Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier: kDc3t6tOhAc9vXkRLEoCfP7KTaxLDsHvpk7AGigJqOE=
Subject key identifier: 33:40:54:E8:82:9D:65:B4:53:07:B9:9A:05:87:CB:34:C5:7D:BB:0A
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 019D2A048295BB8CE7190CFD09C3CECB6DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 12:00:31 +0000
Manifest this update: Thu 26 Mar 2026 12:00:31 +0000
Manifest next update: Fri 27 Mar 2026 12:00:31 +0000
Files and hashes: 1: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: +Qqy/j5v2T4BSoD7oNKPR0cm4Nq7pGRgU/wF8ZbaM5g=)
2: cbu2nsq0_E-KnigNEJpP4D0mZdA.roa (hash: atZeFfSMWx6yJCaBl0p4VHQ5do/K238XneHi5TYWvrI=)
3: kAVnp8aXF-jNnIEpkFtrGOjA71Q.roa (hash: ZozqlRSOeS+zKJOBns48YstVdkSISYcGeUrQVUA0HJM=)
4: nUrWqoPlEcK0XKJOG-oMfsZtnp8.roa (hash: ybZD4RQkjzxlQtQy6MswWNgOU2zvBWHPKmFz1vKMzKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:82:95:bb:8c:e7:19:0c:fd:09:c3:ce:cb:6d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: Mar 26 12:00:31 2026 GMT
Not After : Mar 27 12:00:31 2026 GMT
Subject: CN=334054e8829d65b45307b99a0587cb34c57dbb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:93:7a:0b:62:0c:05:d0:2c:e7:cb:20:f4:
b4:6f:2f:74:e1:e4:57:8b:24:0c:a1:08:20:07:11:
a2:4d:83:7f:2e:8c:56:ed:a1:a1:c9:2e:38:b9:f7:
2f:14:f6:41:7a:00:6b:01:7b:3c:00:66:17:9e:8c:
bf:3a:6f:fb:e3:49:30:fb:df:97:58:cc:44:bd:f1:
e4:50:cb:3d:00:aa:a8:43:a0:49:8d:76:72:3d:e6:
4f:97:40:39:8e:5e:37:f0:9c:0d:f0:4c:d4:4f:8b:
d5:9a:b2:86:ce:64:c7:65:ab:28:9a:65:04:bb:21:
00:72:cd:66:f5:d4:e3:86:7f:5b:87:ad:d5:a7:58:
7e:e8:bc:6a:25:a5:fb:06:85:7a:07:b0:ea:19:3a:
51:a2:34:d0:5b:58:c4:c5:fb:8e:9d:35:07:37:23:
09:60:02:9f:d1:78:06:2a:46:bf:e7:a9:03:09:72:
60:47:0e:92:71:b4:58:12:e4:a6:d4:a8:47:95:64:
54:e5:f0:75:bc:41:0e:7d:7f:cc:2d:ea:df:aa:41:
b9:cb:49:55:96:0b:de:bb:b8:aa:b4:7f:8c:ad:80:
38:15:96:90:2b:08:37:37:69:e7:62:e4:ec:f2:90:
6a:19:92:16:11:0b:52:f4:1b:b4:88:61:bc:7e:eb:
52:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:40:54:E8:82:9D:65:B4:53:07:B9:9A:05:87:CB:34:C5:7D:BB:0A
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:76:47:e6:a9:5e:b8:e3:26:99:7b:24:da:eb:01:29:5f:f7:
07:49:c7:e3:ec:0e:3e:32:71:ac:19:60:e2:f3:4e:1c:bf:43:
15:74:f9:52:4a:42:57:1a:86:ea:3a:4a:7f:fe:8b:76:79:ab:
83:f1:0c:e8:d3:8d:11:c5:d1:32:50:ad:d4:c9:89:79:45:ec:
c2:f6:0e:84:c3:b2:56:e2:6c:c7:3b:c7:5c:be:5b:5b:e6:76:
ff:76:9f:3e:b5:a2:15:c4:bf:df:bb:da:a0:c8:c9:b8:f6:df:
e5:7e:20:a9:b4:22:5b:80:41:1d:1c:c2:54:6c:a3:2c:37:09:
96:41:07:20:8b:45:10:e7:e2:4f:80:49:c4:d6:6d:82:1f:21:
43:88:62:e9:1c:9a:c8:37:55:30:10:0a:60:cb:00:88:5a:78:
5a:f1:5f:40:71:2d:e7:c2:40:2b:dd:c2:19:63:28:77:bd:23:
69:74:db:e3:34:de:13:47:4a:4b:f3:46:fe:7f:ee:56:0a:eb:
1a:06:08:f9:38:8a:3a:0b:a5:04:62:5e:e6:53:4d:97:ea:97:
3e:63:c8:d8:6a:e2:bb:92:91:81:ed:8c:a5:3d:a1:ea:31:ac:
2e:0a:db:47:db:17:99:44:da:df:3b:e0:74:1c:ea:7e:21:0b:
5a:c0:9a:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBIKVu4znGQz9CcPOy22/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkOWUzMWM5MDI5ZWU0NGJkNjgxYjUxNTMzMDMzNWM2YTFj
ZmRlZWUwHhcNMjYwMzI2MTIwMDMxWhcNMjYwMzI3MTIwMDMxWjAzMTEwLwYDVQQD
EygzMzQwNTRlODgyOWQ2NWI0NTMwN2I5OWEwNTg3Y2IzNGM1N2RiYjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzKTegtiDAXQLOfLIPS0by904eRX
iyQMoQggBxGiTYN/LoxW7aGhyS44ufcvFPZBegBrAXs8AGYXnoy/Om/740kw+9+X
WMxEvfHkUMs9AKqoQ6BJjXZyPeZPl0A5jl438JwN8EzUT4vVmrKGzmTHZasommUE
uyEAcs1m9dTjhn9bh63Vp1h+6LxqJaX7BoV6B7DqGTpRojTQW1jExfuOnTUHNyMJ
YAKf0XgGKka/56kDCXJgRw6ScbRYEuSm1KhHlWRU5fB1vEEOfX/MLerfqkG5y0lV
lgveu7iqtH+MrYA4FZaQKwg3N2nnYuTs8pBqGZIWEQtS9Bu0iGG8futSHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNAVOiCnWW0Uwe5mgWHyzTFfbsKMB8GA1UdIwQY
MBaAFC2eMckCnuRL1oG1FTMDNcahz97uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMt
MDhkYTY2NTJhODY3LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMtMDhkYTY2NTJhODY3
LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3ZH5qle
uOMmmXsk2usBKV/3B0nH4+wOPjJxrBlg4vNOHL9DFXT5UkpCVxqG6jpKf/6Ldnmr
g/EM6NONEcXRMlCt1MmJeUXswvYOhMOyVuJsxzvHXL5bW+Z2/3afPrWiFcS/37va
oMjJuPbf5X4gqbQiW4BBHRzCVGyjLDcJlkEHIItFEOfiT4BJxNZtgh8hQ4hi6Rya
yDdVMBAKYMsAiFp4WvFfQHEt58JAK93CGWMod70jaXTb4zTeE0dKS/NG/n/uVgrr
GgYI+TiKOgulBGJe5lNNl+qXPmPI2Griu5KRge2MpT2h6jGsLgrbR9sXmUTa3zvg
dBzqfiELWsCaEg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:41:36 2026 by rpki-client