Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
File: LzQYB_ILBFGcVSuzjONykUt8w0U.mft (raw, json)
Hash identifier: /AKV2yFRHBsieAPagmXzosivvGaawGvexlDgv2XajXg=
Subject key identifier: 9E:72:15:8B:E2:CC:3C:09:29:EB:E9:E8:62:26:AB:B4:FC:6D:47:96
Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
Certificate issuer: /CN=2f341807f20b04519c552bb38ce372914b7cc345
Certificate serial: 019D2772A691B00805B7A0657E5CCC5B00E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
Manifest number: 1817
Signing time: Thu 26 Mar 2026 00:01:58 +0000
Manifest this update: Thu 26 Mar 2026 00:01:58 +0000
Manifest next update: Fri 27 Mar 2026 00:01:58 +0000
Files and hashes: 1: LzQYB_ILBFGcVSuzjONykUt8w0U.crl (hash: OtGS9STKZ6JlVb5zFLpg+qCyqscUayDGpZEwTfL6cRI=)
2: MP5fwJ2kgaZRpvM723kXW1TGyuQ.roa (hash: 3o1b+cqzLxMPAxiZfWRR+nsYECaSogtgZoDIe2bwcaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a6:91:b0:08:05:b7:a0:65:7e:5c:cc:5b:00:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345
Validity
Not Before: Mar 26 00:01:58 2026 GMT
Not After : Mar 27 00:01:58 2026 GMT
Subject: CN=9e72158be2cc3c0929ebe9e86226abb4fc6d4796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:09:1a:c3:bc:71:0d:8f:8c:d7:a9:13:c9:
ed:fc:03:22:80:b4:ce:02:7e:c6:b5:b0:eb:ce:5e:
07:0c:30:34:8c:d3:d9:e2:f0:07:03:1b:df:76:d7:
c1:a0:62:31:fe:21:ad:ff:84:9d:6c:f1:c5:48:5e:
60:17:ea:96:14:83:e3:b7:a5:02:08:5a:8d:6a:b8:
d0:0c:3e:3f:97:ad:2a:be:de:9c:1d:c0:27:8a:80:
be:d0:ea:b2:3e:8b:78:e8:c0:73:3b:6a:f1:d1:94:
b2:db:31:5e:2f:68:07:18:6a:c7:49:28:71:c0:26:
57:8c:15:91:f7:aa:d1:f0:21:42:d5:54:e0:31:d9:
51:13:c5:b9:44:f2:bf:0f:f0:3e:d1:88:5b:60:1e:
ef:7e:c3:f7:1f:a2:2e:4e:41:3f:5b:c4:8e:df:d8:
9a:16:3a:8c:29:2e:25:e8:fd:7d:3b:1d:b1:f0:95:
c0:35:be:dc:69:fc:98:24:70:f7:9d:77:81:24:7d:
ac:e0:08:eb:91:2b:3f:dc:10:58:25:87:be:31:11:
66:0f:c1:4d:df:3c:b4:0b:c2:7f:2d:68:8e:13:7e:
a9:09:43:df:d7:c7:cc:03:d4:f0:c0:67:9c:76:c0:
70:16:6a:c9:15:f1:c6:6d:26:1e:10:1d:f4:6d:d7:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:72:15:8B:E2:CC:3C:09:29:EB:E9:E8:62:26:AB:B4:FC:6D:47:96
X509v3 Authority Key Identifier:
keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ce:d5:b1:b2:09:0e:26:1c:79:27:d2:0a:71:7e:b4:ff:5f:
77:61:c5:85:69:64:05:5f:98:4f:b8:42:d3:3d:7b:cb:0f:c0:
53:7a:1a:7b:cd:0e:2d:22:67:1b:92:e8:55:8e:07:01:df:ed:
c0:0d:8e:81:d4:ab:fb:1a:e9:b6:9d:d1:82:5f:bc:db:99:2d:
3f:f1:d5:77:9f:24:83:3c:39:94:27:d6:bf:8b:67:6a:23:fe:
da:e1:19:71:5b:23:bc:da:0e:2d:20:23:e7:18:47:72:84:47:
47:16:39:20:8d:8a:6f:95:65:c3:5c:ac:ce:78:d8:63:2d:64:
f0:3d:a5:50:04:20:35:1f:38:44:b5:62:41:d0:6b:62:ff:99:
cb:1d:7e:ae:45:9e:28:b0:34:1a:cc:dd:3c:2b:62:7b:48:64:
58:38:97:85:72:79:20:c6:66:07:ce:ea:bd:aa:59:a8:fb:dd:
0b:6e:3c:03:68:69:b5:cc:ec:23:af:d9:9c:a7:34:ff:43:13:
27:5e:aa:ee:c3:fb:b1:09:62:20:7d:75:5b:4e:23:0b:95:ed:
7b:fc:de:f0:ff:28:c1:ac:f9:55:09:82:00:e0:75:3b:9f:ac:
96:5f:b8:42:04:0f:d7:9a:38:8d:1e:db:fb:52:54:a6:6a:41:
2c:03:e2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:04 2026 by rpki-client