Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.mft
File: lzUQXwm80g9MpHGS2HEgULOCGgU.mft (raw, json)
Hash identifier: 7W8tCQqTVcsn7kQD3m+hxKGReC25I0eiPQ++SbNJxuQ=
Subject key identifier: E5:0C:DC:CC:9F:8A:90:ED:6B:87:2E:1C:33:9B:A6:74:E7:4F:A9:5F
Authority key identifier: 97:35:10:5F:09:BC:D2:0F:4C:A4:71:92:D8:71:20:50:B3:82:1A:05
Certificate issuer: /CN=9735105f09bcd20f4ca47192d8712050b3821a05
Certificate serial: 019F935C30195651228ADFDF59410DF7F954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzUQXwm80g9MpHGS2HEgULOCGgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:02:00 +0000
Manifest this update: Fri 24 Jul 2026 09:02:00 +0000
Manifest next update: Sat 25 Jul 2026 09:02:00 +0000
Files and hashes: 1: lzUQXwm80g9MpHGS2HEgULOCGgU.crl (hash: XZXo28C3mQX6WRxQ7PEUvWhwXCU18RJ6AVdFHDaBT/A=)
2: olMM-bZayk15NVNMQRnr5L5ha3E.roa (hash: BGtUHPufR6/y3womVBoB/y7s8kOSrfbGJGbIgB+B20o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzUQXwm80g9MpHGS2HEgULOCGgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:30:19:56:51:22:8a:df:df:59:41:0d:f7:f9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9735105f09bcd20f4ca47192d8712050b3821a05
Validity
Not Before: Jul 24 09:02:00 2026 GMT
Not After : Jul 25 09:02:00 2026 GMT
Subject: CN=e50cdccc9f8a90ed6b872e1c339ba674e74fa95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a2:ea:f6:c2:73:27:bd:0c:93:37:41:69:de:
6a:bd:31:42:e1:94:40:dc:c1:b8:d6:34:14:f4:ad:
f0:cc:9d:50:a5:1d:59:71:b5:85:7f:50:74:35:50:
03:e8:fa:88:59:c6:a0:17:59:1e:c6:dc:49:7d:75:
00:9c:11:bc:b2:b2:ee:52:87:be:2e:09:3e:be:f4:
7e:01:77:13:97:c8:25:1e:42:45:1a:82:d0:d7:64:
49:cb:13:05:42:67:52:80:8d:e4:15:79:35:e2:d0:
b4:4f:c3:5a:11:10:8c:c0:73:39:ce:19:a9:04:4f:
1f:a9:06:13:2b:2e:39:21:2e:b7:df:51:f9:83:d0:
6c:4f:81:91:c7:fe:b5:5d:67:21:c0:94:77:47:a3:
55:e2:de:b4:b9:9d:76:18:46:ab:8b:5b:f9:73:ff:
c2:da:df:d9:df:a2:9e:05:61:3d:bf:27:47:b4:fe:
1c:e9:89:a1:d1:17:d7:f9:87:11:f0:5a:67:5b:5e:
01:fb:60:04:55:b4:84:5a:5f:07:c1:64:ee:27:64:
fe:ef:62:ea:86:05:7d:8b:68:94:52:59:22:d4:38:
9c:ff:5a:71:ae:58:40:dd:a9:9b:8f:1f:27:db:77:
10:36:a1:e0:db:4e:e1:ee:e7:95:68:b8:8f:e2:5a:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0C:DC:CC:9F:8A:90:ED:6B:87:2E:1C:33:9B:A6:74:E7:4F:A9:5F
X509v3 Authority Key Identifier:
keyid:97:35:10:5F:09:BC:D2:0F:4C:A4:71:92:D8:71:20:50:B3:82:1A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzUQXwm80g9MpHGS2HEgULOCGgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:35:c5:b8:3c:91:81:a2:be:e3:61:c4:ee:06:73:74:c5:d7:
