Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
File: lzDCc6-etVZkMIjkO-86ahgch8I.mft (raw, json)
Hash identifier: 8aifORFW2aMJUzxYFBf3iiWbR7PjyMS0d7vGb2wC6So=
Subject key identifier: A1:86:5C:DA:1B:BF:C1:57:16:39:31:9D:11:92:92:B7:D3:0C:30:81
Authority key identifier: 97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
Certificate issuer: /CN=9730c273af9eb556643088e43bef3a6a181c87c2
Certificate serial: 019CA9465332CFDF4A3C6EA0FEFF8AE6E356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
Manifest number: 37
Signing time: Sun 01 Mar 2026 12:01:24 +0000
Manifest this update: Sun 01 Mar 2026 12:01:24 +0000
Manifest next update: Mon 02 Mar 2026 12:01:24 +0000
Files and hashes: 1: LftAIu9k2wnzZP9QfqBNpPsB7GA.asa (hash: oB3unSja7fyioWETroS2ws+p/jX5s1fLimygzH+96YE=)
2: lzDCc6-etVZkMIjkO-86ahgch8I.crl (hash: iE279Rroas6lHoolDwrMDQQv/QEIbsVyLRLrX/wooSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:53:32:cf:df:4a:3c:6e:a0:fe:ff:8a:e6:e3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9730c273af9eb556643088e43bef3a6a181c87c2
Validity
Not Before: Mar 1 12:01:24 2026 GMT
Not After : Mar 2 12:01:24 2026 GMT
Subject: CN=a1865cda1bbfc1571639319d119292b7d30c3081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:7d:2f:93:cd:c7:2f:42:5e:20:f5:b7:43:
b6:53:c1:c5:00:7b:4f:07:bc:a9:e1:31:6c:54:04:
a9:a1:9b:37:e2:3a:a7:b7:1b:81:84:b6:46:9b:9c:
07:29:1a:c8:18:fa:1e:96:23:f6:d7:c5:20:1e:92:
65:80:80:af:58:10:ea:48:f1:90:14:2a:b6:a2:a4:
60:fb:d0:84:47:29:6d:1f:38:e0:7c:f8:1d:5a:e8:
84:66:df:4f:22:64:b7:65:99:86:2e:fc:fd:49:77:
9a:e9:81:cb:4a:1c:37:9b:5a:60:46:43:d5:e6:7d:
4b:2b:2c:9d:fd:8e:3e:9d:d1:57:1a:f4:4e:9d:6d:
18:d7:0a:cd:45:fb:6a:ed:6b:7c:ea:04:ef:fb:e0:
f1:54:6f:9e:95:c0:ab:a9:19:27:11:d6:b9:29:10:
df:96:44:23:75:00:09:d0:fe:3f:29:69:f8:51:d4:
a1:d0:76:ff:9b:3e:c1:cc:9f:18:a4:a7:aa:bc:e6:
ba:a5:00:93:78:3c:1f:4e:67:e8:1a:72:cc:bc:25:
55:fc:0d:81:f6:1f:0e:34:76:97:11:31:70:57:bd:
46:bb:28:b3:07:1e:7b:38:ca:fa:b7:7f:57:c6:7b:
4b:ed:ab:85:c4:9d:4f:4f:85:e8:6a:fc:54:35:06:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:86:5C:DA:1B:BF:C1:57:16:39:31:9D:11:92:92:B7:D3:0C:30:81
X509v3 Authority Key Identifier:
keyid:97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:23:26:74:aa:c6:5e:a6:31:50:ec:23:8a:33:e1:4c:3a:c7:
ab:b3:2d:00:82:e8:f1:a2:23:05:fc:76:15:ed:de:56:37:12:
