Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier: rin9xSROVwK2i32vP3in2nqI6zSYgxMbEFYN7Vs/WV8=
Subject key identifier: 00:BA:44:13:32:B1:03:3E:67:D4:1F:C1:2E:86:4F:21:0A:9A:7A:94
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 01A0F60D55A491E34E4534B58D13493AFA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number: 0D88
Signing time: Thu 01 Oct 2026 06:01:04 +0000
Manifest this update: Thu 01 Oct 2026 06:01:04 +0000
Manifest next update: Fri 02 Oct 2026 06:01:04 +0000
Files and hashes: 1: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: MTkvFub0eIGAVE3zR4J5I9H/kAzhC8PDvM9jeIg8k6k=)
2: doW0mpCnrwRns3RIOxChwkliLTE.roa (hash: GsqyaGjy8E4RJKoWLdZmSypIUlVFghPNcYphYfam9qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:0d:55:a4:91:e3:4e:45:34:b5:8d:13:49:3a:fa:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Oct 1 06:01:04 2026 GMT
Not After : Oct 2 06:01:04 2026 GMT
Subject: CN=00ba441332b1033e67d41fc12e864f210a9a7a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:04:96:a4:a7:6b:1d:0f:14:62:ae:22:a1:
fc:4c:71:64:9c:74:2e:27:06:d3:47:9c:b2:a7:fe:
58:5f:ac:15:25:57:c5:5c:94:45:d9:50:a7:29:72:
4a:2f:5b:1e:01:6a:55:cd:c3:de:e0:cc:b8:e1:da:
34:9d:62:e7:13:b5:a5:2e:a9:ba:f8:0b:47:60:d3:
ea:9c:cb:a5:a2:48:a4:a0:f2:43:94:3f:69:67:41:
92:4b:95:95:33:9b:04:c3:de:a8:e0:9c:f0:a0:32:
46:86:5d:4f:bc:26:3f:de:e8:c4:58:7a:6e:62:2e:
39:af:53:26:d9:39:3b:5c:e6:95:7f:19:32:9a:88:
50:b9:2c:ce:9f:aa:64:f5:a7:0a:09:43:95:97:26:
08:61:c0:e7:e4:94:c3:a2:de:37:64:81:74:e2:59:
5a:1f:63:a4:53:f3:d8:a8:74:ff:b2:69:f0:4e:b9:
e6:c5:37:8b:67:20:fd:49:9b:fa:1e:75:0e:35:55:
d4:3b:68:7d:19:2d:b8:bf:ce:0b:da:2b:8f:a4:92:
a9:50:da:68:ce:36:ee:89:62:df:c7:ff:ad:15:95:
8c:89:03:bb:54:4e:d7:22:ae:2c:5f:98:dd:33:0c:
23:b7:9c:1d:3d:40:a9:8b:eb:b7:eb:79:b9:21:e1:
f6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BA:44:13:32:B1:03:3E:67:D4:1F:C1:2E:86:4F:21:0A:9A:7A:94
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:04:ec:3d:3f:dd:25:ec:30:61:3d:c6:b2:a7:b6:c0:76:95:
68:10:55:64:ff:25:6f:4c:46:4e:c4:41:4a:40:03:f9:4c:93:
1b:80:9a:5b:eb:3d:bd:52:7c:d7:73:90:01:fb:3f:14:0d:61:
e1:c0:dc:b3:30:87:73:11:74:e3:e0:58:c3:3e:76:28:74:bd:
d2:49:92:a0:7d:e4:3b:e1:0d:74:54:1b:14:c2:3c:20:18:18:
73:a8:38:d5:fb:56:7b:3e:d9:f3:6b:e7:bb:b3:b2:f3:f7:27:
61:d9:3b:c6:a4:31:a3:f4:4c:16:7c:b7:c4:32:64:42:49:7c:
02:5e:41:b6:d1:0a:94:5c:98:29:81:86:01:07:07:67:3b:fa:
a6:3b:18:ea:05:9e:c4:cf:9e:eb:c8:d0:76:f9:99:78:a6:08:
d2:11:e5:62:be:a0:40:30:6e:72:1d:9d:47:3e:36:8a:d4:8d:
fb:0b:30:b0:0f:92:cf:a3:6c:15:ad:7b:d1:3f:fa:e5:bb:30:
19:b3:fe:82:d0:34:82:da:63:13:5c:22:1b:b4:3f:79:21:0c:
e0:52:cd:70:4d:39:ce:09:ec:91:3d:60:e4:82:37:c8:b1:40:
4d:44:0c:7b:77:71:f4:a2:f6:74:08:d2:34:3d:9f:31:2e:0a:
b2:f9:bf:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:36:33 2026 by rpki-client