Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: U3U2Qmpo6jgx6bM+Atn3eM0odsEBsn4FjJrTb1c5HBg=
Subject key identifier: 20:02:FC:18:AC:21:E7:3B:6C:94:F1:58:A1:50:2D:FB:32:78:1D:8B
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 019F8F10A5CB3E490D0BBE3453C5FB09501A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 0666
Signing time: Thu 23 Jul 2026 13:01:00 +0000
Manifest this update: Thu 23 Jul 2026 13:01:00 +0000
Manifest next update: Fri 24 Jul 2026 13:01:00 +0000
Files and hashes: 1: INyi55Cem-fKRbCyhWoBxset2V8.roa (hash: ewguotn20Zrkv6k2+CkZNOeCi50wOffr5aj3RIiSuA0=)
2: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: FOQDuc0H2+EoFvfc+2IeQ2xCS0cLeTVqOX6sOXHTzM4=)
3: lot016U7U6JL43wtM60yljMjF4I.roa (hash: 18/d/s7/WmFdWb3qjzEB9yH+6YTufgLNjpNy8KhdOs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:a5:cb:3e:49:0d:0b:be:34:53:c5:fb:09:50:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Jul 23 13:01:00 2026 GMT
Not After : Jul 24 13:01:00 2026 GMT
Subject: CN=2002fc18ac21e73b6c94f158a1502dfb32781d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:36:b5:08:5b:c9:90:33:e6:a5:bd:f1:80:dd:
83:04:52:b6:79:76:74:7a:30:32:56:f5:d1:e2:4f:
35:40:41:12:7b:bf:a8:d0:bd:ca:71:85:ef:1e:58:
f9:99:26:ac:f7:80:85:7b:10:9f:88:b7:85:76:c5:
07:d1:cd:2e:bc:95:04:de:bd:30:61:80:ff:9d:51:
e5:05:26:78:cd:fd:f2:57:98:95:30:b9:39:d4:a7:
08:97:67:d6:ce:18:33:be:72:2f:74:6c:f6:37:49:
b0:1e:8f:fc:3e:94:6e:bf:73:9d:40:42:2b:e1:b9:
b7:e6:09:3c:32:c0:96:88:ab:ff:d1:0b:74:18:08:
39:ac:a5:62:6e:a6:90:2b:ac:28:1f:7d:61:8f:79:
4f:2b:45:66:ea:de:76:62:dd:62:97:db:52:da:f8:
84:6b:8e:49:a8:8a:83:ed:65:f5:02:e1:a3:c9:f4:
a5:2d:6d:b4:62:17:e0:bd:4e:e7:f6:2e:26:4a:9a:
ce:eb:98:7e:3a:df:94:fa:e6:61:bd:88:96:22:83:
f5:d3:4b:50:68:fb:4b:63:8d:e4:51:c9:4c:82:db:
c2:87:b8:65:e2:a6:4e:d3:ca:10:c3:f7:c5:20:ca:
76:3b:6f:ff:76:02:8b:c0:bc:e7:65:bd:ee:47:79:
ea:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:02:FC:18:AC:21:E7:3B:6C:94:F1:58:A1:50:2D:FB:32:78:1D:8B
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f2:5c:0f:14:7d:24:da:52:26:d9:7a:d4:14:0f:fb:2b:f8:
aa:95:87:ba:26:ef:2a:2e:25:0a:b2:e8:13:f8:96:e5:26:90:
0f:66:3a:ad:25:12:9d:1b:b6:8e:4f:45:23:0c:88:b1:69:f9:
95:96:17:89:30:3e:93:fa:95:0a:22:8d:66:44:2a:6d:bd:03:
b4:c9:c6:6f:c7:8c:f6:e2:24:8a:05:7f:dc:fe:11:ad:ba:c0:
1f:01:67:f9:f0:af:88:fb:24:f7:fd:e9:87:97:8c:ec:de:44:
19:e0:29:57:7e:8c:47:f2:db:5c:78:2a:0e:04:ad:54:67:e2:
73:66:db:5a:59:13:0e:1a:b6:59:e3:63:8d:55:27:a8:f8:9b:
b4:80:90:ae:b1:65:ee:0e:5f:0d:78:ed:19:e5:a1:61:af:47:
c6:b5:03:d1:0c:c9:98:eb:ad:01:a4:ad:4b:12:3d:88:43:7c:
a3:7a:d4:80:3e:1f:0d:46:1f:7f:31:b9:af:93:22:95:4c:8c:
93:92:cf:4e:c0:27:a7:ba:0d:2c:7a:d0:2f:75:78:71:c6:cb:
2b:ef:f2:75:05:54:85:26:36:39:3d:88:2a:77:1b:23:d1:e8:
d3:da:55:aa:95:77:e7:a3:c3:f2:59:2f:cb:52:89:0f:e9:50:
d7:cb:5b:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEKXLPkkNC740U8X7CVAaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OTliM2U3ODIzNzBkYzI4MTRmNTI1YzFkNmVjZTg0ZDhm
NzBmMzYwHhcNMjYwNzIzMTMwMTAwWhcNMjYwNzI0MTMwMTAwWjAzMTEwLwYDVQQD
EygyMDAyZmMxOGFjMjFlNzNiNmM5NGYxNThhMTUwMmRmYjMyNzgxZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3za1CFvJkDPmpb3xgN2DBFK2eXZ0
ejAyVvXR4k81QEESe7+o0L3KcYXvHlj5mSas94CFexCfiLeFdsUH0c0uvJUE3r0w
YYD/nVHlBSZ4zf3yV5iVMLk51KcIl2fWzhgzvnIvdGz2N0mwHo/8PpRuv3OdQEIr
4bm35gk8MsCWiKv/0Qt0GAg5rKVibqaQK6woH31hj3lPK0Vm6t52Yt1il9tS2viE
a45JqIqD7WX1AuGjyfSlLW20YhfgvU7n9i4mSprO65h+Ot+U+uZhvYiWIoP100tQ
aPtLY43kUclMgtvCh7hl4qZO08oQw/fFIMp2O2//dgKLwLznZb3uR3nq6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAC/BisIec7bJTxWKFQLfsyeB2LMB8GA1UdIwQY
MBaAFJWZs+eCNw3CgU9SXB1uzoTY9w82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80MGExMDItZWZjZC00ZmQyLTkzNzMt
ZDA2YWE1MThhYTZkLzEvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi80MGExMDItZWZjZC00ZmQyLTkzNzMtZDA2YWE1MThhYTZk
LzEvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvJcDxR9
JNpSJtl61BQP+yv4qpWHuibvKi4lCrLoE/iW5SaQD2Y6rSUSnRu2jk9FIwyIsWn5
lZYXiTA+k/qVCiKNZkQqbb0DtMnGb8eM9uIkigV/3P4RrbrAHwFn+fCviPsk9/3p
h5eM7N5EGeApV36MR/LbXHgqDgStVGfic2bbWlkTDhq2WeNjjVUnqPibtICQrrFl
7g5fDXjtGeWhYa9HxrUD0QzJmOutAaStSxI9iEN8o3rUgD4fDUYffzG5r5MilUyM
k5LPTsAnp7oNLHrQL3V4ccbLK+/ydQVUhSY2OT2IKncbI9Ho09pVqpV356PD8lkv
y1KJD+lQ18tb3g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:09 2026 by rpki-client