset2V8.roa (hash: ewguotn20Zrkv6k2+CkZNOeCi50wOffr5aj3RIiSuA0=)
2: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: 1SAZZ+FmI9iHPF3XnKJLF0SaoKuOh9yEWdoR5+BBitM=)
3: lot016U7U6JL43wtM60yljMjF4I.roa (hash: 18/d/s7/WmFdWb3qjzEB9yH+6YTufgLNjpNy8KhdOs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:cb:fe:02:5d:32:ca:8d:3c:cd:e2:5c:0f:9e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Mar 25 22:00:53 2026 GMT
Not After : Mar 26 22:00:53 2026 GMT
Subject: CN=f780727ec0c7cfe6ebe9ddb3b0e475ce3d1716da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:04:30:50:1d:f1:a7:27:a9:13:69:73:58:77:
ce:1a:d3:04:d2:48:8e:5e:e5:c7:02:f3:af:fc:7b:
56:be:d3:27:4c:39:fc:42:9f:a6:30:3b:8d:ab:72:
ef:59:4e:41:cc:63:bb:77:1c:e9:a4:4c:68:5f:a9:
37:9e:42:4f:32:87:fc:0b:83:1e:5b:ab:f6:1a:49:
95:0e:67:30:19:8b:41:84:68:5f:78:fd:76:00:e8:
5c:7d:ee:9d:5d:2a:87:c5:61:f6:a1:bc:ae:9f:f4:
f4:53:ba:86:27:1a:57:7d:87:7b:70:9a:c2:1d:69:
fd:b6:b8:4b:51:2b:41:83:2d:25:c6:d0:d6:ff:24:
8a:47:18:2a:c1:6b:24:e8:54:ad:f0:98:47:17:d9:
24:b2:24:e6:c6:e2:68:79:b6:a6:d4:2b:0a:ad:a4:
1e:dc:8b:38:e3:c1:c6:08:5a:8d:ea:c1:bc:7e:fb:
b1:7b:01:58:d5:53:fc:7b:48:4d:16:02:2d:35:3f:
11:62:56:7d:1d:86:80:c5:7d:c6:6c:62:bd:ea:68:
3c:1d:a2:06:b7:af:cc:16:84:16:00:d5:08:b0:56:
5e:68:b1:70:8d:39:60:db:98:ba:f1:b2:55:81:7e:
d9:b3:38:a4:43:63:77:95:4f:62:d2:73:34:ae:04:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:80:72:7E:C0:C7:CF:E6:EB:E9:DD:B3:B0:E4:75:CE:3D:17:16:DA
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6c:6e:22:83:ab:bf:59:94:41:1a:29:5d:be:a6:58:7c:09:
a7:cc:38:21:3a:ff:81:83:91:02:1f:83:67:fb:81:b0:73:82:
4a:02:ef:cb:1e:e8:6a:67:80:77:38:88:1b:49:71:36:11:79:
06:67:13:1a:1c:1a:61:29:75:ce:09:28:39:b9:9e:8a:69:8f:
79:b9:86:dc:54:f8:09:f3:e8:14:e1:27:fa:70:99:29:01:44:
14:72:14:82:09:18:bf:94:56:ce:97:5d:ef:f9:2e:61:ff:69:
37:60:80:5f:93:46:63:93:c4:2d:19:93:c8:11:5d:0f:d3:b6:
6b:e3:67:8b:75:ae:5a:51:bc:72:9c:fd:c0:16:35:52:ae:de:
a6:7a:ea:0f:fe:79:e4:ad:8d:6d:41:01:bf:e6:59:34:7d:29:
df:8b:72:39:39:a5:ab:a9:06:46:83:50:f4:7a:4a:a9:ab:79:
f0:68:ca:cf:51:cd:0b:52:b4:73:34:2b:2f:52:48:fe:b6:3a:
08:44:f1:af:84:10:87:7a:5f:42:a8:3b:1d:70:62:c2:f9:da:
d1:74:c3:34:9a:cd:21:2d:7f:c3:3a:a6:99:40:8c:f3:8d:5d:
f7:86:2b:36:dc:78:11:67:2d:3d:9f:55:28:e3:fb:53:67:e9:
1c:e3:bf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:10 2026 by rpki-client