Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: VxhAzFhJ69dgffU1WkMbYMl4MIFYgVQIbhRIFL4jZSc=
Subject key identifier: B3:B2:60:56:78:40:CE:30:D5:56:70:56:C1:7B:6B:31:03:2B:22:F1
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 019CAB6B9D64747ED15C9ED3CAEBC37DE5F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 04E7
Signing time: Sun 01 Mar 2026 22:01:22 +0000
Manifest this update: Sun 01 Mar 2026 22:01:22 +0000
Manifest next update: Mon 02 Mar 2026 22:01:22 +0000
Files and hashes: 1: INyi55Cem-fKRbCyhWoBxset2V8.roa (hash: ewguotn20Zrkv6k2+CkZNOeCi50wOffr5aj3RIiSuA0=)
2: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: bAZqf3GK+8sni/dBOoGg761iZ/Km1tI765HIB5TluHI=)
3: lot016U7U6JL43wtM60yljMjF4I.roa (hash: 18/d/s7/WmFdWb3qjzEB9yH+6YTufgLNjpNy8KhdOs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:9d:64:74:7e:d1:5c:9e:d3:ca:eb:c3:7d:e5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Mar 1 22:01:22 2026 GMT
Not After : Mar 2 22:01:22 2026 GMT
Subject: CN=b3b260567840ce30d5567056c17b6b31032b22f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:19:3d:f9:ed:27:55:bd:e1:f8:85:f6:e5:
a5:46:ec:8a:78:82:2b:81:51:cc:41:db:64:a2:ce:
61:a3:fe:e3:66:ca:dd:bb:8e:ae:c7:a5:01:6c:56:
23:cc:ee:af:a7:0c:09:89:7b:ec:9a:08:08:6e:ff:
71:b6:a4:49:17:6a:e3:d9:d6:73:7d:51:48:88:98:
eb:67:79:b2:84:60:1a:04:a7:c6:f7:7c:b2:f5:2c:
67:eb:19:61:0a:2b:93:ed:d9:a6:39:09:eb:58:cf:
16:4b:e5:a3:67:70:f0:85:6c:fe:aa:55:62:37:ad:
2d:1d:6b:c1:55:bb:9d:2c:af:01:a3:66:5d:9d:b8:
02:a0:2b:01:bf:83:19:23:f6:34:91:64:be:68:a2:
cd:41:99:44:69:39:19:f4:16:19:6b:e4:1c:ab:26:
9a:31:77:be:d4:f2:20:ed:7e:5c:41:e3:4f:99:2d:
cb:a2:eb:c0:2d:5e:b8:09:8e:5f:1d:3e:91:18:e6:
64:05:d9:a0:db:aa:86:48:8a:8a:93:12:74:35:a3:
b1:26:d0:8a:49:ca:db:32:0f:c6:7b:14:f8:4f:2b:
f2:9e:32:b1:82:bb:49:be:80:06:b0:e3:3c:a7:b7:
f6:ce:2a:d2:06:9a:c5:5f:e9:e8:40:78:a1:3d:68:
63:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B2:60:56:78:40:CE:30:D5:56:70:56:C1:7B:6B:31:03:2B:22:F1
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1d:3a:53:02:06:20:d6:1f:34:2f:2e:6b:a9:14:74:fc:26:
3c:6c:ab:f1:ac:6e:df:9d:51:80:32:bf:0c:24:60:a4:cc:8e:
d7:be:0d:5f:36:60:87:8b:fc:a8:a2:7c:11:6f:0d:61:76:73:
8e:31:03:24:38:16:de:0f:76:22:38:86:fb:e2:13:4f:31:3e:
5e:00:a8:7e:05:eb:91:dd:82:d3:29:99:9b:13:cc:de:07:30:
35:8a:3d:b0:cf:32:fb:db:26:3a:8e:12:ad:69:04:e8:f1:5b:
35:cf:7a:31:4a:2b:2b:18:0f:6f:5f:d9:2c:57:14:2c:8f:f1:
35:81:d4:dd:4e:81:14:d3:2d:a2:61:5d:65:cf:20:0b:dc:94:
78:f4:37:bf:7d:1c:9c:75:7f:e0:60:71:44:50:b8:ba:ba:7f:
e7:04:96:1c:60:56:c0:7b:b0:12:2f:35:ca:1a:4f:23:8d:73:
20:b0:e0:32:45:a7:60:f0:9a:4c:68:b3:ca:eb:8b:79:c6:21:
12:12:22:7c:b9:dc:b2:ef:a1:18:53:cd:c0:9e:7a:07:42:9a:
52:d1:a1:e0:bb:05:cd:7a:7a:dd:cf:15:83:df:1a:4a:4f:e2:
de:44:e5:dc:a8:df:d1:52:42:5e:ac:cd:7f:6e:f9:52:59:cc:
72:69:f6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:48:20 2026 by rpki-client