Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: Yy71sFUQ+QzlGynVvN45RVNuOeUXNYTGg0jopzsiPQQ=
Subject key identifier: E5:CA:93:AC:A4:B6:08:B2:BB:B1:13:6B:67:F9:C6:10:7B:04:56:84
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 019FAABF0DD8BCCD75B0A1A064C2553BA73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 05DB
Signing time: Tue 28 Jul 2026 22:01:15 +0000
Manifest this update: Tue 28 Jul 2026 22:01:15 +0000
Manifest next update: Wed 29 Jul 2026 22:01:15 +0000
Files and hashes: 1: IM21zWEfSOh921Z1zwkT3vvGFfs.roa (hash: W640/PCpAKPhrBYklv0d8kY3i3xSr0Wn6L53wsJDrnQ=)
2: b9vcmhhWmTdDD16HAHP6D8RbDkA.roa (hash: FBfH9P35YtWY9xE6pYzf6Mz1MG4bSL4q1phGJQRtJTw=)
3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: WH2Te/w+b5UGFJ5japxAwFpqTcZ0eOGj5rDAXryrQqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:bf:0d:d8:bc:cd:75:b0:a1:a0:64:c2:55:3b:a7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Jul 28 22:01:15 2026 GMT
Not After : Jul 29 22:01:15 2026 GMT
Subject: CN=e5ca93aca4b608b2bbb1136b67f9c6107b045684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6b:be:84:eb:f6:16:48:48:24:35:9c:88:2b:
2e:53:b9:2a:f0:65:a3:0b:11:1d:63:ec:36:37:f1:
a1:4a:7d:c3:56:d3:be:1f:48:11:0f:8d:b0:db:02:
28:d9:60:01:7e:5b:da:1f:ef:f2:44:d9:40:41:1c:
a2:25:45:1a:f5:22:92:b5:69:7e:36:da:d6:69:f1:
df:b7:91:07:f4:73:af:6b:2e:d8:54:c1:df:ae:9a:
37:83:78:bf:0b:19:c5:42:fd:fb:b3:98:a9:df:65:
8a:ae:75:c7:d9:51:76:14:7e:5d:88:b3:62:91:4b:
f8:d5:08:a6:d7:47:ed:9e:32:1f:37:8e:7e:b0:48:
74:0e:ee:7b:11:e4:f1:eb:78:5d:3e:ca:ea:93:de:
f6:31:58:83:57:76:09:9e:cf:2e:cd:95:f0:9f:02:
c3:6b:65:40:3e:b6:c8:6c:80:24:21:11:88:56:bd:
12:92:f3:4a:84:a6:ce:58:28:53:e8:7b:e8:9d:bc:
b9:e7:49:ac:09:d0:3e:d8:75:b3:60:77:7a:73:08:
7b:a1:99:ca:4f:0f:65:a2:fd:97:37:cc:1e:36:d1:
db:45:8d:ed:44:6c:d0:7b:90:08:f0:23:d6:3a:46:
5c:aa:01:aa:d5:5d:48:23:ae:fe:e3:e7:32:81:53:
45:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CA:93:AC:A4:B6:08:B2:BB:B1:13:6B:67:F9:C6:10:7B:04:56:84
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c8:10:9d:de:fe:dd:d7:29:ff:52:72:4e:c9:33:18:0d:b2:
8f:27:7f:e5:81:92:30:b8:bc:d2:11:c9:59:20:57:05:fa:ed:
a8:4b:f7:09:b4:c2:7b:42:cf:77:93:0d:35:03:17:1a:15:35:
70:88:c2:b1:9c:77:c1:e2:3e:ec:66:68:c8:60:3d:71:47:8e:
9f:e1:a2:72:5f:73:05:ac:9f:f3:5b:33:bf:79:25:a7:e2:c8:
f9:eb:3a:91:3e:33:85:fe:d4:0c:e7:81:0d:5a:5a:16:cd:22:
de:61:71:5f:9a:85:66:75:0f:f8:ba:03:e7:db:f0:58:0c:c5:
c7:e0:17:74:5a:8c:0a:41:86:33:5b:7a:31:db:ae:a7:17:3e:
98:e9:e5:b1:4a:da:93:9d:1f:84:59:b2:a3:a5:cb:c5:b0:50:
88:9d:e7:25:b4:25:d3:11:26:a6:1d:f7:47:db:e1:d4:ed:69:
25:18:0b:a0:76:84:88:30:fb:2f:b2:cd:5b:0e:ee:3e:e8:3a:
05:7f:69:70:40:4d:6b:93:be:9d:d2:c0:ea:dc:24:37:16:af:
4d:39:5e:cd:e5:61:ab:18:bd:a9:a4:e8:20:55:a0:c8:c6:96:
a0:c3:16:1a:0f:99:d8:e6:ef:ec:08:e6:1a:d7:39:82:47:90:
17:9c:04:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvw3YvM11sKGgZMJVO6c7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OTIzNDIwY2NmZWUwMzhjZGNhZWI0MzkyMzEwYTA1OThh
ZjdhM2UwHhcNMjYwNzI4MjIwMTE1WhcNMjYwNzI5MjIwMTE1WjAzMTEwLwYDVQQD
EyhlNWNhOTNhY2E0YjYwOGIyYmJiMTEzNmI2N2Y5YzYxMDdiMDQ1Njg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWu+hOv2FkhIJDWciCsuU7kq8GWj
CxEdY+w2N/GhSn3DVtO+H0gRD42w2wIo2WABflvaH+/yRNlAQRyiJUUa9SKStWl+
NtrWafHft5EH9HOvay7YVMHfrpo3g3i/CxnFQv37s5ip32WKrnXH2VF2FH5diLNi
kUv41Qim10ftnjIfN45+sEh0Du57EeTx63hdPsrqk972MViDV3YJns8uzZXwnwLD
a2VAPrbIbIAkIRGIVr0SkvNKhKbOWChT6Hvonby550msCdA+2HWzYHd6cwh7oZnK
Tw9lov2XN8weNtHbRY3tRGzQe5AI8CPWOkZcqgGq1V1II67+4+cygVNFJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXKk6yktgiyu7ETa2f5xhB7BFaEMB8GA1UdIwQY
MBaAFJWSNCDM/uA4zcrrQ5IxCgWYr3o+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iODA0MDUtZDE5Yi00ZTBmLWFjMzct
NTIwMGZjMTZmZjhjLzEvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iODA0MDUtZDE5Yi00ZTBmLWFjMzctNTIwMGZjMTZmZjhj
LzEvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcgQnd7+
3dcp/1JyTskzGA2yjyd/5YGSMLi80hHJWSBXBfrtqEv3CbTCe0LPd5MNNQMXGhU1
cIjCsZx3weI+7GZoyGA9cUeOn+Gicl9zBayf81szv3klp+LI+es6kT4zhf7UDOeB
DVpaFs0i3mFxX5qFZnUP+LoD59vwWAzFx+AXdFqMCkGGM1t6Mduupxc+mOnlsUra
k50fhFmyo6XLxbBQiJ3nJbQl0xEmph33R9vh1O1pJRgLoHaEiDD7L7LNWw7uPug6
BX9pcEBNa5O+ndLA6twkNxavTTlezeVhqxi9qaToIFWgyMaWoMMWGg+Z2Obv7Ajm
Gtc5gkeQF5wEsw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:35:56 2026 by rpki-client