Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
File: LzFLwAp-WuIzSeBUBik6fWBgzaE.mft (raw, json)
Hash identifier: 2pLU+jvH5mNjEDJEi5BsfLBfEP4JJ/7gU3niQnRbfHo=
Subject key identifier: 2B:E2:24:C8:34:8B:5C:60:1A:21:5D:93:42:BE:1F:6B:42:3F:0F:20
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Certificate issuer: /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial: 019D288447339B9709E2D687DBFAEBCEFCE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
Manifest number: 1549
Signing time: Thu 26 Mar 2026 05:00:50 +0000
Manifest this update: Thu 26 Mar 2026 05:00:50 +0000
Manifest next update: Fri 27 Mar 2026 05:00:50 +0000
Files and hashes: 1: LzFLwAp-WuIzSeBUBik6fWBgzaE.crl (hash: BcYl281oa3Mi9YvqRKy3A6BF9YZETdvPZUii1YRKTsM=)
2: cdp1tnEqjEuwTYVbdI1j3wHPDuE.roa (hash: PSpmNX2+qtjxbQErRebhWCHH46VZVaH6NZ253k2cPGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:47:33:9b:97:09:e2:d6:87:db:fa:eb:ce:fc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Validity
Not Before: Mar 26 05:00:50 2026 GMT
Not After : Mar 27 05:00:50 2026 GMT
Subject: CN=2be224c8348b5c601a215d9342be1f6b423f0f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:00:42:e5:d9:ad:f6:40:1d:7f:26:6f:b4:91:
3f:fc:e7:ce:11:c7:77:24:ce:eb:85:5d:99:37:3b:
d9:ca:42:2d:e2:7d:8a:ee:6b:97:70:62:f5:cf:50:
0c:1e:71:56:6c:7d:69:62:42:90:44:b7:da:34:51:
dd:ab:b2:6e:31:de:ce:45:d0:e0:e1:b9:6c:a7:8d:
a4:99:1c:dc:dd:de:4b:e5:7d:1e:d2:c8:25:02:23:
ad:c9:98:8d:7e:05:02:15:63:aa:96:e8:44:80:6c:
ed:a0:a1:e4:f9:d9:62:08:bf:57:50:10:b3:8b:37:
db:e2:75:8e:5a:96:8f:15:77:16:22:47:e6:4b:86:
cb:c6:7a:d8:fc:03:94:ec:ed:b3:d2:3f:f2:c0:ce:
3e:89:01:7e:eb:2f:f3:2c:f1:75:e9:56:1b:18:5a:
0e:2c:f8:f1:13:b6:c9:51:73:5f:d2:21:a3:74:76:
b9:20:2f:28:0b:23:28:b9:cc:b1:46:dd:d1:0d:10:
41:d9:c3:be:2b:1c:f1:58:36:c7:f6:f4:a5:dd:29:
1d:bb:3f:ef:1d:03:2c:61:aa:a7:ba:3e:37:c6:54:
ba:b3:5f:60:03:94:46:d0:4c:3d:db:00:48:98:f3:
93:69:e1:06:a9:22:84:6b:3a:9b:7c:d8:a9:92:00:
a2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E2:24:C8:34:8B:5C:60:1A:21:5D:93:42:BE:1F:6B:42:3F:0F:20
X509v3 Authority Key Identifier:
keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:68:ad:c2:d8:cc:6e:e4:b8:2f:2f:a1:f9:0a:b7:28:24:1c:
1c:b3:2a:4e:d9:0c:7c:c2:7a:2d:a3:c2:32:63:87:be:04:8b:
5e:16:a2:1d:d3:a7:4d:1f:0d:f0:dc:f2:ba:87:8b:61:52:d6:
43:6a:88:12:9c:03:36:cc:d6:21:8a:41:6b:7b:b2:48:8e:86:
0c:db:92:59:0f:24:5a:88:0a:79:a3:05:c3:c3:0e:19:15:1a:
c1:86:39:14:12:cb:aa:ce:b1:02:b9:7b:9d:77:11:22:c8:df:
02:50:68:c2:20:83:fe:eb:c9:4b:81:1a:7d:db:d5:8d:f4:3c:
b8:3c:f7:99:19:39:07:20:09:d6:16:30:9f:fd:0b:d6:ab:e6:
83:51:f8:28:0b:67:82:48:e4:6c:75:9f:50:d4:29:51:d7:7d:
2b:63:8c:b9:19:f3:4f:5b:2e:21:51:b2:3a:41:74:c6:38:b1:
fd:e0:d9:23:b9:6a:d5:b9:98:93:e1:9f:28:57:c2:91:a9:9e:
2d:44:bc:34:e1:97:16:d5:49:d5:56:62:7a:ee:7a:8f:58:f1:
1f:66:45:88:be:58:66:62:d1:36:d1:57:b2:96:49:51:27:25:
63:e9:d2:2d:42:00:bb:b4:04:f9:22:44:62:7d:14:3a:4f:40:
63:87:68:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohEczm5cJ4taH2/rrzvzoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMzE0YmMwMGE3ZTVhZTIzMzQ5ZTA1NDA2MjkzYTdkNjA2
MGNkYTEwHhcNMjYwMzI2MDUwMDUwWhcNMjYwMzI3MDUwMDUwWjAzMTEwLwYDVQQD
EygyYmUyMjRjODM0OGI1YzYwMWEyMTVkOTM0MmJlMWY2YjQyM2YwZjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wBC5dmt9kAdfyZvtJE//OfOEcd3
JM7rhV2ZNzvZykIt4n2K7muXcGL1z1AMHnFWbH1pYkKQRLfaNFHdq7JuMd7ORdDg
4blsp42kmRzc3d5L5X0e0sglAiOtyZiNfgUCFWOqluhEgGztoKHk+dliCL9XUBCz
izfb4nWOWpaPFXcWIkfmS4bLxnrY/AOU7O2z0j/ywM4+iQF+6y/zLPF16VYbGFoO
LPjxE7bJUXNf0iGjdHa5IC8oCyMoucyxRt3RDRBB2cO+KxzxWDbH9vSl3Skduz/v
HQMsYaqnuj43xlS6s19gA5RG0Ew92wBImPOTaeEGqSKEazqbfNipkgCiHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCviJMg0i1xgGiFdk0K+H2tCPw8gMB8GA1UdIwQY
MBaAFC8xS8AKflriM0ngVAYpOn1gYM2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNWY0OWQtMTBiMC00ODE4LWEwYzQt
N2MwYjliMTlmY2ZiLzEvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jNWY0OWQtMTBiMC00ODE4LWEwYzQtN2MwYjliMTlmY2Zi
LzEvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2itwtjM
buS4Ly+h+Qq3KCQcHLMqTtkMfMJ6LaPCMmOHvgSLXhaiHdOnTR8N8NzyuoeLYVLW
Q2qIEpwDNszWIYpBa3uySI6GDNuSWQ8kWogKeaMFw8MOGRUawYY5FBLLqs6xArl7
nXcRIsjfAlBowiCD/uvJS4EafdvVjfQ8uDz3mRk5ByAJ1hYwn/0L1qvmg1H4KAtn
gkjkbHWfUNQpUdd9K2OMuRnzT1suIVGyOkF0xjix/eDZI7lq1bmYk+GfKFfCkame
LUS8NOGXFtVJ1VZieu56j1jxH2ZFiL5YZmLRNtFXspZJUSclY+nSLUIAu7QE+SJE
Yn0UOk9AY4doXA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:14 2026 by rpki-client