Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: WqoXknsdS+GrG0F5KGZ0ANZYrOcGm8RtwsuBoFm3L/k=
Subject key identifier: C0:98:83:FF:6C:8D:E2:85:62:04:3D:A7:FC:25:3B:1D:27:3D:A2:FE
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 019EC11204093143B3D88F47A66836D7EA36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 0562
Signing time: Sat 13 Jun 2026 13:00:43 +0000
Manifest this update: Sat 13 Jun 2026 13:00:43 +0000
Manifest next update: Sun 14 Jun 2026 13:00:43 +0000
Files and hashes: 1: IM21zWEfSOh921Z1zwkT3vvGFfs.roa (hash: W640/PCpAKPhrBYklv0d8kY3i3xSr0Wn6L53wsJDrnQ=)
2: b9vcmhhWmTdDD16HAHP6D8RbDkA.roa (hash: FBfH9P35YtWY9xE6pYzf6Mz1MG4bSL4q1phGJQRtJTw=)
3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: d4o1CX/ENg55MzGrLqae5AaIWNK1pQWOdzvbdux0qCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:04:09:31:43:b3:d8:8f:47:a6:68:36:d7:ea:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Jun 13 13:00:43 2026 GMT
Not After : Jun 14 13:00:43 2026 GMT
Subject: CN=c09883ff6c8de28562043da7fc253b1d273da2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:de:01:64:7e:4b:54:32:6c:77:92:b8:f3:
d1:6f:f2:f2:6c:4f:57:cd:8a:6a:03:e9:bf:59:cc:
e6:9e:7f:ec:d5:98:5c:25:3c:4a:94:c5:ff:d3:f8:
e0:65:c1:b5:ee:c3:e6:22:0e:ab:d3:59:67:00:bd:
d2:71:01:10:db:e1:0d:3e:54:ec:aa:5a:b0:d3:d3:
b9:b4:d1:e6:cf:7f:7e:7b:b2:c6:72:d6:ed:35:d0:
58:d2:8f:ff:85:e0:79:4d:b9:5e:0a:af:27:cf:ab:
01:14:1d:02:b8:93:a6:fd:b2:63:fb:1a:5d:b9:ce:
f0:7a:83:5a:17:0c:1f:56:a3:05:e7:8e:e0:38:74:
64:85:4c:ce:cd:0d:7b:5f:b8:07:67:c9:ee:f6:cd:
6d:a0:fe:07:07:3b:3e:12:73:2a:ca:3b:4f:91:c4:
0c:33:54:20:ad:44:8a:5d:ee:80:9a:53:ac:dd:a9:
c2:ac:17:1a:e1:aa:c6:2b:15:0d:52:e5:99:b7:07:
4f:95:85:91:07:dd:6d:00:53:6f:45:bd:6f:e2:87:
96:84:20:99:c6:08:9b:fc:e8:70:1c:1c:a7:4b:d1:
57:36:dc:b5:03:b2:04:fc:a0:72:31:d0:66:a1:64:
a3:23:c8:45:7d:11:a6:96:32:80:61:d1:d9:af:3f:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:98:83:FF:6C:8D:E2:85:62:04:3D:A7:FC:25:3B:1D:27:3D:A2:FE
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2c:a6:96:36:e6:d7:2a:84:44:92:27:a1:8e:0f:d1:30:fd:
35:34:2d:43:2a:75:37:93:15:3c:c6:32:6d:32:26:1b:42:9e:
87:99:72:ee:65:93:37:1a:09:23:19:b0:13:f1:44:ad:67:b9:
79:ff:69:c4:df:51:7b:85:de:53:1a:3a:6e:8b:67:04:a2:4c:
51:2a:c1:57:d1:50:4f:c9:f4:f5:2e:b8:72:dd:54:76:f5:32:
c2:d1:65:48:d7:13:fc:0b:07:04:e7:db:19:e7:65:b9:ce:65:
b7:a0:5d:82:ae:62:0f:5a:cc:1e:ef:64:71:a8:24:64:39:d8:
97:44:a8:2d:18:fe:f0:e5:aa:64:bd:87:b1:5e:77:ee:6e:50:
0f:3a:1e:b0:0a:4a:64:b5:35:da:13:8a:fd:d9:03:79:6f:cc:
ae:76:bb:c9:6f:fa:38:88:d2:1f:53:b8:97:7f:15:8e:85:0a:
61:e9:47:8b:8c:4c:80:ab:55:86:a5:ee:b7:c9:ec:6e:32:6b:
0a:88:8f:2a:fc:cf:07:e1:81:8f:a5:82:98:22:49:a9:6e:fc:
eb:e9:34:18:db:e7:36:42:87:bd:f4:45:49:4d:f2:05:4f:51:
f5:bd:43:f5:a2:5e:b2:0c:a5:50:63:9c:a2:82:ae:6d:3b:79:
ef:2d:40:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEgQJMUOz2I9Hpmg21+o2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OTIzNDIwY2NmZWUwMzhjZGNhZWI0MzkyMzEwYTA1OThh
ZjdhM2UwHhcNMjYwNjEzMTMwMDQzWhcNMjYwNjE0MTMwMDQzWjAzMTEwLwYDVQQD
EyhjMDk4ODNmZjZjOGRlMjg1NjIwNDNkYTdmYzI1M2IxZDI3M2RhMmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I7eAWR+S1QybHeSuPPRb/LybE9X
zYpqA+m/Wczmnn/s1ZhcJTxKlMX/0/jgZcG17sPmIg6r01lnAL3ScQEQ2+ENPlTs
qlqw09O5tNHmz39+e7LGctbtNdBY0o//heB5TbleCq8nz6sBFB0CuJOm/bJj+xpd
uc7weoNaFwwfVqMF547gOHRkhUzOzQ17X7gHZ8nu9s1toP4HBzs+EnMqyjtPkcQM
M1QgrUSKXe6AmlOs3anCrBca4arGKxUNUuWZtwdPlYWRB91tAFNvRb1v4oeWhCCZ
xgib/OhwHBynS9FXNty1A7IE/KByMdBmoWSjI8hFfRGmljKAYdHZrz81SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCYg/9sjeKFYgQ9p/wlOx0nPaL+MB8GA1UdIwQY
MBaAFJWSNCDM/uA4zcrrQ5IxCgWYr3o+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iODA0MDUtZDE5Yi00ZTBmLWFjMzct
NTIwMGZjMTZmZjhjLzEvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iODA0MDUtZDE5Yi00ZTBmLWFjMzctNTIwMGZjMTZmZjhj
LzEvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbiymljbm
1yqERJInoY4P0TD9NTQtQyp1N5MVPMYybTImG0Keh5ly7mWTNxoJIxmwE/FErWe5
ef9pxN9Re4XeUxo6botnBKJMUSrBV9FQT8n09S64ct1UdvUywtFlSNcT/AsHBOfb
Gedluc5lt6Bdgq5iD1rMHu9kcagkZDnYl0SoLRj+8OWqZL2HsV537m5QDzoesApK
ZLU12hOK/dkDeW/Mrna7yW/6OIjSH1O4l38VjoUKYelHi4xMgKtVhqXut8nsbjJr
CoiPKvzPB+GBj6WCmCJJqW786+k0GNvnNkKHvfRFSU3yBU9R9b1D9aJesgylUGOc
ooKubTt57y1A8Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:07:40 2026 by rpki-client