Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
File: LAzrgevOhZ9Qko6O0-HwqFERUts.mft (raw, json)
Hash identifier: EXLFLtLC9+gKSGE+dsRdunIwbo8bddIH7eVh7OOZV+8=
Subject key identifier: DD:F9:EE:AA:74:62:77:C2:45:70:8F:E2:09:72:B7:C3:06:09:AA:EA
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 019F95EE08206D2DA46289F7CDF27C9345E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
Manifest number: 0DB2
Signing time: Fri 24 Jul 2026 21:00:32 +0000
Manifest this update: Fri 24 Jul 2026 21:00:32 +0000
Manifest next update: Sat 25 Jul 2026 21:00:32 +0000
Files and hashes: 1: 4xcAwvHt__8M4q7q6_P8GmcGdJ0.roa (hash: 4N+MVFoHn+t4XX6dy0VLE63oifYd03KKG5mUbwfZupw=)
2: LAzrgevOhZ9Qko6O0-HwqFERUts.crl (hash: TtTeGpxnstvopqvACmLvsbC5/cdMKZF1ztPgTYLa2zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ee:08:20:6d:2d:a4:62:89:f7:cd:f2:7c:93:45:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: Jul 24 21:00:32 2026 GMT
Not After : Jul 25 21:00:32 2026 GMT
Subject: CN=ddf9eeaa746277c245708fe20972b7c30609aaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:8f:0d:2b:84:8e:eb:64:30:43:09:79:d3:
11:9b:cb:ed:49:5d:bd:68:b6:54:9a:7d:01:d3:f5:
93:31:a1:d8:80:35:ad:88:25:e9:2f:a4:ca:96:03:
3c:a5:c6:6e:96:75:d7:d7:ee:6d:a8:af:ef:fe:0f:
8e:57:54:96:0e:26:7d:a6:12:aa:19:d3:c6:6b:f0:
92:dd:c2:7a:b0:28:c4:b2:e4:3f:0d:62:b2:79:b3:
7c:2f:f6:fe:99:07:18:34:fd:e5:5c:ab:1a:e3:80:
45:e1:d8:77:94:47:67:84:2e:ac:fe:76:7c:19:af:
07:b4:4b:a4:20:1f:de:2a:a3:e9:36:ef:0b:a9:d4:
d9:d9:f9:77:de:a3:eb:c4:28:19:4a:f8:f7:1c:49:
5e:bc:da:43:9a:37:4a:b2:15:c4:44:00:dd:31:ed:
8d:63:62:f5:d2:23:c5:f2:a5:b5:7c:1e:5c:fc:10:
f5:40:9f:16:11:7d:9d:c5:f2:09:b2:77:da:05:fc:
85:4c:ed:61:58:0a:6c:ab:18:95:30:ab:30:a4:78:
a3:67:97:95:4a:8c:0d:ff:37:5a:ec:3e:a2:fa:aa:
a3:89:19:a5:31:30:7f:74:77:cb:d0:ce:62:61:6b:
29:7a:bf:17:24:bd:5c:01:96:17:5d:95:99:82:b8:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F9:EE:AA:74:62:77:C2:45:70:8F:E2:09:72:B7:C3:06:09:AA:EA
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:6a:68:6a:e3:2b:3b:b4:6c:72:17:08:f6:2e:75:cb:b7:20:
8c:cc:75:6e:b6:aa:0a:0b:a4:5a:69:dc:c6:4d:d9:47:6a:92:
31:ac:13:02:5f:e5:03:f3:2a:25:4c:bc:37:d7:c8:e1:62:36:
6c:2c:61:8e:70:89:b2:b8:8b:e9:a5:98:eb:e1:38:5f:a9:85:
a1:5e:59:97:67:9b:78:3d:63:0f:7d:8e:55:8d:ff:0c:b9:fd:
35:2f:bf:17:20:31:cc:ea:19:cc:da:c4:4d:fb:0a:71:d5:94:
42:7a:e8:9d:a8:f1:b6:8a:ff:8b:dd:e6:f2:dd:3c:5d:b2:93:
b1:93:fd:a8:0d:92:33:44:b7:80:51:c2:e1:c0:3d:6e:f0:d6:
54:56:42:6d:26:e2:d1:d0:5b:5f:02:7d:6d:9c:7f:c7:6b:1e:
35:c2:af:d9:82:c1:14:bf:e1:ab:ec:4d:23:52:83:a3:db:40:
30:7c:6b:2a:f5:87:3e:92:30:68:6f:e1:61:30:6e:7f:99:36:
c7:9a:56:07:8c:7f:bc:a7:42:95:67:4b:4e:ad:12:a3:96:ed:
4d:b6:62:c4:64:3b:4a:1f:42:0c:cd:d6:f1:66:d9:60:c4:79:
a4:d2:56:64:0a:bc:10:cf:73:12:84:ff:44:ee:d5:85:7b:74:
70:26:7b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:04:20 2026 by rpki-client