Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
File: 3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json)
Hash identifier: 9XH3KJm9Hu8cnKwmeTM22PfKhX6KYZir0aAmhCkGNhY=
Subject key identifier: 2D:DF:AF:20:86:4B:EC:74:69:3B:77:E0:B4:EB:9D:32:52:84:6A:AC
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial: 01A0D64B991536D8248D26B474029D47FAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
Manifest number: 1A83
Signing time: Fri 25 Sep 2026 02:01:13 +0000
Manifest this update: Fri 25 Sep 2026 02:01:13 +0000
Manifest next update: Sat 26 Sep 2026 02:01:13 +0000
Files and hashes: 1: 2W3yWm1HMzPskIDqOBKTk5NLDnk.roa (hash: zkzysD/L4UIm9OcLl6P6Mv4weJO+FXhHhd0t2XLROjI=)
2: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: msYDwPmPiwqnaGPyQNJupQCC7+ZgHvVIi5lh+zoR5Wc=)
3: K3l-f-R4fzp0JNI40Ow_kAwQElE.roa (hash: lzT7cfBjG064YjxJ7JvC+eelDCQdNhykEA7ZwxG3cvA=)
4: PKWl5L-Kf_6-uLjkK3IrLmDHIJ8.roa (hash: a8KnYbin0YfzPy81a2Ft5OJRitrpc3uTgAStWm8odkA=)
5: WVGS-uOqCUSz2p_N5CL2Cz4z-K0.roa (hash: IB5UKLk0ZZT7DbiIeOg9ZlXwRRXDT147MF0fykJ8TKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:99:15:36:d8:24:8d:26:b4:74:02:9d:47:fa:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Validity
Not Before: Sep 25 02:01:13 2026 GMT
Not After : Sep 26 02:01:13 2026 GMT
Subject: CN=2ddfaf20864bec74693b77e0b4eb9d3252846aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:ce:77:a8:e4:7e:4b:d8:a0:bc:c3:8f:4a:
b0:50:60:63:79:19:ca:ce:8e:c4:19:4a:df:cd:1f:
e7:7d:ac:d7:97:85:7f:e3:b7:90:5a:84:2b:e8:0d:
96:36:df:d2:ef:b2:ef:ed:54:9b:df:55:aa:42:da:
6d:41:4b:a5:22:66:db:42:f2:32:e0:96:06:21:d6:
ca:66:7d:da:61:e2:a7:5f:43:03:06:e1:11:7e:66:
63:80:5b:2e:8c:23:7f:79:bd:c0:6b:76:e1:09:87:
bc:8f:0b:d0:bd:b9:e6:c0:53:d1:a6:61:1f:f3:09:
83:1f:52:b8:0b:7a:e1:31:1e:fe:64:07:f6:d9:94:
b1:b9:28:a9:6d:2a:bf:4c:b8:d1:50:7d:e3:c3:b7:
10:93:0c:04:b5:23:6c:b1:1e:36:3b:ca:50:2b:09:
89:62:a9:c1:a2:91:64:cd:a5:ff:36:81:23:60:74:
21:ce:a3:4f:4e:90:4c:b5:0d:33:46:dc:ad:10:7d:
b5:62:f3:ca:20:42:a9:43:bd:0c:c3:d2:2c:97:77:
91:30:3a:1d:e0:1c:87:85:77:45:55:b4:e3:0e:3f:
80:12:26:74:15:ba:06:3d:c4:a6:ac:b7:8f:3d:de:
35:3e:ed:38:8f:08:3e:bf:c4:2a:0e:a4:2d:db:f4:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DF:AF:20:86:4B:EC:74:69:3B:77:E0:B4:EB:9D:32:52:84:6A:AC
X509v3 Authority Key Identifier:
keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c3:77:ce:58:08:f9:d9:d9:c2:3a:4a:6d:5a:b3:d0:fb:58:
f7:52:99:72:d9:c0:74:3a:11:7f:d2:23:95:11:9f:02:13:72:
b9:c1:88:c5:0a:31:71:24:62:63:7e:53:de:0e:37:d1:c5:5e:
1e:45:d2:fe:4e:9b:fb:d5:3e:5c:27:d1:0e:6a:81:3a:63:68:
e6:fc:0a:ea:13:75:c8:41:9b:65:a9:ae:09:a4:8d:f4:75:07:
a7:23:3b:04:1e:45:bb:5b:6b:86:6a:5e:00:f8:39:91:cf:63:
0e:b7:8c:07:1c:17:79:c8:c1:c6:d0:84:92:83:76:6f:90:ca:
05:94:2a:85:c2:17:d9:68:d1:0c:fd:86:31:3e:e7:50:aa:7e:
28:f5:73:c1:da:56:9d:4d:6d:ef:a3:31:de:85:ea:87:5b:43:
18:6f:28:03:4c:5f:2c:90:49:bd:59:6d:51:07:ef:d1:cc:4a:
bd:19:0a:7c:04:1d:0f:1a:5d:da:12:20:3c:7b:b8:c1:42:50:
11:7f:2b:05:e3:1e:e6:62:5a:4e:ee:be:2a:f3:f6:1a:71:73:
7a:5c:9f:5e:b4:95:ea:5c:ef:d6:14:32:17:e9:0c:2d:db:97:
38:54:67:0f:e8:3f:a9:e4:23:8c:fb:f2:48:c6:1c:7c:5a:5a:
42:8d:69:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:19:48 2026 by rpki-client