Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/lZ-XIanIo9qPwjfG5j5suEJKV7k.mft
File: lZ-XIanIo9qPwjfG5j5suEJKV7k.mft (raw, json)
Hash identifier: 82cjcJpDDlMehkVmKXL/yTAGqUHqwfhfxXTlv0Ku+UY=
Subject key identifier: 83:21:2D:E2:D1:91:1B:27:04:BC:DD:59:B9:E3:0E:F3:52:EA:88:3E
Authority key identifier: 95:9F:97:21:A9:C8:A3:DA:8F:C2:37:C6:E6:3E:6C:B8:42:4A:57:B9
Certificate issuer: /CN=959f9721a9c8a3da8fc237c6e63e6cb8424a57b9
Certificate serial: 01A0D9BA51230B38127252280C31EB25ABCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ-XIanIo9qPwjfG5j5suEJKV7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/lZ-XIanIo9qPwjfG5j5suEJKV7k.mft
Manifest number: 40
Signing time: Fri 25 Sep 2026 18:01:01 +0000
Manifest this update: Fri 25 Sep 2026 18:01:01 +0000
Manifest next update: Sat 26 Sep 2026 18:01:01 +0000
Files and hashes: 1: lZ-XIanIo9qPwjfG5j5suEJKV7k.crl (hash: Rz9tusDeSA6lQK1rlCpZ/M+rpNAbVYZapPh6CEWaGPU=)
2: sy3L82X_k9pwFlctV8Qn2oAe67I.roa (hash: +J5tZGTBeOIKaWbei0v5OTAxSvX0Rhp7+cQe3w9eO48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/lZ-XIanIo9qPwjfG5j5suEJKV7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/lZ-XIanIo9qPwjfG5j5suEJKV7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ-XIanIo9qPwjfG5j5suEJKV7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:51:23:0b:38:12:72:52:28:0c:31:eb:25:ab:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959f9721a9c8a3da8fc237c6e63e6cb8424a57b9
Validity
Not Before: Sep 25 18:01:01 2026 GMT
Not After : Sep 26 18:01:01 2026 GMT
Subject: CN=83212de2d1911b2704bcdd59b9e30ef352ea883e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:78:b9:3c:85:fc:47:d5:40:32:01:ff:d1:
c8:13:7b:d1:a1:67:51:d0:7e:6a:47:80:63:7b:2e:
af:e0:76:59:f0:c0:00:1b:e8:59:1b:22:66:80:4d:
15:ac:35:68:a9:31:aa:d3:f9:ab:68:1d:14:5b:a5:
74:e0:0f:60:07:fc:80:3e:71:07:47:9f:21:fd:d2:
81:7f:02:45:85:be:d9:46:74:24:ce:df:2f:71:64:
45:91:80:1f:68:41:5f:c1:56:8c:79:59:d8:99:79:
60:ee:fb:b3:65:b9:1f:1a:16:73:80:86:c7:7a:f8:
1b:6d:7d:ee:ac:58:93:0a:98:cf:5c:2d:d9:5b:a9:
79:0f:ea:78:cc:0f:d4:20:5c:79:c2:04:0b:0d:ea:
b9:f5:28:c4:c0:95:97:8f:26:0b:34:cd:84:8a:11:
53:33:5b:2a:bf:d4:3d:ba:09:35:68:4f:c7:f0:20:
aa:04:a4:76:13:a0:c9:01:27:b7:c4:e7:a5:ca:dc:
12:42:d0:f8:31:79:43:a2:c6:20:fe:d0:fe:0c:e3:
99:4f:ed:7a:3b:77:0e:47:e3:03:4d:6f:04:4d:c6:
b8:74:7d:e2:ac:2d:22:68:a6:ae:ed:46:bc:e1:5d:
14:3d:ce:07:6f:0d:f5:65:1c:1f:d2:81:83:d9:b6:
10:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:21:2D:E2:D1:91:1B:27:04:BC:DD:59:B9:E3:0E:F3:52:EA:88:3E
X509v3 Authority Key Identifier:
keyid:95:9F:97:21:A9:C8:A3:DA:8F:C2:37:C6:E6:3E:6C:B8:42:4A:57:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ-XIanIo9qPwjfG5j5suEJKV7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/lZ-XIanIo9qPwjfG5j5suEJKV7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/lZ-XIanIo9qPwjfG5j5suEJKV7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3b:bd:b3:b3:80:58:82:18:09:0d:e4:34:f4:c5:ba:86:b1:
c9:41:51:1d:5f:15:8e:7e:5a:5d:1b:af:b0:86:fb:1f:82:ca:
52:03:e9:5a:e7:26:ab:2b:7c:75:ab:75:dc:79:01:74:bf:1e:
88:7b:fa:b8:12:80:b6:19:04:06:ef:b9:13:87:1b:8a:c5:d4:
af:db:64:27:0c:95:ca:c3:44:33:31:f1:bd:e1:7d:3e:5a:00:
c5:f2:30:ed:cc:14:ee:aa:0f:6b:0f:0f:8b:c5:c6:3c:eb:11:
da:bc:16:30:e1:7f:e9:55:a0:4d:49:57:22:b6:d0:cd:76:f9:
d1:c1:a5:57:fe:4c:4d:b8:32:c2:08:a3:00:95:e4:e6:42:f3:
ae:de:b9:87:da:b9:64:a5:01:4d:57:4c:ef:8a:db:3e:80:38:
99:85:33:84:31:cc:c7:33:cb:ae:ba:82:b0:ba:86:88:3e:96:
f8:82:22:0c:c9:41:77:85:0b:35:3f:0c:37:ef:f8:e3:3b:b6:
2c:2c:70:7d:e4:a5:0d:27:ea:50:bd:fd:cf:28:2a:10:1f:65:
84:8e:b3:60:f4:c8:d3:40:d3:a2:3b:6d:05:05:64:c9:79:6d:
0e:34:d4:13:13:1e:80:e4:cb:c9:09:c2:be:08:0b:e7:4c:9c:
9d:35:4a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:28:53 2026 by rpki-client