f2:b0:68:42:d9:07:b0:36:d3:ab:98:bd:8e:00:ee:9c:46:99:
35:f0:b9:ce:3f:15:48:7a:5c:05:7b:78:47:c3:01:04:aa:61:
e3:c0:c2:45:a4:4c:01:b0:7b:f9:d7:68:dd:3c:09:0b:5b:c3:
a0:d0:af:6a:12:63:e9:03:69:e0:4d:00:48:8b:1f:85:6b:f8:
56:4b:03:75:44:bd:b0:80:66:53:58:08:be:42:51:73:1e:7c:
d5:90:94:f7:cd:1d:c7:94:01:6b:da:cf:66:99:9e:fc:6b:9c:
e6:64:4e:3c:91:a8:87:21:98:b8:b8:f8:be:70:19:9c:b4:8d:
51:af:d1:39:2b:47:b7:d9:76:76:93:7e:c2:f9:cc:c9:97:e1:
2e:9e:d5:89:60:d8:e8:44:1e:5e:fb:9f:67:e9:74:2b:92:68:
a2:b3:72:35:d2:68:38:69:16:c5:6e:95:84:bf:7a:94:11:5f:
31:ef:54:a2:71:bc:3c:93:7c:26:7c:47:31:38:a0:f4:37:9d:
ab:c6:28:30:2a:9e:60:1e:6d:af:29:b9:5f:9c:80:21:38:d3:
13:a0:0d:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRlMyz99KPG6g/v+K5uNWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MzBjMjczYWY5ZWI1NTY2NDMwODhlNDNiZWYzYTZhMTgx
Yzg3YzIwHhcNMjYwMzAxMTIwMTI0WhcNMjYwMzAyMTIwMTI0WjAzMTEwLwYDVQQD
EyhhMTg2NWNkYTFiYmZjMTU3MTYzOTMxOWQxMTkyOTJiN2QzMGMzMDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAp9L5PNxy9CXiD1t0O2U8HFAHtP
B7yp4TFsVASpoZs34jqntxuBhLZGm5wHKRrIGPoeliP218UgHpJlgICvWBDqSPGQ
FCq2oqRg+9CERyltHzjgfPgdWuiEZt9PImS3ZZmGLvz9SXea6YHLShw3m1pgRkPV
5n1LKyyd/Y4+ndFXGvROnW0Y1wrNRftq7Wt86gTv++DxVG+elcCrqRknEda5KRDf
lkQjdQAJ0P4/KWn4UdSh0Hb/mz7BzJ8YpKeqvOa6pQCTeDwfTmfoGnLMvCVV/A2B
9h8ONHaXETFwV71GuyizBx57OMr6t39XxntL7auFxJ1PT4XoavxUNQZkcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGGXNobv8FXFjkxnRGSkrfTDDCBMB8GA1UdIwQY
MBaAFJcwwnOvnrVWZDCI5DvvOmoYHIfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHpEQ2M2LWV0VlprTUlqa08tODZhaGdjaDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85ZjZkYjQtZDJlZi00NGE0LWJhYTAt
ZjJkNDBhZGUzYjliLzEvbHpEQ2M2LWV0VlprTUlqa08tODZhaGdjaDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS85ZjZkYjQtZDJlZi00NGE0LWJhYTAtZjJkNDBhZGUzYjli
LzEvbHpEQ2M2LWV0VlprTUlqa08tODZhaGdjaDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyMmdKrG
XqYxUOwjijPhTDrHq7MtAILo8aIjBfx2Fe3eVjcS8rBoQtkHsDbTq5i9jgDunEaZ
NfC5zj8VSHpcBXt4R8MBBKph48DCRaRMAbB7+ddo3TwJC1vDoNCvahJj6QNp4E0A
SIsfhWv4VksDdUS9sIBmU1gIvkJRcx581ZCU980dx5QBa9rPZpme/Guc5mROPJGo
hyGYuLj4vnAZnLSNUa/ROStHt9l2dpN+wvnMyZfhLp7ViWDY6EQeXvufZ+l0K5Jo
orNyNdJoOGkWxW6VhL96lBFfMe9UonG8PJN8JnxHMTig9Dedq8YoMCqeYB5trym5
X5yAITjTE6ANCg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:22 2026 by rpki-client