Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
File: LZrhAubK20caMKDIWTPgOQvy-co.mft (raw, json)
Hash identifier: 0JOfNHogeB4PSE6Wg2WjNUIwC5DrfKYBUAeXjESCxkw=
Subject key identifier: 4F:74:B2:B7:E4:77:A0:6E:18:E8:56:40:0F:1F:F9:F2:EA:D4:C3:37
Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
Certificate issuer: /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Certificate serial: 019F93FFD22DAD1E923ACA1647986C05C924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
Manifest number: 0FB6
Signing time: Fri 24 Jul 2026 12:00:43 +0000
Manifest this update: Fri 24 Jul 2026 12:00:43 +0000
Manifest next update: Sat 25 Jul 2026 12:00:43 +0000
Files and hashes: 1: LZrhAubK20caMKDIWTPgOQvy-co.crl (hash: U9e43T/OcB9Gg0E9n0HR3UA44DAeN1WjBmL85+k1Aic=)
2: y2taGqw2UEDAKG5TCLDBWFLjqEw.roa (hash: tK8h1c2C7RZoKF8ADN3Dd1e3mCsCEmC4/YVEGzes/WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:d2:2d:ad:1e:92:3a:ca:16:47:98:6c:05:c9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Validity
Not Before: Jul 24 12:00:43 2026 GMT
Not After : Jul 25 12:00:43 2026 GMT
Subject: CN=4f74b2b7e477a06e18e856400f1ff9f2ead4c337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:fd:da:eb:6b:cd:f6:cd:b2:07:c3:3c:fb:
00:3b:30:d8:2d:10:56:67:ea:0d:a7:af:a6:a9:66:
c9:68:f8:6e:eb:b5:e8:64:f1:e5:6b:64:ff:15:a0:
9f:4d:b6:e3:21:20:16:be:a2:cf:90:24:65:ed:d4:
77:48:e0:48:2f:e0:82:4c:bc:a3:78:2d:14:94:15:
0f:7e:6b:f3:74:b0:30:9d:dc:e4:99:50:2e:7a:24:
00:72:90:9f:f3:0a:ec:04:f6:17:49:e6:24:34:d9:
c1:8e:9b:8a:30:53:42:76:bc:e7:f5:f5:f6:93:9f:
50:05:65:9e:36:04:2c:15:68:e4:3f:91:f8:0f:95:
48:54:54:1c:87:d9:6b:59:45:72:37:67:65:d3:40:
ae:e0:92:c0:8a:1a:ff:a1:14:2d:68:0e:3d:4e:cc:
66:3e:bb:ba:28:5a:2a:d6:22:04:d0:00:3d:34:fd:
1e:14:3c:75:f5:a6:95:dc:05:b3:7b:bf:82:39:46:
74:b6:18:a3:67:ec:1c:45:aa:37:92:62:52:92:ba:
81:ac:51:fc:e4:87:25:75:d0:de:05:f9:d0:35:c2:
8d:b2:1a:80:1f:4f:dd:8f:78:31:0e:9d:6d:aa:71:
35:d3:7d:65:c3:ca:a9:04:95:a8:41:67:7d:d4:9f:
33:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:74:B2:B7:E4:77:A0:6E:18:E8:56:40:0F:1F:F9:F2:EA:D4:C3:37
X509v3 Authority Key Identifier:
keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3f:19:de:80:ba:93:45:4a:a8:d8:d6:21:c2:67:7f:2c:1d:
c6:8c:bf:f2:10:7a:a8:d9:6c:fa:0a:b0:19:bf:06:0c:e7:56:
85:98:a3:ff:d5:89:71:35:34:e1:7c:d5:35:d3:49:f2:81:3b:
62:fa:30:92:b2:fc:9d:74:4e:42:37:f8:6a:d9:ba:d7:9c:85:
14:8b:e2:3c:26:b5:b9:e0:86:e4:22:cb:a2:d4:d8:45:f3:8a:
19:fc:96:6b:66:8c:dc:d2:c4:da:33:d5:b9:fe:d0:a8:fb:96:
e4:27:2b:e2:54:a5:6e:ab:e3:90:9d:7e:9c:b0:c3:3c:3f:e4:
4a:04:75:21:68:e6:02:b1:f8:4f:65:08:ef:ba:43:88:05:b0:
d0:95:fe:45:3c:83:fb:50:07:3e:68:14:b5:1e:76:a6:89:2b:
41:a6:c8:05:0f:6c:83:25:7d:cb:0a:03:fe:49:fb:3c:ed:34:
52:24:28:9b:6b:84:62:98:c6:76:d4:e2:11:7c:be:8f:0b:c1:
b9:07:00:ac:8f:8e:50:7e:75:c6:0a:dd:d2:b2:9e:84:ac:1e:
bd:dc:16:ff:25:49:64:1b:54:ac:b0:5d:7e:0b:f4:38:a6:6b:
be:22:cc:19:79:19:f6:71:ff:4d:6d:aa:5d:78:94:a4:05:c4:
49:a7:6b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:36:38 2026 by rpki-client