Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
File: LZrhAubK20caMKDIWTPgOQvy-co.mft (raw, json)
Hash identifier: LKsZ/0v2Y2D7o6liTcS41sIPNc+/Sb1hF0HqoMJSnIQ=
Subject key identifier: 4E:24:6E:B4:12:A9:D8:75:FF:E5:F8:A8:C8:CC:7D:46:32:F7:E3:FE
Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
Certificate issuer: /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Certificate serial: 019D2BF365CA6CE688A00A3BA615ABBADC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
Manifest number: 0E77
Signing time: Thu 26 Mar 2026 21:01:04 +0000
Manifest this update: Thu 26 Mar 2026 21:01:04 +0000
Manifest next update: Fri 27 Mar 2026 21:01:04 +0000
Files and hashes: 1: LZrhAubK20caMKDIWTPgOQvy-co.crl (hash: 7jjboHNFBCfzLay6r/wGrK6151qLUUHKT2v6QSxfReg=)
2: y2taGqw2UEDAKG5TCLDBWFLjqEw.roa (hash: tK8h1c2C7RZoKF8ADN3Dd1e3mCsCEmC4/YVEGzes/WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:65:ca:6c:e6:88:a0:0a:3b:a6:15:ab:ba:dc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Validity
Not Before: Mar 26 21:01:04 2026 GMT
Not After : Mar 27 21:01:04 2026 GMT
Subject: CN=4e246eb412a9d875ffe5f8a8c8cc7d4632f7e3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:76:bc:2b:29:d2:af:a0:79:5d:6b:f3:c1:a5:
c8:f2:fe:50:8f:f9:08:1e:4a:3d:ac:d9:37:36:9b:
72:d6:61:3a:8c:3c:f1:a7:6c:9e:6d:f7:e5:81:f4:
fe:4b:ee:06:75:de:36:9c:40:c1:1e:ea:84:60:47:
2e:94:ed:03:35:38:0e:c4:d7:22:f5:3f:4a:2f:8e:
07:38:7d:19:65:cd:b7:fd:71:b6:b5:1f:42:27:53:
aa:2a:82:8f:f4:6c:13:80:82:f0:40:c3:2e:12:cf:
94:b6:5b:40:56:ec:d2:5e:91:20:2d:8b:2e:33:ac:
a9:3f:4d:af:2c:e5:f9:9d:de:a0:fd:ae:13:8f:8a:
47:fc:df:c3:51:c0:82:ed:12:24:6f:18:25:b6:39:
da:0c:0c:18:63:60:91:74:ff:d6:1a:1c:a1:e3:bf:
59:fd:4b:bb:c0:91:63:54:a1:4a:b8:69:a3:ca:ee:
12:8e:43:da:d2:99:87:e4:0c:e0:9b:bd:b8:ba:d4:
7a:4a:6e:b0:56:60:d1:51:20:11:7a:da:9b:e4:d7:
b0:f2:f5:c5:b7:bf:21:23:f3:c1:83:36:50:84:a9:
f0:85:20:91:82:b4:a5:34:08:71:66:b0:a7:07:82:
3d:22:b2:cc:ba:09:b7:f3:9d:5d:60:b0:eb:2e:d9:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:24:6E:B4:12:A9:D8:75:FF:E5:F8:A8:C8:CC:7D:46:32:F7:E3:FE
X509v3 Authority Key Identifier:
keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:09:ad:bc:7f:83:27:7e:e0:c7:bb:99:aa:cd:9b:e3:48:d8:
23:2c:17:e7:c2:4a:2c:d0:33:e5:d0:10:85:81:66:7f:a7:9a:
88:c3:79:78:1f:71:d7:4e:25:10:24:5d:eb:5e:35:20:29:a5:
94:1c:71:3d:0d:1c:df:44:aa:de:fd:04:d0:23:d3:63:e8:99:
1c:e5:a0:e5:6c:c0:eb:98:7e:89:60:18:72:29:05:da:35:cf:
90:a3:a4:43:9c:40:a6:a8:25:70:0f:07:55:61:2f:4f:db:22:
36:f6:69:b6:fe:7d:0f:a2:8d:b3:d2:0c:7a:f0:9b:de:93:60:
1e:b8:2a:6e:95:d0:d9:7a:54:d8:76:51:ec:57:e4:6e:c1:57:
b2:50:8e:a6:62:80:5a:1d:8e:e1:8d:2b:97:ec:90:66:50:62:
93:25:8a:a2:6a:0e:69:19:e2:15:fe:f9:91:19:d2:94:a0:ab:
61:2a:1a:97:38:e1:f1:32:ae:fd:0e:92:da:75:ca:44:21:4e:
d6:32:54:8c:a2:5c:07:4c:fe:91:a0:72:c2:2f:45:a2:31:9e:
ba:6c:bb:09:ab:b6:09:7a:a3:16:53:a0:eb:49:bd:5e:a8:90:
93:dd:53:60:26:96:46:82:47:45:e0:f6:81:59:a4:f6:8f:ce:
7c:fb:60:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:49:31 2026 by rpki-client