Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: h78JO83SzqVKLOxojjBYhZEd+7MCD3GYwMGJ8s/PPSk=
Subject key identifier: 90:95:9C:9F:B8:04:E1:AD:7C:CB:A8:4A:C1:E3:03:E5:A1:96:5F:D5
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 01A0C0D5D81B4BED0354A8692F7648055E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 066B
Signing time: Sun 20 Sep 2026 22:00:34 +0000
Manifest this update: Sun 20 Sep 2026 22:00:34 +0000
Manifest next update: Mon 21 Sep 2026 22:00:34 +0000
Files and hashes: 1: IM21zWEfSOh921Z1zwkT3vvGFfs.roa (hash: W640/PCpAKPhrBYklv0d8kY3i3xSr0Wn6L53wsJDrnQ=)
2: b9vcmhhWmTdDD16HAHP6D8RbDkA.roa (hash: FBfH9P35YtWY9xE6pYzf6Mz1MG4bSL4q1phGJQRtJTw=)
3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: q7lE7ZQ+GM5Wgr3Z7Siemb0Z+Ss4sPEiCeCdO1RTBiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:d5:d8:1b:4b:ed:03:54:a8:69:2f:76:48:05:5e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Sep 20 22:00:34 2026 GMT
Not After : Sep 21 22:00:34 2026 GMT
Subject: CN=90959c9fb804e1ad7ccba84ac1e303e5a1965fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:3d:bf:26:ee:7d:77:a6:5c:d9:53:e9:f8:
1f:34:77:b6:93:d5:61:52:df:3a:85:e6:24:b6:71:
86:7d:7a:30:84:d5:70:70:b9:8d:f8:80:2d:11:9f:
2f:00:50:dd:42:3e:f3:92:b9:29:86:e0:08:15:29:
d7:bb:64:c6:91:05:0d:df:97:d4:ac:71:d5:4b:01:
6b:12:de:d0:02:c1:9e:8c:c2:b2:12:60:90:9d:f6:
4b:37:37:bd:cc:4c:dd:99:c5:91:ec:ba:a3:58:b3:
15:55:64:6d:55:7b:49:1f:b1:46:34:07:84:10:4a:
e2:1e:3e:e6:1e:12:8a:ca:0a:bd:3c:9c:f5:da:fe:
42:f7:85:46:d3:e3:6e:25:36:02:5c:27:78:9d:73:
c2:36:b2:cf:45:12:ca:65:38:d1:65:2b:31:88:95:
06:1f:88:b4:5f:f2:f0:3d:60:39:78:3d:0e:4b:75:
2a:86:16:09:2d:26:c4:c9:ce:50:cb:88:b1:d1:ae:
4a:5e:40:01:13:24:61:59:56:f4:7a:3f:36:30:6e:
72:51:75:d3:d8:dd:15:e4:f8:a5:fd:75:25:8c:ec:
83:b3:e0:a6:4d:fc:cf:78:d9:8a:52:1d:8f:84:36:
71:3d:fe:a4:46:ae:a1:57:53:d2:e1:bd:e0:15:55:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:95:9C:9F:B8:04:E1:AD:7C:CB:A8:4A:C1:E3:03:E5:A1:96:5F:D5
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:14:e5:12:66:84:8c:00:5f:38:37:b4:4d:7b:b5:f4:ea:2c:
0b:96:e5:e4:bd:68:65:cb:c1:66:9e:0d:fe:97:21:2d:0c:2c:
d0:77:96:1b:90:8c:7c:25:d9:61:4e:7b:bc:18:e0:ab:28:ae:
18:65:01:ef:76:e1:1b:ef:dc:7f:bc:0d:af:e8:f4:f5:9d:7d:
09:be:b7:eb:78:3f:7c:93:32:04:7e:4d:44:c7:a0:95:f1:30:
e9:52:73:04:3b:ac:96:3b:34:b7:92:36:d3:2b:ea:7b:da:69:
01:a5:ff:fa:3c:72:98:16:af:43:d9:dc:4b:9c:84:38:db:a2:
1d:4d:8b:0e:52:db:7a:03:93:14:c9:63:39:3a:80:eb:da:6d:
b9:de:33:60:73:b0:bf:cc:6c:24:8e:b7:98:32:d4:a3:d0:67:
e0:67:7e:47:5c:6d:f9:ce:41:f8:02:ed:82:33:d7:eb:cc:b4:
b2:66:e7:83:16:6f:c5:64:00:c5:b4:f2:0d:44:c7:b1:bf:e5:
16:65:47:58:e2:4f:2c:b3:23:83:c6:0a:9f:97:8d:31:0e:c7:
95:32:50:ce:b9:9b:66:0e:48:3b:95:0f:0b:90:64:dd:71:52:
83:3e:5b:a7:d3:1f:c4:17:3a:9f:84:fb:2e:d7:5f:9e:68:77:
06:86:14:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDA1dgbS+0DVKhpL3ZIBV4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OTIzNDIwY2NmZWUwMzhjZGNhZWI0MzkyMzEwYTA1OThh
ZjdhM2UwHhcNMjYwOTIwMjIwMDM0WhcNMjYwOTIxMjIwMDM0WjAzMTEwLwYDVQQD
Eyg5MDk1OWM5ZmI4MDRlMWFkN2NjYmE4NGFjMWUzMDNlNWExOTY1ZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydU9vybufXemXNlT6fgfNHe2k9Vh
Ut86heYktnGGfXowhNVwcLmN+IAtEZ8vAFDdQj7zkrkphuAIFSnXu2TGkQUN35fU
rHHVSwFrEt7QAsGejMKyEmCQnfZLNze9zEzdmcWR7LqjWLMVVWRtVXtJH7FGNAeE
EEriHj7mHhKKygq9PJz12v5C94VG0+NuJTYCXCd4nXPCNrLPRRLKZTjRZSsxiJUG
H4i0X/LwPWA5eD0OS3UqhhYJLSbEyc5Qy4ix0a5KXkABEyRhWVb0ej82MG5yUXXT
2N0V5Pil/XUljOyDs+CmTfzPeNmKUh2PhDZxPf6kRq6hV1PS4b3gFVU2DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCVnJ+4BOGtfMuoSsHjA+Whll/VMB8GA1UdIwQY
MBaAFJWSNCDM/uA4zcrrQ5IxCgWYr3o+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iODA0MDUtZDE5Yi00ZTBmLWFjMzct
NTIwMGZjMTZmZjhjLzEvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iODA0MDUtZDE5Yi00ZTBmLWFjMzctNTIwMGZjMTZmZjhj
LzEvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxTlEmaE
jABfODe0TXu19OosC5bl5L1oZcvBZp4N/pchLQws0HeWG5CMfCXZYU57vBjgqyiu
GGUB73bhG+/cf7wNr+j09Z19Cb6363g/fJMyBH5NRMeglfEw6VJzBDusljs0t5I2
0yvqe9ppAaX/+jxymBavQ9ncS5yEONuiHU2LDlLbegOTFMljOTqA69ptud4zYHOw
v8xsJI63mDLUo9Bn4Gd+R1xt+c5B+ALtgjPX68y0smbngxZvxWQAxbTyDUTHsb/l
FmVHWOJPLLMjg8YKn5eNMQ7HlTJQzrmbZg5IO5UPC5Bk3XFSgz5bp9MfxBc6n4T7
Ltdfnmh3BoYUJg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 06:13:49 2026 by rpki-client