Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
File: lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft (raw, json)
Hash identifier: nyB8RqT4uWMhVf5dLaahYf6a9M+ocJRT+3w21njqq+Y=
Subject key identifier: 5B:F1:93:4B:7C:A0:2A:7D:71:DB:D0:55:12:0D:4F:CA:62:3D:BB:26
Authority key identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
Certificate issuer: /CN=9735a94f31546d437b89720e844b2f12a5abf268
Certificate serial: 019D26283B4A8F267CBD84F44EE12973F9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
Manifest number: 0DB8
Signing time: Wed 25 Mar 2026 18:01:03 +0000
Manifest this update: Wed 25 Mar 2026 18:01:03 +0000
Manifest next update: Thu 26 Mar 2026 18:01:03 +0000
Files and hashes: 1: D8jbeGvsCWlCtUKlWcmQzUoyjDA.roa (hash: hR+1WTEE4faE3X7SUL7mOqQ/qkK9Up9FfMVzqDGeaYA=)
2: lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl (hash: pjjd3VExHiHc0RS6KRCwXfPYODwIEbkMJjQRgKlZj+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:3b:4a:8f:26:7c:bd:84:f4:4e:e1:29:73:f9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9735a94f31546d437b89720e844b2f12a5abf268
Validity
Not Before: Mar 25 18:01:03 2026 GMT
Not After : Mar 26 18:01:03 2026 GMT
Subject: CN=5bf1934b7ca02a7d71dbd055120d4fca623dbb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:30:f3:18:02:d8:6e:19:c3:56:fd:2b:49:
82:c3:34:78:2c:a2:67:6a:24:c5:e6:90:58:99:02:
61:c6:c4:49:11:a3:dd:8c:08:32:d5:ce:5a:0b:76:
74:60:fb:21:f4:d7:7d:a0:b7:22:c0:05:c8:67:06:
e9:7f:ec:f5:bc:26:d6:1c:8a:14:e3:4f:ee:c7:06:
18:05:58:18:0f:8e:a8:33:8a:c0:1a:e4:24:d4:ef:
9f:de:51:bb:d1:a1:f1:fa:5b:75:e1:64:fa:56:d7:
ba:90:83:85:c2:ed:c5:b7:53:84:9e:d1:e5:ec:80:
fe:21:95:88:bb:21:c0:f9:d9:d9:70:59:55:2e:8a:
ec:5f:f1:cd:21:71:31:af:44:35:56:bc:ab:94:c6:
6c:f8:58:54:69:6c:53:4b:ab:db:54:aa:8b:b4:1b:
86:a6:2f:d8:44:7c:fe:62:5c:c9:2e:7a:f8:76:aa:
58:b7:55:a2:f9:c3:23:de:08:c6:99:2b:8e:69:dc:
46:02:2d:a1:ae:52:c6:1b:9a:31:b3:b3:39:9c:9a:
b5:29:ce:27:30:7c:cf:84:36:f6:71:19:55:28:b9:
74:ca:a5:b4:b1:18:7a:ba:89:64:2a:55:ee:bf:23:
71:b1:ee:73:4c:9f:c5:74:46:55:09:34:4b:12:0d:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F1:93:4B:7C:A0:2A:7D:71:DB:D0:55:12:0D:4F:CA:62:3D:BB:26
X509v3 Authority Key Identifier:
keyid:97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d9:b1:41:65:ac:eb:5e:e8:cb:ac:0f:d7:75:30:88:d2:c5:
ad:9f:87:06:23:0f:87:a8:cf:99:f8:d2:1c:bb:61:ce:dd:58:
86:0c:4b:44:09:e8:a9:c8:63:6a:ca:56:93:78:46:f0:91:99:
84:1f:c9:22:e4:10:55:14:5e:82:13:75:22:b3:b3:33:e2:fd:
66:cc:a5:ea:a8:89:79:56:14:49:c9:6d:c5:1f:01:99:8f:29:
b2:2d:1b:eb:1f:72:90:0b:3e:f2:2b:d8:14:6a:19:dd:9a:25:
c8:39:53:63:22:95:c7:9c:94:39:39:66:fc:9d:9e:a9:1c:a4:
cf:b4:bf:8e:f9:d7:0a:53:8f:7e:d6:e8:12:c5:37:44:d3:fe:
ea:a5:c7:6c:c6:68:a9:42:ad:1d:99:36:7d:1a:dc:f4:11:1e:
65:d1:14:a6:52:db:05:d6:19:c8:23:3b:b9:00:b6:cc:d4:50:
b1:ff:48:56:54:75:90:cd:e3:fc:ab:b3:30:3e:20:54:4e:ef:
19:e3:c2:2e:20:ed:8d:62:6d:2a:fa:da:01:52:f5:1d:a6:f9:
a6:85:47:1d:f3:4f:a3:e8:6e:ff:db:0e:6a:a9:cf:ee:f2:1d:
60:f7:6e:64:2f:ad:43:b3:93:24:13:c3:be:45:9a:f0:d6:aa:
ec:aa:18:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:42:07 2026 by rpki-client