Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
File: lzDCc6-etVZkMIjkO-86ahgch8I.mft (raw, json)
Hash identifier: CWgOAeFu3GF34PvrP0JzcMBEBhU/nTCjC/TzBws4lQE=
Subject key identifier: 9C:A9:59:DF:51:0D:B4:F6:83:D0:E5:D3:E9:A1:29:FE:4D:BB:82:67
Authority key identifier: 97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
Certificate issuer: /CN=9730c273af9eb556643088e43bef3a6a181c87c2
Certificate serial: 019F8EA27F8CB31504AFCEA60C4C81480144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
Manifest number: 01B7
Signing time: Thu 23 Jul 2026 11:00:41 +0000
Manifest this update: Thu 23 Jul 2026 11:00:41 +0000
Manifest next update: Fri 24 Jul 2026 11:00:41 +0000
Files and hashes: 1: LftAIu9k2wnzZP9QfqBNpPsB7GA.asa (hash: oB3unSja7fyioWETroS2ws+p/jX5s1fLimygzH+96YE=)
2: lzDCc6-etVZkMIjkO-86ahgch8I.crl (hash: GiK45/822KYOo6nlDH0Dlsv3iJd/ckbIxFtZExuLqVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:7f:8c:b3:15:04:af:ce:a6:0c:4c:81:48:01:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9730c273af9eb556643088e43bef3a6a181c87c2
Validity
Not Before: Jul 23 11:00:41 2026 GMT
Not After : Jul 24 11:00:41 2026 GMT
Subject: CN=9ca959df510db4f683d0e5d3e9a129fe4dbb8267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:f7:6b:34:fe:a7:9b:33:ed:74:f0:6d:b2:
8c:cf:c5:a2:1b:24:21:d7:42:84:20:cb:9f:c0:31:
77:ae:af:66:56:b8:9c:ff:37:5f:ba:0a:a3:7f:4c:
ee:64:11:ce:da:c2:3f:8e:a9:58:a1:e5:d9:c9:9f:
ac:65:f7:39:af:e0:7f:10:c4:9b:dd:8b:8e:85:56:
21:cc:4c:3b:e2:5f:66:42:60:64:3d:29:24:6e:e4:
ff:1a:d3:2f:49:63:2c:a9:43:a8:2a:ab:df:03:e2:
21:15:d4:62:ca:f2:a8:c0:86:4e:68:c9:f2:a9:4a:
d5:1d:41:02:0b:98:b3:66:32:43:4c:bc:04:22:7f:
98:35:29:e9:44:7f:be:6e:33:cf:6f:d2:af:7c:e3:
9e:1a:3b:81:9e:f7:49:4a:97:19:f6:aa:d2:34:65:
ba:51:b8:45:4b:93:80:e3:d2:99:ea:df:9a:54:81:
6b:ae:ae:a2:dd:57:85:ba:2e:5c:7c:49:25:4a:19:
ef:98:79:bf:62:2b:6e:10:7a:4e:9e:ba:75:d4:dc:
c8:2c:4a:4e:d7:31:63:50:d4:64:05:f7:2a:f1:6b:
4e:67:73:4e:7f:52:6e:dd:f8:61:73:2a:54:43:7f:
bd:a8:9b:04:22:2d:e8:bb:04:d8:82:50:7f:b1:c1:
94:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A9:59:DF:51:0D:B4:F6:83:D0:E5:D3:E9:A1:29:FE:4D:BB:82:67
X509v3 Authority Key Identifier:
keyid:97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:00:af:7a:bf:29:e9:7b:a2:aa:90:ca:c3:27:ee:59:f2:dc:
72:97:cc:79:d3:2a:07:2f:88:3c:48:39:f1:01:cc:e4:04:5f:
08:e2:ae:ba:ad:d4:b3:72:4d:3d:5e:b4:ee:4d:08:96:38:5b:
8b:80:33:09:d2:76:fb:e5:10:0d:bd:34:4a:f1:6f:6c:63:09:
0e:d0:96:87:f2:40:a7:ee:a0:ee:83:f6:63:af:57:48:3e:8b:
de:d2:21:5a:a9:77:a5:de:d1:0c:3e:f1:9b:f6:19:c0:c7:b7:
16:50:39:4b:93:3a:87:16:67:78:5a:39:81:0b:42:d5:8c:d0:
2f:6b:a7:10:32:37:a9:24:9d:02:68:da:80:5a:0d:2c:ab:90:
8b:4d:66:41:d7:59:79:5a:ac:db:39:25:76:79:4d:47:93:e8:
0d:8d:9d:d1:48:07:9c:34:b2:22:6f:99:92:60:f1:0f:78:d5:
57:62:0c:83:89:ef:df:6f:08:94:78:06:6e:64:c1:2f:20:79:
4b:0e:fd:50:8b:14:1b:fc:45:a8:8a:24:01:c9:45:c1:a4:a8:
9e:6d:5a:2d:9c:0f:8a:53:c4:88:83:52:58:f0:4e:b6:5e:9a:
98:f0:89:1d:70:5d:c0:ec:56:6e:fd:aa:16:43:36:de:67:25:
10:cf:46:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:09:46 2026 by rpki-client