Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: wq2MWIrnIVBTOirGS0uM7Upxai+qTpozH3vE4oK2AS0=
Subject key identifier: D6:58:12:8A:0B:88:47:A4:43:E6:F2:5F:2C:1D:84:1C:E1:E8:6D:88
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 01A1AC70E26A049C71B96F8949ED9C3C72F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 06E5
Signing time: Thu 05 Nov 2026 16:00:41 +0000
Manifest this update: Thu 05 Nov 2026 16:00:41 +0000
Manifest next update: Fri 06 Nov 2026 16:00:41 +0000
Files and hashes: 1: IM21zWEfSOh921Z1zwkT3vvGFfs.roa (hash: W640/PCpAKPhrBYklv0d8kY3i3xSr0Wn6L53wsJDrnQ=)
2: b9vcmhhWmTdDD16HAHP6D8RbDkA.roa (hash: FBfH9P35YtWY9xE6pYzf6Mz1MG4bSL4q1phGJQRtJTw=)
3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: 067Nz8tia3489Ul906+nb2xulpCWoZpMj1ZFUn/qMjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:70:e2:6a:04:9c:71:b9:6f:89:49:ed:9c:3c:72:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Nov 5 16:00:41 2026 GMT
Not After : Nov 6 16:00:41 2026 GMT
Subject: CN=d658128a0b8847a443e6f25f2c1d841ce1e86d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:e8:f0:d9:85:33:73:6b:3a:ce:2a:d8:34:
70:85:9b:fe:ed:36:26:c5:d0:fa:99:1a:f5:28:d1:
68:6b:20:57:26:74:dc:b5:1d:a6:be:97:6e:52:ec:
92:2a:0b:ff:d0:af:0e:d4:d4:b7:f3:3c:d5:7a:a9:
97:f4:41:de:43:38:25:d1:98:68:ac:97:fa:f9:73:
25:15:b2:7e:b4:15:80:8a:91:70:a5:26:df:6d:9a:
c9:13:6b:bb:08:b7:ba:3f:66:e4:c6:71:3a:b0:d8:
72:cf:04:9b:a6:61:43:5b:11:60:4c:18:3c:67:cc:
6e:5c:af:77:dc:7a:1f:45:8d:93:36:3e:cd:06:87:
34:53:90:69:ff:9a:8e:75:b9:ff:58:8f:fc:5f:26:
64:fb:7c:98:bc:5d:4a:25:f9:2a:2e:b3:c6:b4:5c:
c0:2c:22:07:15:39:e1:87:64:c5:d5:2e:60:87:27:
91:2b:45:16:ad:c9:99:b1:22:c1:fe:6e:dc:73:0b:
7a:38:16:c9:f5:1e:0e:6a:ba:b8:59:5e:f2:81:38:
77:21:64:24:d4:4d:46:98:1a:f6:9f:6e:48:7d:07:
b5:46:d6:0f:bc:8f:b6:8d:34:78:6a:cb:20:7c:df:
91:70:db:ad:bc:ce:2e:52:cf:cc:cc:2a:b5:fb:d0:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:58:12:8A:0B:88:47:A4:43:E6:F2:5F:2C:1D:84:1C:E1:E8:6D:88
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:39:03:e4:81:09:2a:1e:c3:bf:8b:58:0a:59:9d:27:eb:be:
fb:18:9c:0c:ed:57:69:35:81:8f:17:c4:90:68:28:9c:f7:c9:
11:e7:43:0e:d3:c0:72:5a:38:a3:4e:26:b8:13:20:79:ff:92:
ea:74:8a:03:3b:dd:e3:c3:5b:e8:71:66:e7:64:7e:6f:10:01:
71:ff:4c:44:c8:33:85:9c:40:cc:52:1e:cc:8d:17:d0:cf:f8:
f7:76:66:fe:e7:96:e4:80:d8:83:19:6a:3f:5f:65:c1:e4:28:
94:b7:d1:1c:ac:87:6a:fe:37:ae:0f:04:a3:ef:6e:ae:27:19:
cb:9e:ea:60:6a:77:71:e2:bd:86:a0:28:35:25:14:39:ed:60:
93:18:41:44:2c:da:d6:91:5b:d6:84:5f:4e:5c:bf:93:8d:d6:
4c:bd:84:09:98:ee:61:3f:70:a2:ac:08:67:10:83:e5:a2:e4:
31:23:f5:1a:66:49:29:a9:1b:48:93:24:83:43:3f:b4:e3:29:
67:7a:8b:83:e2:88:e0:6d:c2:e8:4f:f0:da:56:d6:ab:42:fa:
99:0c:58:4c:03:c6:41:67:3a:4f:fc:46:cc:87:af:1a:a6:16:
c7:77:f7:73:5f:78:33:23:64:09:00:81:59:ea:15:fc:be:45:
3a:73:f0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:49:42 2026 by rpki-client