Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
File: LZKAom-DFWYViyYXyV0Z0zjuFdM.mft (raw, json)
Hash identifier: wXcVk4HC0OCdX8JV3vOycU5G2TiBKTGEgzzybBayDcI=
Subject key identifier: 67:5B:E5:D6:08:3F:C9:CE:B0:40:E4:59:50:BA:B0:7B:68:B2:B8:AE
Authority key identifier: 2D:92:80:A2:6F:83:15:66:15:8B:26:17:C9:5D:19:D3:38:EE:15:D3
Certificate issuer: /CN=2d9280a26f831566158b2617c95d19d338ee15d3
Certificate serial: 019D27A8A81ACD99DDBCCCC44F66D93DAD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
Manifest number: 059B
Signing time: Thu 26 Mar 2026 01:00:57 +0000
Manifest this update: Thu 26 Mar 2026 01:00:57 +0000
Manifest next update: Fri 27 Mar 2026 01:00:57 +0000
Files and hashes: 1: LZKAom-DFWYViyYXyV0Z0zjuFdM.crl (hash: apLOXZE16/GWlR7qYBiqwAOTOYICOAYEAx9cOhBUkRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a8:1a:cd:99:dd:bc:cc:c4:4f:66:d9:3d:ad:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9280a26f831566158b2617c95d19d338ee15d3
Validity
Not Before: Mar 26 01:00:57 2026 GMT
Not After : Mar 27 01:00:57 2026 GMT
Subject: CN=675be5d6083fc9ceb040e45950bab07b68b2b8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:bc:c6:5e:cc:9d:c9:09:c5:68:3c:54:56:
aa:2d:7a:fd:42:8c:a3:45:6c:e4:6e:aa:44:e5:8e:
60:b8:a0:99:72:1a:ce:39:16:ac:1a:26:5d:61:f0:
72:72:ee:65:6d:f0:0e:9d:e1:8a:a2:1d:7b:80:1e:
ca:c3:68:78:64:5c:3f:72:8a:af:4b:dd:c2:63:b5:
f0:08:c6:37:d2:6d:fb:9c:cb:96:25:58:c9:3b:fb:
0f:97:01:8a:02:3b:5c:5e:7a:a3:b6:73:8f:4a:13:
38:40:14:db:04:d2:d3:75:b2:24:11:06:8d:e8:21:
a8:d5:e4:43:03:31:9f:3d:a7:b9:b7:ee:1c:83:e0:
68:a6:b9:46:4f:22:9c:3b:91:34:fd:08:b3:7f:90:
39:bd:4e:4e:f6:03:82:de:f7:cd:78:83:3c:3f:7b:
4a:c7:47:ad:62:d0:fd:34:69:e6:c6:8a:41:38:09:
44:66:45:77:7b:a7:f2:31:8b:83:e7:ff:be:f6:c9:
f7:9f:63:20:58:40:aa:08:ba:53:8b:31:90:20:7c:
c2:b8:74:54:15:f6:58:9a:7e:32:84:10:26:e1:5c:
37:ba:6e:15:18:bc:e0:df:87:5e:80:8b:fc:28:ce:
0f:e3:94:4c:16:d3:1a:48:82:86:0f:b9:b3:e3:f8:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5B:E5:D6:08:3F:C9:CE:B0:40:E4:59:50:BA:B0:7B:68:B2:B8:AE
X509v3 Authority Key Identifier:
keyid:2D:92:80:A2:6F:83:15:66:15:8B:26:17:C9:5D:19:D3:38:EE:15:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:21:1a:86:cd:f5:00:f3:2f:40:32:f0:71:0b:04:40:99:47:
1e:b3:e1:aa:87:89:48:6a:7c:a7:66:49:27:87:e0:63:df:f1:
25:2a:cc:6f:2e:00:f4:84:cd:da:9b:b8:ef:79:cb:82:9c:a0:
a7:92:3e:74:a2:a9:f1:fc:6e:1b:b4:53:1a:77:dd:42:ff:6e:
bc:4e:94:e2:fa:34:39:77:35:9b:91:62:3c:64:40:c9:08:40:
2f:0b:04:b1:7e:f6:9c:ed:da:9a:95:43:b1:a5:89:f6:2d:b2:
27:92:ab:66:33:30:12:9d:61:3b:1b:15:66:d6:a4:66:f3:67:
6b:e0:f5:0e:b0:35:5a:88:13:1c:29:79:4d:fc:3f:8e:d1:da:
38:25:25:bd:4d:8f:7d:38:15:00:94:19:8a:a3:8c:27:a5:7e:
d0:cd:0e:c2:01:81:c0:56:ae:68:9e:85:72:88:d5:6c:f4:65:
71:4d:6b:93:c9:83:ae:1b:36:92:7c:8f:2b:cf:8e:e5:81:4d:
a6:44:f6:0e:ca:44:11:42:c6:8f:df:b1:07:e5:50:f7:49:e9:
00:6d:a7:59:3b:a0:19:4f:23:b0:eb:61:2c:ff:44:4e:22:19:
6e:15:54:b6:8c:30:4f:9b:28:a9:02:b0:e4:97:d4:fa:65:be:
bb:1f:4c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:33 2026 by rpki-client