Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: 9qTKx0q/QtDiFeKMvvtbn7hhpB2m+vsL/GcKAoUbWFU=
Subject key identifier: D3:54:CD:F5:06:A4:FE:36:44:1C:7A:D7:B6:CC:99:3C:75:52:3D:10
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 019D999915E62C40957073D7FAB61A3837C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 04C9
Signing time: Fri 17 Apr 2026 04:00:39 +0000
Manifest this update: Fri 17 Apr 2026 04:00:39 +0000
Manifest next update: Sat 18 Apr 2026 04:00:39 +0000
Files and hashes: 1: IM21zWEfSOh921Z1zwkT3vvGFfs.roa (hash: W640/PCpAKPhrBYklv0d8kY3i3xSr0Wn6L53wsJDrnQ=)
2: b9vcmhhWmTdDD16HAHP6D8RbDkA.roa (hash: FBfH9P35YtWY9xE6pYzf6Mz1MG4bSL4q1phGJQRtJTw=)
3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: 9C1y1GRyUVuEZdrkL3NqJei/gIUiR92bXGV7sl8Kwtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:15:e6:2c:40:95:70:73:d7:fa:b6:1a:38:37:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Apr 17 04:00:39 2026 GMT
Not After : Apr 18 04:00:39 2026 GMT
Subject: CN=d354cdf506a4fe36441c7ad7b6cc993c75523d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:53:a7:5c:9a:18:d4:b6:04:7a:36:65:75:
d9:cd:c3:75:47:06:d9:be:46:8b:46:b2:32:fc:46:
2b:72:08:0a:cd:ad:aa:fc:1e:41:e9:23:62:7d:b8:
76:82:4c:e4:a4:08:e2:04:6a:1b:47:e6:4a:20:10:
eb:f2:41:0f:fc:b0:43:18:b4:bc:7f:2b:26:29:e8:
2d:b8:8e:f1:87:b1:d4:36:bd:34:fa:bf:2b:1c:9a:
b4:20:7c:e0:0c:75:24:cd:86:46:d5:08:d9:49:52:
20:94:21:21:16:2a:b4:d9:23:eb:6e:c8:ee:43:4a:
20:8a:70:5b:86:74:89:8e:f6:cc:40:9e:ad:be:7d:
b8:27:ee:6c:b4:9e:e6:e9:d1:69:b6:98:05:58:40:
58:6f:3f:4d:fd:c7:ff:8f:ef:a0:73:02:61:2b:71:
65:6e:8b:d4:90:8c:83:81:56:1d:9d:05:f1:82:07:
c3:cd:9c:79:10:27:0c:4b:76:95:4a:c0:e1:87:70:
f8:b7:4a:78:b6:5e:68:f1:9c:28:2b:52:0d:fd:37:
42:1c:96:6b:26:ea:e3:9a:5d:62:04:14:fe:48:1d:
75:a6:0c:b3:09:4c:32:b5:13:f5:2a:e4:91:66:8f:
6c:8c:79:94:9c:ab:78:95:85:9a:d7:ea:fd:2a:15:
0e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:54:CD:F5:06:A4:FE:36:44:1C:7A:D7:B6:CC:99:3C:75:52:3D:10
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9b:42:ea:ed:67:23:63:fd:c4:d7:e9:25:f7:2f:a8:fd:7e:
6f:aa:0f:bc:c6:d0:f3:fa:bf:10:bf:50:63:cc:aa:af:2d:e6:
e5:2c:bd:50:66:90:56:d7:f0:36:0c:fc:a7:22:11:9a:2e:c8:
2c:f0:ac:91:4e:13:82:de:f7:cc:95:57:86:70:7f:68:8e:be:
3d:31:d5:63:2f:9c:16:cc:65:cb:26:41:ae:e7:5e:62:dd:07:
18:48:62:1a:a7:b2:0a:67:48:9d:f8:81:f8:d9:b4:1c:ce:a8:
27:fe:22:22:0c:db:d7:99:ff:38:d6:3b:c9:99:17:5f:0c:aa:
a7:75:63:30:39:27:51:6d:0c:04:43:17:d1:12:0f:9b:a4:e0:
e0:1f:10:61:10:8d:4b:70:c5:aa:04:e8:75:ad:4f:1f:14:a2:
b8:53:3e:50:c8:9d:5c:1a:d6:c9:02:af:68:e6:a7:31:8a:0b:
e5:50:49:0a:ab:68:3f:f9:4b:1c:a0:00:9a:df:4e:23:19:0c:
6b:b4:e4:13:28:73:c4:ce:89:eb:6a:57:9e:e3:eb:d9:9f:52:
d9:9f:0d:9c:19:06:b1:8c:98:7c:c3:89:c9:b8:ef:38:4b:4a:
5e:6e:37:3b:21:93:34:3e:08:13:c8:59:38:af:2a:ff:dd:32:
13:1c:65:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:52 2026 by rpki-client