Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
File: LAzrgevOhZ9Qko6O0-HwqFERUts.mft (raw, json)
Hash identifier: k7Px/GkzKVs/6qlAFqUY6vFxzKjGmf+VDO37/vlH1xU=
Subject key identifier: 08:22:E1:60:7C:9F:A8:CE:97:12:13:F0:78:15:F5:36:D1:C6:93:B8
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 019D26288AD1CBD65C68D75D7AD0F3CF6D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
Manifest number: 0C6F
Signing time: Wed 25 Mar 2026 18:01:24 +0000
Manifest this update: Wed 25 Mar 2026 18:01:24 +0000
Manifest next update: Thu 26 Mar 2026 18:01:24 +0000
Files and hashes: 1: 4xcAwvHt__8M4q7q6_P8GmcGdJ0.roa (hash: 4N+MVFoHn+t4XX6dy0VLE63oifYd03KKG5mUbwfZupw=)
2: LAzrgevOhZ9Qko6O0-HwqFERUts.crl (hash: 7tFfvP1NE8Awnq7N2R9Q9Ypa1Dj9+taanvxSO6vjf/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:8a:d1:cb:d6:5c:68:d7:5d:7a:d0:f3:cf:6d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: Mar 25 18:01:24 2026 GMT
Not After : Mar 26 18:01:24 2026 GMT
Subject: CN=0822e1607c9fa8ce971213f07815f536d1c693b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:e2:6e:b5:8a:3c:66:44:ef:d3:52:e3:d9:
b6:3a:2c:51:4d:23:a4:cc:94:e1:90:eb:dd:b7:4a:
41:ba:34:2a:39:13:da:5e:17:4f:b4:41:1b:66:98:
49:f3:d0:7e:a5:96:62:74:6f:cf:fd:7e:4d:55:9e:
d9:e9:2e:9e:9a:88:5e:8b:e0:78:dd:4a:5f:1b:6f:
df:25:d3:a5:14:8a:b9:aa:bf:ae:5c:14:8c:5a:07:
cd:c3:f5:89:ef:81:aa:1c:a3:77:ad:56:07:0a:57:
c2:e4:d5:83:4b:51:20:95:0c:86:88:36:57:14:2d:
96:bd:70:7a:69:b6:21:fb:fd:49:86:84:11:f4:dc:
62:fe:0d:ec:0f:ce:f5:8c:88:45:ac:74:b3:ad:dc:
75:08:07:45:8f:06:f4:a9:5f:57:ec:dd:84:1f:27:
ac:2c:fb:92:88:e7:14:02:f7:11:f1:23:2b:8d:9e:
34:74:2a:9b:73:9d:3a:7f:66:f1:e6:c3:ed:b3:b9:
94:a4:f8:2e:41:65:e2:73:85:56:4e:76:01:d8:0f:
87:54:ba:23:34:34:22:56:0d:4b:af:86:f6:60:e4:
a9:bf:1a:84:1b:66:7c:82:61:1a:32:90:5f:d2:f1:
be:b1:0a:b2:b9:fc:da:fc:28:d0:01:07:a7:5b:22:
e3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:22:E1:60:7C:9F:A8:CE:97:12:13:F0:78:15:F5:36:D1:C6:93:B8
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:91:3f:95:a3:df:5f:be:61:d3:3d:fc:fd:b6:64:72:d7:e4:
10:e1:a8:97:90:5d:78:b7:e9:85:a0:02:76:fc:35:82:41:f0:
9d:9d:f0:6d:1e:33:44:c2:15:ac:df:d6:b7:72:dd:5e:64:16:
cf:b3:36:e5:b0:d5:3c:80:83:98:e1:33:1b:f9:84:03:90:2d:
83:96:9f:29:15:5d:a5:b3:dd:88:73:e9:f4:21:84:c6:17:c9:
1a:cb:1a:52:79:0d:4a:5d:bb:ad:9c:53:3e:9f:5e:14:d2:06:
9a:3e:75:40:4c:0b:09:3c:6f:8d:59:e9:14:73:de:49:e3:b8:
e5:a8:d1:dc:ac:78:e8:7e:0c:4b:2d:54:1e:6c:ce:d1:bd:7e:
39:81:ec:5d:58:fb:3c:0e:09:92:d4:74:a5:b6:02:e1:b2:ec:
67:21:a3:df:80:70:12:59:38:ef:6c:86:d7:01:f4:3e:ce:70:
18:cf:f9:3c:d7:ee:21:58:01:3a:17:b1:fb:ae:88:f4:1d:5b:
4b:11:d3:0d:5d:0c:47:7f:b5:c7:3d:20:05:26:2a:f7:24:1c:
e2:42:7e:91:b4:bb:cb:c1:ba:33:68:92:3d:a9:53:f0:72:2a:
ee:0f:8d:2c:a6:73:9f:07:1e:1d:81:93:62:89:e4:b7:44:08:
07:ad:27:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:17 2026 by rpki-client