Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier: Yogr4BLKbSN45IHcm+XaeuerYaAxaC3FimSyZ4wOOO0=
Subject key identifier: CF:94:93:24:30:85:3F:D1:25:54:75:10:9E:4E:B4:EE:03:60:0D:71
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 019F9692B50690ED6D8BEFD088441326202B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number: 0CD2
Signing time: Sat 25 Jul 2026 00:00:24 +0000
Manifest this update: Sat 25 Jul 2026 00:00:24 +0000
Manifest next update: Sun 26 Jul 2026 00:00:24 +0000
Files and hashes: 1: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: 63KraRT1i3PElOciiz4AnO1aMPQTML0dWsj9j6qUl6g=)
2: doW0mpCnrwRns3RIOxChwkliLTE.roa (hash: GsqyaGjy8E4RJKoWLdZmSypIUlVFghPNcYphYfam9qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:92:b5:06:90:ed:6d:8b:ef:d0:88:44:13:26:20:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Jul 25 00:00:24 2026 GMT
Not After : Jul 26 00:00:24 2026 GMT
Subject: CN=cf94932430853fd1255475109e4eb4ee03600d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:67:0d:7c:8b:48:9d:04:1a:13:98:cd:e0:
da:e4:4b:b3:14:24:fa:6a:c1:8c:db:53:35:50:c7:
2e:fe:7b:aa:a6:eb:39:e3:f9:91:ad:ef:ee:17:e9:
d4:c3:9c:f6:1c:bc:a8:c2:f5:b1:b6:b3:f4:21:fe:
da:3c:d4:5a:0c:61:4e:c5:fb:17:2e:b2:3d:83:bb:
db:02:65:a4:f2:5d:5c:49:f8:72:2e:c9:bb:f1:18:
92:90:2d:06:d1:80:32:5d:a8:3c:9b:6f:d7:a2:50:
b2:e6:a4:00:50:a1:fb:7e:51:96:f4:6d:4b:fa:87:
37:dd:23:e5:9d:c5:d2:a1:55:b8:fa:b4:5a:9d:b2:
96:bf:45:bd:75:58:14:a3:f8:b0:fe:e9:30:26:44:
44:da:b1:38:9f:e4:f7:52:15:cb:33:91:5d:65:ef:
31:ca:34:c5:6a:f8:b3:3f:74:c7:8f:c4:c7:9c:11:
b2:d5:24:7b:36:e5:d0:79:ec:b0:12:b6:33:58:0c:
a2:17:0b:15:a5:0f:f7:e8:90:f3:f2:2b:32:c1:01:
d4:6a:64:fb:bf:57:12:9a:5b:05:d6:c1:e7:fe:f0:
10:1a:82:b2:60:d4:03:06:2f:a5:76:6f:b5:93:88:
a1:1c:d8:4b:9e:91:5c:a9:65:3a:ce:38:de:12:7b:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:94:93:24:30:85:3F:D1:25:54:75:10:9E:4E:B4:EE:03:60:0D:71
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f3:2e:22:85:2e:5b:48:44:51:ea:48:cc:ee:f1:bc:37:d9:
c6:70:a6:a8:7d:58:6a:0c:c4:a4:5f:6f:fe:cb:a7:d5:8c:0a:
73:cf:13:29:c6:96:b9:b9:45:87:e1:6d:64:73:66:55:c0:21:
26:53:87:10:de:44:14:f9:f6:a9:39:54:ad:f3:ea:32:93:9c:
4d:02:9d:26:18:71:0d:bc:9f:ac:dd:18:da:f0:60:a7:95:05:
51:95:52:08:70:f0:a4:54:4b:94:9a:3b:18:26:41:e4:42:cf:
1f:91:4d:af:10:f1:f9:8e:1d:24:e0:3f:6c:90:05:23:aa:86:
54:8d:21:d1:af:2c:53:06:97:c6:c7:60:6b:4f:ad:4d:c2:68:
d9:fc:fb:37:03:25:19:63:76:3d:ed:91:74:4c:ab:ee:85:dc:
8a:97:35:86:c6:4a:f0:9a:eb:2b:32:b2:92:f4:82:26:af:c7:
7e:ae:ff:1e:54:f7:a8:18:4c:e6:94:55:7d:42:d3:8d:2c:aa:
65:77:a2:a2:30:a9:62:65:76:fb:45:e8:e9:1e:87:ae:f1:3f:
17:e8:4b:7f:1b:c3:6a:c6:64:0f:f0:ae:02:bc:88:55:01:63:
0b:63:35:b6:5a:15:49:8b:ce:7b:74:5f:a1:a6:e4:13:24:e0:
66:0e:92:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:38:41 2026 by rpki-client