Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: ZOj6xoJwGpMvCBkM88vH8UenkUp0vrYiNGNpeWNT7WA=
Subject key identifier: BD:4D:49:60:9F:78:34:87:85:FB:FB:30:DE:47:F0:AA:6E:AA:B7:B1
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 019D3CE69A0CEC392550E672F3C14603206D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 0499
Signing time: Mon 30 Mar 2026 04:00:38 +0000
Manifest this update: Mon 30 Mar 2026 04:00:38 +0000
Manifest next update: Tue 31 Mar 2026 04:00:38 +0000
Files and hashes: 1: IM21zWEfSOh921Z1zwkT3vvGFfs.roa (hash: W640/PCpAKPhrBYklv0d8kY3i3xSr0Wn6L53wsJDrnQ=)
2: b9vcmhhWmTdDD16HAHP6D8RbDkA.roa (hash: FBfH9P35YtWY9xE6pYzf6Mz1MG4bSL4q1phGJQRtJTw=)
3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: nIekdp5AMapYIKyREUijDvkVBXBN/bPTMJNAhGNgZOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3c:e6:9a:0c:ec:39:25:50:e6:72:f3:c1:46:03:20:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Mar 30 04:00:38 2026 GMT
Not After : Mar 31 04:00:38 2026 GMT
Subject: CN=bd4d49609f78348785fbfb30de47f0aa6eaab7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:4e:ca:9c:d1:6b:66:fd:78:ff:38:fe:e7:
65:50:d8:1b:f5:d3:87:8e:4e:80:bc:b9:2b:f5:b4:
38:e0:5d:55:75:96:e9:71:e3:01:1f:0c:0d:05:37:
f0:85:9f:cf:b0:23:b0:cf:87:a7:5e:fa:9b:25:f4:
47:1a:41:49:8b:bc:92:30:a3:df:59:dc:d2:fa:77:
a5:d7:08:f9:db:9c:4b:12:99:76:40:8d:33:aa:fd:
93:95:64:40:ae:4a:39:ea:87:ca:ba:ce:98:f2:f3:
4d:fb:b4:2f:61:c5:bb:79:c7:60:d3:c0:9c:c6:f1:
f8:7e:35:33:9a:ef:83:4a:09:3a:4e:0d:2c:e1:97:
5f:5c:e2:f8:16:28:49:8f:0a:86:b9:c4:8c:bd:34:
b1:a7:38:b8:fb:c1:10:48:d5:12:5a:d5:20:c9:82:
a2:c6:58:ce:81:2e:2a:12:6f:61:87:0a:46:72:5d:
c5:23:15:1a:90:33:76:76:8b:a2:6b:82:c3:25:23:
83:6a:64:c8:e4:59:eb:9d:78:cc:92:2c:6e:7a:98:
98:ad:44:2e:6e:62:e4:f9:6c:8e:11:bf:1a:6e:bb:
fe:bf:a2:e9:bf:4f:c8:2f:b6:7a:c6:63:a6:7b:0d:
3a:8a:f5:99:d5:80:51:92:63:5f:0a:18:fd:f3:c5:
0b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4D:49:60:9F:78:34:87:85:FB:FB:30:DE:47:F0:AA:6E:AA:B7:B1
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ea:fb:93:01:b3:46:29:8d:28:76:b5:71:eb:af:b9:e5:e4:
5e:e1:8e:08:46:f2:d2:af:07:1b:a5:e0:02:ea:e5:af:d5:f6:
45:21:a2:0f:95:d4:41:f4:49:d7:f4:54:e3:a6:8b:0d:9b:9e:
98:c8:29:6e:71:99:5c:f6:46:b2:0a:7a:12:4e:5c:56:0d:43:
5a:62:bd:1a:90:8f:14:b4:d2:d8:10:00:6b:50:50:c8:04:13:
66:dd:f4:e2:ad:58:e6:73:52:f6:02:49:c8:f6:9f:f9:79:e1:
e8:34:cf:44:5d:2e:fb:9a:5e:16:45:4f:04:8e:92:42:4f:c8:
10:95:b1:57:e4:02:c2:d2:ae:cb:d2:78:ae:da:86:10:62:27:
49:ef:82:89:bc:08:15:d5:a9:f1:fc:ba:9f:eb:1b:ac:47:4d:
6a:a1:46:ba:6c:57:1b:c4:85:e0:a1:b5:be:bd:eb:79:19:18:
1c:76:4b:d7:32:4f:0d:02:01:6e:6d:fa:56:4a:0b:d6:55:31:
2d:39:19:85:c9:26:67:46:6e:e6:d7:d8:61:17:c9:01:3f:5e:
08:c4:8a:18:b9:24:f9:9d:42:c7:00:d7:4c:5f:2e:6f:85:1f:
e2:00:02:60:60:24:8d:ee:ea:eb:23:db:bb:d5:f6:5d:ed:fd:
2d:95:de:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 08:39:43 2026 by rpki-client