Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json)
Hash identifier: SfyNC7LitPN/G28+0dsSGcHlB8GscFwFZu41wmP5PmY=
Subject key identifier: C3:BD:5B:D4:41:1C:95:1A:16:24:A7:16:3E:13:CD:F6:AD:B5:57:3F
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 019D2A3BA1AE89829F8CA49467F344646A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 13:00:44 +0000
Manifest this update: Thu 26 Mar 2026 13:00:44 +0000
Manifest next update: Fri 27 Mar 2026 13:00:44 +0000
Files and hashes: 1: GOIVhBnn15XT5eXlASEvxn2hNDw.roa (hash: AmDJ5Odj0fdYze4B6QAdyi2ODpezKvZwj7zUISc+vO0=)
2: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: 8Eyc4RqFkU5Yr/Mjo52zH0TYDCFw66iY7gpwSxSvonc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:a1:ae:89:82:9f:8c:a4:94:67:f3:44:64:6a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Mar 26 13:00:44 2026 GMT
Not After : Mar 27 13:00:44 2026 GMT
Subject: CN=c3bd5bd4411c951a1624a7163e13cdf6adb5573f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:52:2b:34:9e:bd:9b:fa:ab:dd:8c:a9:42:
9c:a1:6f:08:d0:85:76:bc:ce:2d:5f:0d:a1:ca:88:
c3:5d:23:77:6b:a0:3e:b1:be:5b:f0:50:e2:dc:b9:
a6:04:fa:57:44:16:98:be:cc:1c:c2:06:0e:57:98:
98:78:0b:3d:41:1a:74:79:0d:f8:6f:35:86:68:7c:
49:a7:24:25:ea:47:5e:a4:7a:4d:f2:3c:db:a8:f8:
b0:54:8b:d5:30:45:80:67:7e:19:69:71:da:ea:d4:
1f:68:f8:73:37:14:a9:82:80:da:8a:18:19:7d:d5:
96:48:1c:62:55:f8:4b:97:7d:7f:9b:3b:1d:b8:e3:
e0:ac:d9:ea:95:c5:ae:f0:a0:a3:17:90:ae:3b:a2:
4a:0a:81:17:40:64:75:f3:cc:72:0a:c6:ff:55:60:
c1:9e:d4:5f:87:d3:a5:8f:67:f7:75:85:d6:bd:d7:
4d:9a:bc:92:97:59:e8:33:dc:b9:12:13:f3:f4:36:
e3:bd:98:bd:16:85:2c:65:04:a2:0f:1b:cf:35:37:
af:bf:4d:4c:7f:b5:3e:bc:06:d0:d5:47:74:57:d3:
20:aa:62:7d:c6:57:e6:16:1c:de:e6:f3:8c:95:cd:
34:47:3e:6e:9d:8e:9f:e7:0b:99:9e:cc:1f:7c:d8:
f2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BD:5B:D4:41:1C:95:1A:16:24:A7:16:3E:13:CD:F6:AD:B5:57:3F
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a8:7d:02:39:92:ce:f1:17:fc:02:30:f7:42:7b:d3:86:44:
c0:99:50:33:89:04:e9:27:8a:9a:f3:c1:e8:f1:2c:2a:a1:29:
12:f7:c7:8a:de:a5:a6:03:af:53:8f:0e:f0:19:64:1d:1e:f5:
92:51:f6:bd:07:4a:df:2c:df:85:e1:a2:69:11:ab:1c:29:93:
5f:c7:b4:8c:5a:6c:80:87:67:de:45:45:f7:10:d7:1f:cb:25:
90:54:cc:4a:d1:43:3b:68:de:81:12:1e:d9:76:7a:96:f3:c5:
e9:5e:2a:c4:37:11:19:5c:06:c8:f9:ff:e9:04:d5:ab:b8:b6:
01:6e:c7:26:6e:db:5f:3a:b4:b3:e5:85:d8:ee:27:43:b3:17:
b0:f0:35:45:e6:15:e7:a0:ff:e8:52:42:d2:5c:b2:80:47:57:
55:83:1f:b4:c9:0f:e7:f7:aa:c4:05:ee:af:7b:c0:22:f7:cf:
c2:4e:9c:8f:c6:5c:6a:e8:4c:d3:7b:bc:85:3d:88:0d:7f:ab:
de:a2:8a:4c:df:00:54:2b:1b:f8:9c:d8:c7:89:9c:3c:64:36:
b0:9d:d9:ef:fc:bf:5f:a4:e9:fc:9a:ac:fd:ec:0a:5e:b7:ab:
94:0a:34:7b:02:8c:91:dd:64:84:7b:de:9a:15:fc:61:97:08:
e7:8d:02:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:27:57 2026 by rpki-client