Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
File: LAzrgevOhZ9Qko6O0-HwqFERUts.mft (raw, json)
Hash identifier: HYBGNwHfXApJqNmTJrvO8igzzFEO51Q4tC85ulDr9u8=
Subject key identifier: 4E:E5:4F:7A:EC:01:6E:10:9A:80:48:1B:2A:44:77:E4:F3:9A:CF:E5
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 019E1F47B17B84030397AF96DD553E14A550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
Manifest number: 0CF0
Signing time: Wed 13 May 2026 03:00:52 +0000
Manifest this update: Wed 13 May 2026 03:00:52 +0000
Manifest next update: Thu 14 May 2026 03:00:52 +0000
Files and hashes: 1: 4xcAwvHt__8M4q7q6_P8GmcGdJ0.roa (hash: 4N+MVFoHn+t4XX6dy0VLE63oifYd03KKG5mUbwfZupw=)
2: LAzrgevOhZ9Qko6O0-HwqFERUts.crl (hash: es0QaOo8CQ7PuepUuEEp0SsMNQ83A78YEUbO4ddZWqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:b1:7b:84:03:03:97:af:96:dd:55:3e:14:a5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: May 13 03:00:52 2026 GMT
Not After : May 14 03:00:52 2026 GMT
Subject: CN=4ee54f7aec016e109a80481b2a4477e4f39acfe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bb:92:cb:b0:d9:46:64:05:a4:c3:34:00:62:
35:64:cb:97:06:b8:92:4d:7d:2c:4b:b3:15:2b:6e:
20:ec:97:6d:a4:dd:20:95:5a:94:1b:1a:aa:ae:de:
6c:8a:68:67:57:63:0f:6d:fc:d5:6e:78:35:6a:c4:
88:26:80:46:11:73:20:21:75:b7:c8:d6:58:89:6a:
f1:73:b9:d6:3c:4d:38:1d:42:3b:d3:20:6b:b5:a2:
25:bf:d0:ba:ba:07:ef:6f:89:96:4c:de:83:b3:93:
b1:7e:c3:ca:94:be:8f:cf:bd:18:75:3a:40:54:b7:
ac:62:45:89:60:37:9b:8e:d4:4c:35:ce:4d:ec:53:
3b:16:42:05:fb:68:17:d4:e2:e3:7f:95:28:f4:5b:
6a:02:1b:c4:da:df:8d:e8:2b:be:1f:e9:07:58:6f:
08:e5:ac:51:c3:2c:97:fe:e0:d6:73:32:89:45:c2:
4f:12:4f:80:9b:95:f3:50:91:0a:3f:d4:8e:0b:b7:
08:1b:b6:05:b4:39:ef:ae:00:49:f1:32:0e:48:7e:
0d:73:b3:04:62:66:a0:06:c1:dd:4e:94:a3:1d:fb:
fc:aa:ff:78:9e:86:ba:95:07:14:f3:c2:bc:b9:04:
d1:17:eb:b2:cd:90:2b:74:69:ae:6f:2b:2c:b3:4b:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:4F:7A:EC:01:6E:10:9A:80:48:1B:2A:44:77:E4:F3:9A:CF:E5
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a6:c8:aa:1e:90:0d:95:be:f9:61:12:02:56:3f:20:1a:98:
00:ea:5e:1f:67:bb:77:42:55:ed:07:c8:bf:98:bd:c3:20:ff:
50:10:da:7e:6d:5b:cf:f2:a6:25:cd:5f:e2:6a:23:c2:02:fe:
3d:30:8c:c5:c0:97:af:54:72:28:b7:bf:ee:f2:87:0d:f3:67:
96:b9:78:22:d4:d7:f2:92:14:89:8a:ad:e2:7d:57:b1:6c:12:
fe:86:a2:c8:6a:de:f1:54:99:8f:fc:18:a6:26:93:75:39:a6:
fe:a0:dc:94:13:1a:66:14:1c:68:dd:2c:b8:fb:4c:73:db:6e:
53:61:d0:51:1e:de:5d:d5:a9:f2:d2:50:f7:44:9d:d3:26:07:
fa:cd:0b:1a:cb:f0:94:47:73:e8:62:ff:52:18:f7:79:d4:22:
1a:0b:62:90:0c:52:0a:63:e7:8e:dd:43:8a:41:6f:55:cd:06:
32:45:43:66:41:e9:9c:a0:58:41:ad:ad:6d:7b:b6:a4:2a:72:
f7:0b:fe:7a:c7:29:89:79:d8:d9:96:0e:9b:b1:22:2f:80:d7:
16:ab:d3:88:f2:eb:96:e0:99:17:7c:9d:50:ce:3b:f5:15:c5:
56:73:df:1e:7e:71:09:9e:54:8a:8f:83:fc:89:9d:50:f3:ba:
55:7f:0c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:23:13 2026 by rpki-client