e7:23:5f:4f:e5:b1:68:8c:1b:28:07:16:b2:c5:dc:04:79:34:
1b:5d:41:c8:43:bd:d3:a4:47:8f:af:13:7c:36:4b:2e:fa:82:
7d:c7:f3:c8:61:35:bd:dd:ef:74:f5:d6:f6:7f:47:a0:12:86:
40:4d:da:fe:28:6b:37:70:72:05:97:b8:c9:af:39:94:8b:49:
ff:29:f4:87:f8:33:f8:ef:2f:48:76:e6:11:26:43:58:5c:f8:
23:14:a9:90:20:c0:70:fd:4e:42:31:1d:50:32:56:7e:a3:c9:
d7:3e:a6:2f:48:46:01:62:f5:26:ee:f9:d2:40:c4:b3:4a:e4:
bd:d9:7b:66:b3:01:9c:ec:18:ef:9a:b4:a9:5e:2d:27:ee:23:
ba:88:dd:68:13:d6:cd:80:1a:76:d5:3a:73:9f:5a:4e:4b:63:
1e:df:63:a1:21:03:9c:d0:8d:8a:88:0b:d7:c0:16:6f:b1:d5:
cd:b0:45:b1:e0:6d:d7:95:43:85:f8:3d:4c:1e:b3:91:8a:2f:
f6:f7:1a:f9:f9:f0:e9:20:86:8f:97:5b:11:34:74:cf:2c:a9:
25:6e:cb:25:3a:7d:0d:60:e8:5c:90:11:43:17:95:6a:f7:12:
d3:99:f8:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TXDAZVlEiit/fWUEN9/lUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MzUxMDVmMDliY2QyMGY0Y2E0NzE5MmQ4NzEyMDUwYjM4
MjFhMDUwHhcNMjYwNzI0MDkwMjAwWhcNMjYwNzI1MDkwMjAwWjAzMTEwLwYDVQQD
EyhlNTBjZGNjYzlmOGE5MGVkNmI4NzJlMWMzMzliYTY3NGU3NGZhOTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KLq9sJzJ70MkzdBad5qvTFC4ZRA
3MG41jQU9K3wzJ1QpR1ZcbWFf1B0NVAD6PqIWcagF1kextxJfXUAnBG8srLuUoe+
Lgk+vvR+AXcTl8glHkJFGoLQ12RJyxMFQmdSgI3kFXk14tC0T8NaERCMwHM5zhmp
BE8fqQYTKy45IS6331H5g9BsT4GRx/61XWchwJR3R6NV4t60uZ12GEari1v5c//C
2t/Z36KeBWE9vydHtP4c6Ymh0RfX+YcR8FpnW14B+2AEVbSEWl8HwWTuJ2T+72Lq
hgV9i2iUUlki1Dic/1pxrlhA3ambjx8n23cQNqHg207h7ueVaLiP4lo5kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUM3MyfipDta4cuHDObpnTnT6lfMB8GA1UdIwQY
MBaAFJc1EF8JvNIPTKRxkthxIFCzghoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHpVUVh3bTgwZzlNcEhHUzJIRWdVTE9DR2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82ZmRhMWQtYjk2Yi00Y2Y5LWJiNjgt
M2ZiZGQ5ZGJiZDkyLzEvbHpVUVh3bTgwZzlNcEhHUzJIRWdVTE9DR2dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82ZmRhMWQtYjk2Yi00Y2Y5LWJiNjgtM2ZiZGQ5ZGJiZDky
LzEvbHpVUVh3bTgwZzlNcEhHUzJIRWdVTE9DR2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDXFuDyR
gaK+42HE7gZzdMXX5yNfT+WxaIwbKAcWssXcBHk0G11ByEO906RHj68TfDZLLvqC
fcfzyGE1vd3vdPXW9n9HoBKGQE3a/ihrN3ByBZe4ya85lItJ/yn0h/gz+O8vSHbm
ESZDWFz4IxSpkCDAcP1OQjEdUDJWfqPJ1z6mL0hGAWL1Ju750kDEs0rkvdl7ZrMB
nOwY75q0qV4tJ+4juojdaBPWzYAadtU6c59aTktjHt9joSEDnNCNiogL18AWb7HV
zbBFseBt15VDhfg9TB6zkYov9vca+fnw6SCGj5dbETR0zyypJW7LJTp9DWDoXJAR
QxeVavcS05n4ow==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:20 2026 by rpki-client