Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier: aytsQQ9D7+13vlGRuUH30Bu8OaStvVXxSeVToI0ZmtU=
Subject key identifier: 5B:0C:FB:7C:58:20:3F:74:87:D2:D9:38:9A:9C:BC:2B:08:C8:BD:2D
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 019D26CD46F0207BC4F73A9ECE907CF58B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number: 0B8F
Signing time: Wed 25 Mar 2026 21:01:20 +0000
Manifest this update: Wed 25 Mar 2026 21:01:20 +0000
Manifest next update: Thu 26 Mar 2026 21:01:20 +0000
Files and hashes: 1: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: iftyhzBay7PS3QKnHF6H6UThVBg9F+Wa8EE9ZOrZZhg=)
2: doW0mpCnrwRns3RIOxChwkliLTE.roa (hash: GsqyaGjy8E4RJKoWLdZmSypIUlVFghPNcYphYfam9qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:46:f0:20:7b:c4:f7:3a:9e:ce:90:7c:f5:8b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Mar 25 21:01:20 2026 GMT
Not After : Mar 26 21:01:20 2026 GMT
Subject: CN=5b0cfb7c58203f7487d2d9389a9cbc2b08c8bd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4e:83:4e:8d:ca:76:b6:16:23:e7:56:ce:35:
47:61:43:4b:6c:7e:d9:bf:35:5f:a3:d8:8b:76:fb:
76:04:73:18:e9:13:85:0c:90:c3:d4:09:12:89:64:
a5:f7:5d:67:de:9a:86:f8:57:70:9d:3d:9c:0e:9b:
38:69:c6:b5:08:c1:8b:46:ed:5b:9b:74:c5:60:ea:
87:34:5e:96:5b:9e:50:6b:86:65:7c:77:31:47:10:
e9:cb:f5:89:af:d1:ce:69:fb:2b:80:2a:fc:c9:23:
8a:c0:80:f6:e8:6a:ef:8c:f6:fc:c0:00:e6:39:ec:
39:c1:27:4c:95:42:04:7e:44:14:a5:be:60:2a:b2:
06:9f:b6:6f:ac:dd:66:dc:78:17:b3:36:90:45:ac:
ab:65:8f:81:be:89:cb:e8:e0:32:3c:a6:47:29:78:
e0:a4:22:d2:6d:a4:c7:78:a7:79:ed:52:83:58:b9:
b8:58:e1:3c:f7:e9:da:c8:01:3c:bd:56:59:31:64:
8a:9f:cb:ad:88:64:ea:c1:06:44:5f:3e:43:85:ac:
40:03:cf:1e:46:95:2b:32:40:2a:7f:47:79:a4:18:
71:eb:69:05:3d:00:77:6c:1a:9d:48:bb:9a:d5:0d:
54:bc:25:41:d9:27:52:11:93:12:27:89:ac:b6:6c:
a5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0C:FB:7C:58:20:3F:74:87:D2:D9:38:9A:9C:BC:2B:08:C8:BD:2D
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d7:3a:02:dc:f1:65:8d:ab:af:94:b6:d3:a4:1d:12:51:33:
ae:e0:2c:3a:7b:49:2b:43:5d:49:8d:16:e0:2f:01:cf:92:4d:
fb:af:4c:be:64:1e:b2:d5:34:1d:40:db:3c:29:c8:d5:38:64:
41:95:ef:3c:aa:8f:77:39:81:2d:05:e5:48:97:5a:84:dd:10:
c9:ef:72:b0:8f:11:ae:a9:b0:f9:ec:67:58:28:38:09:f5:54:
ff:dd:02:bc:8c:51:fb:cd:19:db:02:44:2e:89:48:75:76:f6:
68:ed:10:19:88:ed:80:38:ed:71:22:5c:a2:f5:e1:5d:0d:5d:
70:85:44:63:71:13:a9:17:7a:38:5c:82:bb:46:ed:6c:8c:ce:
2d:79:b3:e6:22:49:54:93:a8:01:fc:a1:c8:1f:45:be:9b:ed:
81:7f:fc:0c:b1:c2:f9:7e:da:32:3f:ef:86:fa:3f:22:66:62:
09:7b:fc:8e:43:7d:0f:52:39:18:38:f9:9b:2d:20:b4:4b:97:
b0:80:72:45:d3:4d:88:cb:4e:04:7b:ad:bb:fa:57:0d:82:6f:
57:4b:88:7f:ca:3c:34:d9:b2:43:ec:11:74:29:a9:77:7a:98:
ec:0d:26:c3:60:d4:b4:2e:0b:7e:32:6d:0e:8a:94:f9:f8:29:
ee:aa:1b:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzUbwIHvE9zqezpB89YssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmM2ZjYjY0MjVkNTk4ZTRiODdiMDQ5MTdiM2VmOTUwOWUz
YjU2YzAwHhcNMjYwMzI1MjEwMTIwWhcNMjYwMzI2MjEwMTIwWjAzMTEwLwYDVQQD
Eyg1YjBjZmI3YzU4MjAzZjc0ODdkMmQ5Mzg5YTljYmMyYjA4YzhiZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU6DTo3KdrYWI+dWzjVHYUNLbH7Z
vzVfo9iLdvt2BHMY6ROFDJDD1AkSiWSl911n3pqG+FdwnT2cDps4aca1CMGLRu1b
m3TFYOqHNF6WW55Qa4ZlfHcxRxDpy/WJr9HOafsrgCr8ySOKwID26GrvjPb8wADm
Oew5wSdMlUIEfkQUpb5gKrIGn7ZvrN1m3HgXszaQRayrZY+BvonL6OAyPKZHKXjg
pCLSbaTHeKd57VKDWLm4WOE89+nayAE8vVZZMWSKn8utiGTqwQZEXz5DhaxAA88e
RpUrMkAqf0d5pBhx62kFPQB3bBqdSLua1Q1UvCVB2SdSEZMSJ4mstmylqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsM+3xYID90h9LZOJqcvCsIyL0tMB8GA1UdIwQY
MBaAFC8/y2Ql1ZjkuHsEkXs++VCeO1bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzct
NmY3MWNhZDE2Zjk2LzEvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzctNmY3MWNhZDE2Zjk2
LzEvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStc6Atzx
ZY2rr5S206QdElEzruAsOntJK0NdSY0W4C8Bz5JN+69MvmQestU0HUDbPCnI1Thk
QZXvPKqPdzmBLQXlSJdahN0Qye9ysI8Rrqmw+exnWCg4CfVU/90CvIxR+80Z2wJE
LolIdXb2aO0QGYjtgDjtcSJcovXhXQ1dcIVEY3ETqRd6OFyCu0btbIzOLXmz5iJJ
VJOoAfyhyB9FvpvtgX/8DLHC+X7aMj/vhvo/ImZiCXv8jkN9D1I5GDj5my0gtEuX
sIByRdNNiMtOBHutu/pXDYJvV0uIf8o8NNmyQ+wRdCmpd3qY7A0mw2DUtC4LfjJt
DoqU+fgp7qobPA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:08 2026 by rpki-client