Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
File: lzDCc6-etVZkMIjkO-86ahgch8I.mft (raw, json)
Hash identifier: VGgS90AbpVgehhPxKmM3CcTHeb8D9hLBI96udNNGda0=
Subject key identifier: 19:B4:48:52:2E:61:1B:A1:D8:8B:9F:C4:62:FD:C4:EB:BC:00:5C:0C
Authority key identifier: 97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
Certificate issuer: /CN=9730c273af9eb556643088e43bef3a6a181c87c2
Certificate serial: 019D24DE63BF559FBDADD8B09049E298C3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
Manifest number: 77
Signing time: Wed 25 Mar 2026 12:00:47 +0000
Manifest this update: Wed 25 Mar 2026 12:00:47 +0000
Manifest next update: Thu 26 Mar 2026 12:00:47 +0000
Files and hashes: 1: LftAIu9k2wnzZP9QfqBNpPsB7GA.asa (hash: oB3unSja7fyioWETroS2ws+p/jX5s1fLimygzH+96YE=)
2: lzDCc6-etVZkMIjkO-86ahgch8I.crl (hash: vqfNHLeQTrntgbO3iojo7VcnCBRes37tvr4dH3CsgRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:63:bf:55:9f:bd:ad:d8:b0:90:49:e2:98:c3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9730c273af9eb556643088e43bef3a6a181c87c2
Validity
Not Before: Mar 25 12:00:47 2026 GMT
Not After : Mar 26 12:00:47 2026 GMT
Subject: CN=19b448522e611ba1d88b9fc462fdc4ebbc005c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:01:7e:7a:a6:02:bf:88:99:d3:d3:34:3b:
c3:3c:ce:04:1c:34:a8:99:ee:6d:8f:e9:10:a4:28:
fd:bd:55:84:28:ba:c1:4d:a5:61:c1:f6:fa:e0:f4:
a9:28:8a:2f:2b:c3:e4:76:62:cf:69:f3:e2:50:da:
cb:1d:40:3e:3d:76:a4:5c:82:3b:31:4e:0e:9d:df:
6a:77:7c:7a:5e:40:02:99:2e:ef:b2:13:61:96:e8:
65:e0:ab:4e:c9:aa:7f:27:cb:b1:a2:b9:ab:03:2d:
a8:cb:eb:d0:a4:52:9f:29:e5:5c:16:88:55:7a:34:
6b:9e:fd:be:4f:a2:7d:71:6a:2c:05:ee:28:0d:86:
0e:90:3a:cd:a7:93:01:06:b1:9e:c0:c3:6e:17:b6:
d6:8f:6a:1d:1e:19:ec:46:59:29:a1:c1:bf:67:4d:
47:2e:d2:8a:96:a4:aa:d5:13:50:ed:a8:fa:c1:3c:
e9:d1:c2:66:78:16:47:de:a1:ff:cd:b5:b9:52:12:
ad:ee:df:60:d8:f1:e8:60:ba:8f:60:a7:f6:2d:56:
30:79:77:58:e3:51:dd:57:d9:63:c5:fd:b8:40:13:
bc:62:3f:f7:8c:09:8f:1c:35:bb:2b:fb:a2:f1:4b:
9f:de:39:dc:23:f0:42:0b:c3:43:0b:3b:9e:5d:88:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B4:48:52:2E:61:1B:A1:D8:8B:9F:C4:62:FD:C4:EB:BC:00:5C:0C
X509v3 Authority Key Identifier:
keyid:97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:38:b9:f7:94:92:f9:91:c8:04:66:79:f2:a8:f4:be:bb:d1:
b6:64:2e:0d:ec:ef:5f:c2:08:21:df:4d:b7:fb:2e:4e:22:ec:
a7:33:3a:a1:21:8a:02:7d:b0:b0:f8:a7:75:a3:97:44:1b:1c:
61:ab:fb:3c:b1:8e:bb:00:0d:ca:6f:16:ff:46:da:59:86:bc:
9e:75:67:b6:90:9e:36:d7:4f:94:2e:48:3e:c1:41:37:94:9b:
5e:4f:7b:2b:29:de:c7:63:4d:f7:36:ac:ec:8d:c1:36:57:25:
4d:de:c5:95:b0:fe:f2:8c:68:b2:0d:e2:ad:fb:d3:c7:e4:46:
64:ba:fe:f5:64:93:6b:c6:79:33:3d:6b:92:7c:ff:0f:8d:c0:
0e:f7:e0:2a:4d:6a:0f:44:73:72:d8:de:96:26:1c:da:04:5d:
c3:ef:cf:74:61:70:3b:13:9f:d0:9d:0d:4f:04:6a:e0:4c:7f:
2c:1b:2c:49:8a:5c:f1:b8:07:8c:5e:88:c2:6c:68:c1:f1:9f:
a4:81:71:95:d8:33:58:f4:97:c4:10:65:4e:ab:11:cf:5f:10:
f7:f7:fd:c8:1b:37:e0:e4:ef:27:11:47:67:21:9b:94:89:b4:
87:e6:46:5a:71:d9:d2:ed:ab:0e:0c:14:a2:33:70:ad:37:45:
f9:92:03:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:12 2026 by rpki-client