Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: 9jpOozUCup/xjRPanTZBbSKnYKwAfI/TdVKdlvEwufs=
Subject key identifier: A1:41:E5:30:DC:A4:73:39:B3:E8:2D:6F:F4:5C:E4:48:4F:E4:76:BC
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 019CAA21A237B3483D2A4C449BEDBD0C8F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 044D
Signing time: Sun 01 Mar 2026 16:00:56 +0000
Manifest this update: Sun 01 Mar 2026 16:00:56 +0000
Manifest next update: Mon 02 Mar 2026 16:00:56 +0000
Files and hashes: 1: IM21zWEfSOh921Z1zwkT3vvGFfs.roa (hash: W640/PCpAKPhrBYklv0d8kY3i3xSr0Wn6L53wsJDrnQ=)
2: b9vcmhhWmTdDD16HAHP6D8RbDkA.roa (hash: FBfH9P35YtWY9xE6pYzf6Mz1MG4bSL4q1phGJQRtJTw=)
3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: Lg9l87R4hQPF3nSrJ5kcjgsvVCAkQ+5kvCxKJ3j/cBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:a2:37:b3:48:3d:2a:4c:44:9b:ed:bd:0c:8f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Mar 1 16:00:56 2026 GMT
Not After : Mar 2 16:00:56 2026 GMT
Subject: CN=a141e530dca47339b3e82d6ff45ce4484fe476bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:ab:aa:75:9e:fc:7e:25:9a:f1:2b:fc:36:
72:01:41:ec:a4:c5:34:89:0e:ac:d3:36:ca:01:aa:
56:70:95:91:1b:d9:bc:da:1d:1a:ba:c3:40:8e:d1:
4d:2a:b3:f4:18:7a:05:9e:29:23:88:ec:50:e3:1d:
7f:7c:90:ab:72:c8:52:58:d4:62:6d:b1:cc:ad:3d:
8d:40:68:4f:ff:52:5d:4a:ed:71:fb:3a:f1:b8:ef:
be:31:3e:ef:3a:c9:76:56:8c:55:14:db:99:20:d4:
99:39:12:21:63:18:64:c3:5e:b5:53:9c:8c:c0:75:
9d:90:64:29:ea:fa:57:0e:bf:4c:ed:3e:84:19:be:
17:99:be:9d:31:8b:36:99:0a:74:e3:e7:5c:35:a6:
24:71:dd:10:15:ad:3b:25:bf:2e:bb:a7:41:cf:e6:
da:8a:26:5a:4e:ff:76:d4:4c:6a:26:c0:21:5a:c5:
80:a2:56:75:2c:cd:10:3b:0a:aa:15:b3:9a:21:56:
c7:ca:fa:27:76:2d:bb:97:a1:67:0d:67:b1:0f:4e:
0c:17:bf:4b:01:db:1a:d8:0c:ea:71:34:9f:b4:d8:
a3:57:24:ab:d0:44:ca:37:55:e9:ab:bf:51:80:9a:
1c:01:54:4c:4c:a9:33:2c:d6:bb:27:42:01:26:b9:
8f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:41:E5:30:DC:A4:73:39:B3:E8:2D:6F:F4:5C:E4:48:4F:E4:76:BC
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:72:79:70:9e:e7:78:ad:0c:98:40:ad:54:f8:20:56:27:de:
ab:05:45:f0:0f:d7:b5:c6:0b:74:d6:26:80:e7:db:28:2c:fe:
02:fa:18:1d:6e:d1:69:a2:a0:f2:8d:51:62:a0:c2:cf:35:83:
e1:ed:48:13:57:a9:bf:01:4d:6b:9d:ba:83:e2:56:1e:19:5e:
19:35:7f:e1:57:4d:b2:b7:aa:50:1c:ca:28:0f:cf:9c:75:ff:
96:31:69:39:c1:c0:c2:96:fe:da:c7:79:da:a2:c3:4e:b5:f0:
59:a0:53:cb:9e:a8:a1:26:db:c6:66:bf:3b:1d:da:c7:7e:bd:
0e:ec:09:cd:e9:69:a4:15:2a:22:ba:d2:6c:ff:d1:cc:88:66:
00:e5:19:eb:1d:68:d4:54:41:85:5c:56:19:64:df:94:44:53:
c7:92:68:7e:2b:8f:77:82:c2:d5:b8:c6:2c:ca:ef:e6:d6:94:
ea:a8:11:60:73:2b:51:3c:5d:f4:93:3c:ef:18:63:b0:b8:a5:
eb:84:f8:64:8a:ce:57:f2:4a:15:28:09:59:3f:c7:fb:d7:85:
0e:21:ce:b5:4e:dc:70:e8:b6:61:2d:d9:38:fd:3b:b1:90:0f:
b8:eb:2e:db:69:99:93:c7:44:6c:6e:0b:ba:cf:57:f6:11:24:
38:e2:42:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:08 2026 by rpki-client