Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
File: LAzrgevOhZ9Qko6O0-HwqFERUts.mft (raw, json)
Hash identifier: qLJAl25ECkMrbrmgD40r5j4aPqTxa6y0Qovzx16XQio=
Subject key identifier: 64:F3:77:85:C2:B6:1A:4A:C9:EF:14:0A:2D:EF:CD:22:78:16:B5:54
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 01A106C9D774DDA544E35DCBD7753FAB15B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
Manifest number: 0E71
Signing time: Sun 04 Oct 2026 12:00:53 +0000
Manifest this update: Sun 04 Oct 2026 12:00:53 +0000
Manifest next update: Mon 05 Oct 2026 12:00:53 +0000
Files and hashes: 1: 4xcAwvHt__8M4q7q6_P8GmcGdJ0.roa (hash: 4N+MVFoHn+t4XX6dy0VLE63oifYd03KKG5mUbwfZupw=)
2: LAzrgevOhZ9Qko6O0-HwqFERUts.crl (hash: E/dXXUN0mheE1HQsO+obgS5pLpBTscmpyFttgDYX8lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:c9:d7:74:dd:a5:44:e3:5d:cb:d7:75:3f:ab:15:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: Oct 4 12:00:53 2026 GMT
Not After : Oct 5 12:00:53 2026 GMT
Subject: CN=64f37785c2b61a4ac9ef140a2defcd227816b554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:a4:9f:d2:ca:15:ef:da:d1:fd:4d:16:af:
90:d1:0c:3e:76:85:8f:e9:4f:16:a4:c8:f4:83:54:
71:d0:6b:19:69:23:7f:a1:bb:7e:a8:e5:4c:6b:56:
ce:2b:72:51:e9:1f:ef:d0:f1:f2:5c:96:9a:e4:7a:
8b:2b:4b:53:9e:59:9b:fc:35:f1:9e:16:13:19:84:
f4:ab:f8:9c:04:88:fc:f9:c9:dc:ee:a4:92:59:9d:
32:f5:17:95:fd:aa:6e:38:01:ef:c6:a5:23:06:b5:
96:dc:b9:eb:b3:89:df:a8:0e:09:b2:d4:6e:0d:63:
9d:ab:e1:9e:c3:01:f3:57:3b:26:a8:ab:5c:cc:e8:
a6:db:76:5a:4e:57:70:67:40:2d:d4:2f:63:6d:0f:
97:22:27:e7:f2:f8:48:3f:f4:3b:15:ab:b6:51:2f:
1a:95:c5:c9:90:09:f3:9b:07:02:42:62:1b:ee:5e:
2d:86:69:a7:85:88:f1:15:d1:19:7b:c7:d5:ff:62:
21:ab:7c:b5:71:42:f7:80:26:fd:bb:7a:9d:37:12:
93:64:a7:c3:db:34:27:da:db:53:8c:85:92:49:ea:
5c:74:59:66:cc:25:3e:47:b1:5c:b7:0d:e4:b3:3f:
92:ce:aa:82:c1:38:6f:b1:a7:b7:bf:df:c8:bb:d1:
c4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F3:77:85:C2:B6:1A:4A:C9:EF:14:0A:2D:EF:CD:22:78:16:B5:54
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:4c:d3:15:fe:5e:c5:32:a5:d9:0a:29:97:84:01:e0:6f:79:
2e:a2:65:b2:c7:a2:1b:b5:30:91:89:cf:ec:03:6a:28:d3:2f:
a0:b1:87:3b:12:68:31:64:9c:3e:cb:d9:c0:41:e8:0c:b2:d4:
df:33:0b:fe:7a:3c:c7:27:e4:8d:6b:55:60:71:52:db:47:bf:
43:64:d5:42:4a:ba:1b:f3:18:27:19:a6:64:40:0f:39:ed:21:
df:7f:f7:46:b9:48:a7:31:f1:42:de:5e:2b:0e:08:bf:d1:b7:
4d:53:90:0f:2b:22:06:ef:f3:c0:2d:bc:c0:ac:43:14:df:16:
46:22:7e:a4:43:3d:2c:bf:be:bc:c3:b8:9d:c7:a3:25:7f:ac:
74:c6:a1:63:40:a3:ba:bc:5d:96:cd:85:5a:b5:41:01:67:51:
13:3a:b1:27:fe:e1:70:c2:20:db:9c:c9:a2:b6:c9:7b:85:d0:
25:d2:a9:25:32:28:c5:27:7b:79:89:18:96:b1:d1:ab:6a:fb:
21:b0:72:46:cb:39:d1:a1:28:66:ed:c1:48:54:d5:ff:18:56:
ac:28:8f:67:ed:34:2f:fd:dc:92:60:44:1d:a0:50:b4:18:7a:
c0:e3:3d:bb:a7:34:01:f9:b6:30:ce:c5:05:35:d6:d0:87:4c:
ea:26:19:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:49:35 2026 by rpki-client