Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: qHT5I/xuJF8PDQ6zr06zNZDXs5EFvRkI+gWzD39ch0g=
Subject key identifier: 05:02:C5:37:6D:24:2B:95:16:C3:D6:41:82:B2:D7:F1:0B:71:80:87
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 01A0DBDFF9A4AD328D199712E08D98DF94D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 0679
Signing time: Sat 26 Sep 2026 04:01:23 +0000
Manifest this update: Sat 26 Sep 2026 04:01:23 +0000
Manifest next update: Sun 27 Sep 2026 04:01:23 +0000
Files and hashes: 1: IM21zWEfSOh921Z1zwkT3vvGFfs.roa (hash: W640/PCpAKPhrBYklv0d8kY3i3xSr0Wn6L53wsJDrnQ=)
2: b9vcmhhWmTdDD16HAHP6D8RbDkA.roa (hash: FBfH9P35YtWY9xE6pYzf6Mz1MG4bSL4q1phGJQRtJTw=)
3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: Y0yMsDvAlnvCli4yYV9QfQhZn+12t/1p69CZlVzgE3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:f9:a4:ad:32:8d:19:97:12:e0:8d:98:df:94:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Sep 26 04:01:23 2026 GMT
Not After : Sep 27 04:01:23 2026 GMT
Subject: CN=0502c5376d242b9516c3d64182b2d7f10b718087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:66:52:4a:6a:14:e5:5a:ae:42:78:22:77:
02:ef:02:f9:e0:94:66:67:e0:e6:d9:83:1a:c7:48:
40:32:03:9b:11:7d:4f:00:19:38:d4:c5:82:c6:96:
5a:f5:b3:21:2d:63:29:0b:9f:f1:8b:c4:08:87:b9:
73:b2:fa:11:0e:12:15:5f:d4:ba:08:9c:a5:73:44:
92:d5:b2:64:47:c4:2a:74:ff:72:45:6e:2e:44:2d:
c3:b8:c7:c1:0e:9e:54:c3:20:d5:2b:90:0b:b7:bc:
c8:d4:9f:d9:ea:ec:2f:c6:0e:5d:39:46:51:ce:e3:
69:49:38:ab:21:c6:19:2b:59:9e:48:4a:ff:30:4d:
fd:0f:8b:d0:26:2a:5a:5f:42:6a:71:f6:d8:24:26:
7d:d3:3e:fc:2a:2e:40:37:5d:23:04:7f:d3:5d:fa:
d5:0e:c0:3d:37:55:c2:da:f8:08:03:49:28:12:ff:
be:ac:49:75:0c:d3:e7:2a:4d:c1:09:75:eb:5f:82:
90:af:5e:3a:da:07:e6:48:fd:9e:3b:d3:0d:b6:78:
a1:7d:74:73:5f:42:10:4f:6e:0e:2a:f2:f9:34:46:
0b:ae:63:06:34:1d:20:60:34:34:bb:e3:6b:25:7f:
93:a2:bd:83:20:cb:80:98:9d:70:20:89:8f:dd:71:
d8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:02:C5:37:6D:24:2B:95:16:C3:D6:41:82:B2:D7:F1:0B:71:80:87
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b9:5d:01:b3:58:93:df:73:1b:bf:ba:29:6d:92:6f:67:58:
98:e5:58:93:1e:23:51:24:0f:21:8e:d8:f8:7e:a2:ac:bd:8f:
a1:12:02:1f:da:7a:3f:f4:99:5e:09:8e:30:4a:83:de:33:5d:
b3:e8:00:76:07:4e:44:3f:06:ae:98:61:bb:1c:c3:54:62:10:
2d:04:93:6f:15:be:99:bd:a6:04:aa:78:72:42:c2:e0:ba:30:
f0:9f:23:be:5c:dd:89:17:e9:a2:00:ca:75:a9:dc:25:83:fc:
73:a7:8b:b5:80:54:7e:ff:8b:c3:9b:59:a9:25:8a:d3:e3:d8:
fd:06:2f:a5:bd:4c:c2:51:b7:ec:f1:75:d6:13:3e:d1:ff:c5:
64:1b:70:11:2b:69:86:a0:6b:f3:0a:1d:9f:68:c1:44:f9:ef:
40:84:89:34:6f:1a:ff:92:5d:28:62:c4:46:46:9f:5e:b5:3f:
80:07:8a:91:a8:17:4a:e2:7a:69:4e:a3:54:cc:2d:51:a7:83:
f5:30:5b:67:60:6b:c9:7f:e1:a9:63:36:39:80:e9:01:32:99:
8b:f7:9c:03:4a:9d:b8:57:6a:6e:67:05:1e:22:6c:a5:f0:59:
db:d1:39:43:36:73:87:98:73:7c:d2:0c:67:30:cc:92:bc:50:
24:56:ba:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:44:51 2026 by rpki-client