Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: utR5HjClrJ6WY1RrewxO6BgG/8yxjRh6evYPe8J2EJQ=
Subject key identifier: 53:A8:A9:02:CF:A8:E9:1D:FB:23:CF:23:12:8B:42:6F:F5:62:40:05
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 019EC06D85AE039D29B2FF1D8DAB91C9F0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 05FB
Signing time: Sat 13 Jun 2026 10:01:03 +0000
Manifest this update: Sat 13 Jun 2026 10:01:03 +0000
Manifest next update: Sun 14 Jun 2026 10:01:03 +0000
Files and hashes: 1: INyi55Cem-fKRbCyhWoBxset2V8.roa (hash: ewguotn20Zrkv6k2+CkZNOeCi50wOffr5aj3RIiSuA0=)
2: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: y4uDrEFTv8gX661Pdzlnn6X5BpSlO1px3kfrNoeSPLo=)
3: lot016U7U6JL43wtM60yljMjF4I.roa (hash: 18/d/s7/WmFdWb3qjzEB9yH+6YTufgLNjpNy8KhdOs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:85:ae:03:9d:29:b2:ff:1d:8d:ab:91:c9:f0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Jun 13 10:01:03 2026 GMT
Not After : Jun 14 10:01:03 2026 GMT
Subject: CN=53a8a902cfa8e91dfb23cf23128b426ff5624005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:af:3d:d2:19:c9:ce:27:15:c8:99:e3:f6:
6c:29:82:5b:09:a3:e7:5d:54:41:23:88:2d:89:20:
28:8a:3a:e4:38:9e:f4:5b:dc:d1:bb:9b:ba:db:93:
96:ca:54:ea:25:0e:7a:12:3a:b0:bb:f9:21:aa:19:
e1:0c:2d:0f:95:09:73:04:3a:4c:b9:fe:07:d5:35:
ce:21:90:87:5e:ba:a0:2a:b1:50:db:9d:e0:83:f3:
33:7c:e5:0e:b1:a3:72:97:2d:9b:f4:ed:c0:51:c5:
02:2c:5d:44:41:9a:e1:5a:3c:de:77:02:36:91:39:
eb:4f:bc:31:c3:de:92:d6:26:27:0a:64:96:ab:05:
33:a0:77:59:7f:88:24:a2:85:3a:0b:44:1a:48:eb:
0c:51:28:8e:f9:12:18:a5:70:32:bd:83:f0:d5:dd:
59:2f:59:72:c4:4b:8c:40:67:44:10:c7:c0:ec:93:
d5:84:28:11:30:5a:90:79:f2:82:d5:29:b8:c4:20:
22:65:45:ba:53:d3:11:99:f2:dc:21:2e:cd:db:d9:
9f:14:63:2f:be:09:ae:7a:e6:f3:50:06:89:86:ba:
50:56:05:bd:ca:e5:6e:9c:7f:6f:7e:45:16:43:53:
80:85:80:a5:76:4c:9a:3b:24:e0:54:a8:11:41:a2:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A8:A9:02:CF:A8:E9:1D:FB:23:CF:23:12:8B:42:6F:F5:62:40:05
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:52:ef:9b:f2:8e:65:90:3a:84:8d:78:c2:86:8b:68:49:10:
c0:5c:cc:24:f0:3f:12:75:d5:00:f1:07:11:25:c3:57:29:66:
13:3f:fe:35:30:75:38:5c:cd:10:05:ad:14:0d:69:e7:67:15:
e1:d0:68:ee:43:de:3e:f4:2c:5b:f8:84:05:2c:96:35:53:21:
94:ae:95:a7:f4:61:ba:0a:12:60:bc:ee:b3:22:cc:68:cf:2e:
1a:19:35:7b:3d:46:ea:fa:91:5d:db:18:29:a5:c5:1c:cd:bd:
32:2e:3e:4b:92:93:ca:18:24:61:3e:b9:28:0f:7d:3a:1e:ef:
96:ba:89:17:d2:34:5a:f2:1c:dd:a4:1e:a4:fa:fd:05:a8:21:
a5:fb:54:05:46:5f:b8:eb:30:d7:32:c3:c7:42:17:09:de:6a:
a2:d2:ff:b5:21:12:1c:81:fd:ff:75:6c:c3:33:4c:cc:dc:96:
cd:ba:29:9c:20:76:5f:4b:30:48:c0:f2:f3:c8:52:a8:29:30:
ce:a7:1b:39:db:53:98:51:42:f2:26:6e:de:e8:48:d8:f2:bc:
b9:62:09:bc:43:6f:82:b1:a9:22:98:99:bb:4d:85:4e:b9:ce:
2b:a0:39:90:10:7d:8d:b0:38:bc:03:a1:80:af:ee:ea:8d:6e:
fc:be:71:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:59:18 2026 by rpki-client