Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: jKeBgX4LzR4RmqON7t4Y+mll2Dd4DsPQ44n+kCugHQI=
Subject key identifier: EC:10:46:47:43:05:D8:E4:91:9C:64:B9:89:2E:C5:97:A9:38:5B:A8
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 019CAC1053B1077263D50138EAC486453361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 044E
Signing time: Mon 02 Mar 2026 01:01:16 +0000
Manifest this update: Mon 02 Mar 2026 01:01:16 +0000
Manifest next update: Tue 03 Mar 2026 01:01:16 +0000
Files and hashes: 1: IM21zWEfSOh921Z1zwkT3vvGFfs.roa (hash: W640/PCpAKPhrBYklv0d8kY3i3xSr0Wn6L53wsJDrnQ=)
2: b9vcmhhWmTdDD16HAHP6D8RbDkA.roa (hash: FBfH9P35YtWY9xE6pYzf6Mz1MG4bSL4q1phGJQRtJTw=)
3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: WcSvoYYTkc433FB5u8/xThyc29oRDJv2u/8ffgudWNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:53:b1:07:72:63:d5:01:38:ea:c4:86:45:33:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Mar 2 01:01:16 2026 GMT
Not After : Mar 3 01:01:16 2026 GMT
Subject: CN=ec1046474305d8e4919c64b9892ec597a9385ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b6:4d:b7:4c:2c:a9:b7:9d:2e:a7:ba:56:ac:
f0:85:f8:b8:83:bc:53:a7:22:50:7a:9a:ed:1a:a6:
fb:aa:7b:a3:ae:7e:12:fb:de:92:60:5e:2f:bd:c8:
99:15:26:0e:1f:fd:33:58:75:a1:16:db:b7:c2:20:
17:ec:ac:67:54:8a:74:86:65:fa:c4:48:65:b0:11:
86:c6:3f:d4:fb:2b:85:7d:13:54:5e:be:ba:ec:02:
bf:b8:a7:0f:ab:43:a9:2f:62:88:26:1d:57:f8:1a:
82:0a:c2:8f:d2:3d:19:9c:23:40:ab:26:f4:ed:7d:
73:c1:f4:0c:07:54:a0:75:69:0b:10:7e:1e:9e:5c:
c9:a3:17:e7:03:39:eb:a5:41:73:0c:78:6c:b6:25:
7d:64:d7:a7:b4:90:48:7a:9d:10:09:b6:0c:d0:f7:
b7:7f:4f:02:5c:df:97:35:f9:49:28:33:c4:67:fa:
21:ad:54:4b:09:ae:6f:89:df:e9:fd:6e:c6:fe:19:
50:10:ce:0f:e0:85:12:43:30:50:07:a4:07:43:38:
ad:12:33:40:a2:43:65:1c:f7:92:b6:53:9c:44:fc:
3f:ba:2f:5a:9d:8d:36:0c:c6:80:a9:70:5b:ad:4d:
37:30:26:a4:dc:a3:7c:26:c0:69:9b:21:d0:eb:3a:
9f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:10:46:47:43:05:D8:E4:91:9C:64:B9:89:2E:C5:97:A9:38:5B:A8
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a6:bb:6d:9d:cf:86:4c:91:1a:5d:91:62:bc:58:0a:8a:b3:
ea:26:2b:b8:c0:82:96:c4:e8:de:76:1c:5e:9d:c4:a5:f0:b1:
f2:20:15:9d:45:52:b9:5f:c3:74:2d:05:c0:d6:58:f6:e3:97:
f8:a3:79:cc:6b:bb:63:24:07:55:61:e3:47:88:d0:95:9e:60:
05:7f:4a:7b:7b:c4:b5:dd:87:8c:71:61:8e:54:1b:fe:b5:45:
5f:65:60:1f:38:71:b8:4d:ea:d8:36:90:b8:e6:c7:ba:08:57:
3a:00:c4:bb:21:a7:d0:f3:9c:e6:8d:b9:0a:40:15:b2:3d:c3:
a5:39:21:1c:2a:0c:30:95:a8:72:c4:7a:f5:7b:3e:53:01:a7:
24:fd:cb:31:be:2d:7f:7a:80:0e:84:13:5c:bd:b3:67:90:0d:
86:58:2d:24:cb:22:53:66:fe:fb:90:d8:6e:55:8c:dd:88:4a:
a3:2d:fa:22:c8:5d:cb:11:34:01:73:ca:c5:73:69:4d:8a:9e:
bf:16:43:fa:bd:47:a6:62:f2:7a:3d:b1:9b:3e:aa:be:1f:0a:
cd:3a:86:05:71:5b:cd:90:43:95:91:39:83:d7:80:79:da:b0:
49:00:fa:fe:7f:d5:9e:23:46:33:de:84:41:7d:a6:3f:da:b1:
10:d8:44:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEFOxB3Jj1QE46sSGRTNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OTIzNDIwY2NmZWUwMzhjZGNhZWI0MzkyMzEwYTA1OThh
ZjdhM2UwHhcNMjYwMzAyMDEwMTE2WhcNMjYwMzAzMDEwMTE2WjAzMTEwLwYDVQQD
EyhlYzEwNDY0NzQzMDVkOGU0OTE5YzY0Yjk4OTJlYzU5N2E5Mzg1YmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37ZNt0wsqbedLqe6Vqzwhfi4g7xT
pyJQeprtGqb7qnujrn4S+96SYF4vvciZFSYOH/0zWHWhFtu3wiAX7KxnVIp0hmX6
xEhlsBGGxj/U+yuFfRNUXr667AK/uKcPq0OpL2KIJh1X+BqCCsKP0j0ZnCNAqyb0
7X1zwfQMB1SgdWkLEH4enlzJoxfnAznrpUFzDHhstiV9ZNentJBIep0QCbYM0Pe3
f08CXN+XNflJKDPEZ/ohrVRLCa5vid/p/W7G/hlQEM4P4IUSQzBQB6QHQzitEjNA
okNlHPeStlOcRPw/ui9anY02DMaAqXBbrU03MCak3KN8JsBpmyHQ6zqfmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwQRkdDBdjkkZxkuYkuxZepOFuoMB8GA1UdIwQY
MBaAFJWSNCDM/uA4zcrrQ5IxCgWYr3o+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iODA0MDUtZDE5Yi00ZTBmLWFjMzct
NTIwMGZjMTZmZjhjLzEvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iODA0MDUtZDE5Yi00ZTBmLWFjMzctNTIwMGZjMTZmZjhj
LzEvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKa7bZ3P
hkyRGl2RYrxYCoqz6iYruMCClsTo3nYcXp3EpfCx8iAVnUVSuV/DdC0FwNZY9uOX
+KN5zGu7YyQHVWHjR4jQlZ5gBX9Ke3vEtd2HjHFhjlQb/rVFX2VgHzhxuE3q2DaQ
uObHughXOgDEuyGn0POc5o25CkAVsj3DpTkhHCoMMJWocsR69Xs+UwGnJP3LMb4t
f3qADoQTXL2zZ5ANhlgtJMsiU2b++5DYblWM3YhKoy36IshdyxE0AXPKxXNpTYqe
vxZD+r1HpmLyej2xmz6qvh8KzTqGBXFbzZBDlZE5g9eAedqwSQD6/n/VniNGM96E
QX2mP9qxENhEOw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:22 2026 by rpki-client