Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: leLe4DD98wHXiUCSGUGVYrBAq9iqumHehE+N98XDwcY=
Subject key identifier: 49:09:16:96:A4:85:C3:53:5D:03:6B:DB:61:F5:1C:C7:C4:79:53:92
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 019FAA1A6ACD79AB6CFDE9F5EB45FA35741A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 0674
Signing time: Tue 28 Jul 2026 19:01:25 +0000
Manifest this update: Tue 28 Jul 2026 19:01:25 +0000
Manifest next update: Wed 29 Jul 2026 19:01:25 +0000
Files and hashes: 1: INyi55Cem-fKRbCyhWoBxset2V8.roa (hash: ewguotn20Zrkv6k2+CkZNOeCi50wOffr5aj3RIiSuA0=)
2: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: +6mMOFhZMfdXN0B22rCu/iXTDa5VP0WPizLjIJ03EdY=)
3: lot016U7U6JL43wtM60yljMjF4I.roa (hash: 18/d/s7/WmFdWb3qjzEB9yH+6YTufgLNjpNy8KhdOs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:6a:cd:79:ab:6c:fd:e9:f5:eb:45:fa:35:74:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Jul 28 19:01:25 2026 GMT
Not After : Jul 29 19:01:25 2026 GMT
Subject: CN=49091696a485c3535d036bdb61f51cc7c4795392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:02:ba:64:5d:a7:3e:f7:5b:e7:b5:87:ba:e5:
ef:98:5c:10:7b:0d:df:8f:e6:62:30:82:80:a4:84:
fc:72:b3:da:9b:b0:c5:22:05:b4:05:1d:cf:03:d3:
1d:05:73:6e:d4:58:98:d0:1b:13:3f:03:37:1f:2f:
5b:6a:d3:2b:4f:43:0d:83:3a:88:6e:e2:0f:f2:3e:
a5:6b:f6:5d:0c:a0:b6:2d:17:5a:40:15:78:77:cb:
c5:12:db:78:5d:73:a5:32:b6:7f:be:0a:f9:29:e1:
cc:e5:4d:e2:f2:10:64:34:71:b0:f1:18:8e:2c:43:
ad:09:57:f9:df:4e:65:38:95:9d:08:26:46:e5:79:
5f:a5:a9:3e:9a:9f:f6:c3:d9:44:7a:17:66:67:8a:
eb:a9:e3:1e:f8:ea:7f:2c:4d:0f:ed:7f:a5:09:34:
bc:e5:c8:d1:11:eb:0e:a6:14:54:6a:95:e2:5e:eb:
05:dc:5a:d6:bf:43:97:39:1b:ea:0e:3e:06:bc:2e:
f8:88:95:fa:cd:c7:76:2f:85:4e:c5:42:49:f7:18:
01:58:d1:8e:b1:74:54:c0:8d:72:0c:0d:5e:98:bf:
08:da:b6:2f:9f:58:03:e6:c2:32:94:35:49:ec:5c:
8e:ae:c6:fa:77:ba:0c:a0:f9:68:8e:91:d6:eb:5a:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:09:16:96:A4:85:C3:53:5D:03:6B:DB:61:F5:1C:C7:C4:79:53:92
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:98:23:d3:94:4f:5d:64:70:29:96:63:f9:cd:cb:4e:40:8a:
6c:8b:24:c4:28:45:11:d4:ce:13:09:4b:2f:76:2c:21:05:a8:
8c:03:8f:37:4b:54:57:0c:ee:44:19:5f:50:78:22:21:92:6d:
e6:10:42:b4:49:6e:74:04:51:32:46:22:76:49:ca:28:53:bc:
14:a5:e2:97:5f:d4:43:ab:71:9e:70:27:ae:8a:f6:d2:b9:fe:
2a:30:f7:6f:c8:78:28:64:e4:23:14:88:b2:39:25:6e:f8:d5:
0e:62:7d:a8:52:5e:c5:39:36:18:c3:db:ca:bd:96:7c:bc:81:
06:18:ca:fa:aa:74:25:9e:f2:b8:56:3a:e9:ce:59:40:6c:60:
c5:32:f4:f7:19:cb:23:d9:6a:98:21:94:81:5d:ee:77:c5:2d:
e8:e7:a8:02:99:22:bb:5a:39:cf:60:e9:1d:4d:a2:ac:f7:71:
a8:eb:4d:0e:35:80:69:1f:92:c0:35:c6:fe:ae:b3:19:01:1a:
bb:9a:d9:06:e9:84:fa:3a:4d:63:ae:2b:55:7c:26:37:9f:12:
29:04:9b:f0:dc:e6:74:6a:1f:dc:64:d5:b9:b5:1d:41:2b:61:
7e:72:7d:f8:a2:3d:7c:68:85:89:20:12:9d:b0:5a:2c:32:3a:
ad:36:63:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:03:20 2026 by rpki-client