Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier: qc0qNU+aukCLWmx5mXRZL9D9vFnk6l4wXetW6NKUnCo=
Subject key identifier: 02:E9:94:13:5A:B3:07:E1:11:9A:21:3F:B8:75:03:32:13:7C:09:D2
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 019D28BB93FDBBEC79C553F44CCE397821C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number: 0F2F
Signing time: Thu 26 Mar 2026 06:01:14 +0000
Manifest this update: Thu 26 Mar 2026 06:01:14 +0000
Manifest next update: Fri 27 Mar 2026 06:01:14 +0000
Files and hashes: 1: C0AVe4iSzt1tLzO1z3J_8BFSSwQ.roa (hash: 1x0Uuntsxdx1mq0mpp7kC3SseRJDTb+Eb50/cVmhJPA=)
2: idAPicjfcAurqzPxNV2Y-GlWZVM.roa (hash: 9WnV/PIHV4CmrkZ1/Csc9lXw9Lt4fmaI0bw+OleKvs0=)
3: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: 9ZJuusF5zO2dpl5V2VitBrVl9zx0iYRaB9B0o29nbSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:93:fd:bb:ec:79:c5:53:f4:4c:ce:39:78:21:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Mar 26 06:01:14 2026 GMT
Not After : Mar 27 06:01:14 2026 GMT
Subject: CN=02e994135ab307e1119a213fb8750332137c09d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:b1:94:8d:7b:8e:d8:d3:06:1a:58:9f:91:
34:5c:4f:26:c2:12:98:96:63:ea:3d:e4:00:f7:a9:
d0:f0:fd:88:e3:af:35:4e:e4:09:fa:ba:5b:78:00:
02:00:eb:d5:c5:9c:f8:fd:06:65:dc:32:b5:64:40:
a7:1c:cb:9e:49:ba:0e:fe:99:41:c3:b6:fc:37:7e:
b6:2e:fb:6c:dd:22:65:b2:eb:8c:af:9f:cf:7c:32:
63:8a:a6:61:de:d0:48:53:09:d0:70:c6:30:60:c8:
11:76:30:ee:52:07:79:4b:78:ee:60:79:2b:64:3c:
a2:5d:70:f4:d3:3d:41:78:ed:94:8f:2c:16:5d:c2:
d4:ec:21:8e:ac:a4:e2:ad:48:94:7d:70:1d:9f:f4:
d1:93:c4:bc:5b:89:59:65:d9:c7:88:65:1a:06:be:
04:7c:1e:87:1e:85:9c:a9:3a:03:80:c7:fa:55:4c:
f7:13:27:62:04:f3:20:e5:41:52:81:78:7c:a0:f6:
85:3d:b0:e8:e4:c4:32:15:2e:13:41:26:c8:3d:bd:
30:7b:68:dd:f1:8d:3f:25:65:cb:15:91:34:72:eb:
b8:8d:47:38:92:2d:71:4a:57:0b:b4:75:c9:25:ea:
6c:45:c6:98:3d:2c:0d:91:ec:62:e0:c3:65:d8:a8:
da:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E9:94:13:5A:B3:07:E1:11:9A:21:3F:B8:75:03:32:13:7C:09:D2
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9d:a7:2f:cf:e6:07:48:3e:1d:6d:96:7a:7a:74:10:85:6d:
2b:be:d1:38:2f:94:b3:29:fb:3e:93:ff:7b:c2:c4:6e:9e:4e:
97:21:16:ec:4e:f1:dd:a3:18:25:75:bf:1d:77:a7:66:8c:ad:
02:4e:71:78:dd:39:35:a5:86:9e:78:d4:77:c9:ce:47:cc:ee:
6f:fc:e3:b3:5f:4c:40:e1:de:ca:24:2e:68:17:3d:88:ad:83:
84:19:1a:f5:06:94:5c:fe:d7:d3:44:fc:2f:69:0d:16:16:fc:
37:54:41:89:a6:76:05:2e:8e:84:93:a2:fb:33:22:bf:16:86:
42:34:97:4e:b6:fe:ed:7d:17:36:14:d3:4a:16:63:c6:df:57:
a7:77:76:0b:3d:ee:99:38:88:32:3a:c3:1f:02:0f:1a:8a:c6:
74:0b:10:93:a7:fd:ef:cf:9c:0f:46:9e:28:d8:87:b6:e2:fc:
e2:77:0b:64:60:42:05:0f:ab:c9:4d:31:c9:b4:e6:64:c9:6b:
f2:20:c4:77:0b:53:23:83:be:ab:3a:3a:15:2a:6b:3f:ed:e2:
bc:e6:96:f1:7e:7d:21:ea:03:3e:ee:b4:93:eb:77:d0:d4:9f:
dc:e7:68:01:cc:04:10:ce:b6:1f:a5:27:2c:4f:3f:0f:74:56:
06:b4:cd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:57 2026 by rpki-client