
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
File: lzDCc6-etVZkMIjkO-86ahgch8I.mft (raw, json)
Hash identifier: DckUG38vAbhWfaqhD5sBx8P70c8i5BocbD2aWx8gcuQ=
Subject key identifier: 19:B3:7D:D3:BC:F4:14:42:35:C3:6A:28:A2:D6:D7:22:A3:FD:0E:39
Authority key identifier: 97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
Certificate issuer: /CN=9730c273af9eb556643088e43bef3a6a181c87c2
Certificate serial: 01A0CF363EDAD131335D7F44D4877336E9BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
Manifest number: 025D
Signing time: Wed 23 Sep 2026 17:00:33 +0000
Manifest this update: Wed 23 Sep 2026 17:00:33 +0000
Manifest next update: Thu 24 Sep 2026 17:00:33 +0000
Files and hashes: 1: LftAIu9k2wnzZP9QfqBNpPsB7GA.asa (hash: oB3unSja7fyioWETroS2ws+p/jX5s1fLimygzH+96YE=)
2: lzDCc6-etVZkMIjkO-86ahgch8I.crl (hash: xM5qGg8+eEYb4t1j7zy2h+cKP2JxM+VaqbdNtB2OBC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:3e:da:d1:31:33:5d:7f:44:d4:87:73:36:e9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9730c273af9eb556643088e43bef3a6a181c87c2
Validity
Not Before: Sep 23 17:00:33 2026 GMT
Not After : Sep 24 17:00:33 2026 GMT
Subject: CN=19b37dd3bcf4144235c36a28a2d6d722a3fd0e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:8e:72:54:ae:7c:32:88:93:d1:4b:67:e7:
be:81:e8:8f:a7:f9:b5:86:c2:33:8a:26:09:9e:8e:
40:81:2f:05:60:b8:4f:cc:53:82:f1:75:b2:a2:74:
95:1b:b0:20:49:f8:60:4e:2b:45:51:0d:9b:6a:ed:
66:fd:cd:64:1e:78:46:65:bb:5c:79:ee:fc:b2:dd:
73:c7:8d:9d:19:ff:7d:7a:db:09:9d:96:c6:4c:53:
32:ec:fe:8b:d2:64:4b:f4:b0:a9:b4:9f:b2:b5:c2:
be:eb:eb:3c:73:7a:22:e0:32:78:1b:d2:82:b5:bf:
a3:44:13:ab:53:ec:a4:6d:d4:3b:da:63:0c:7d:9d:
91:3a:f6:9c:2c:6f:0d:6f:aa:80:2e:de:19:39:97:
b4:b0:8b:f5:9e:ed:ce:f7:d9:a5:be:bb:dd:8c:20:
3b:da:18:8f:5e:70:a0:3b:1b:d8:c5:9f:1b:ae:1c:
71:0d:09:73:e7:fa:dc:9d:29:63:41:5d:16:5e:cc:
d6:f6:5f:f8:0c:f2:a8:dc:8a:4b:bc:5d:15:59:9e:
ed:8d:ab:62:8f:ac:04:8d:33:36:29:56:ee:87:f1:
57:93:04:49:81:64:60:d9:69:9a:20:12:81:e8:fa:
18:fb:4d:9d:90:bb:3c:f8:ba:60:c2:e5:54:d1:d6:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B3:7D:D3:BC:F4:14:42:35:C3:6A:28:A2:D6:D7:22:A3:FD:0E:39
X509v3 Authority Key Identifier:
keyid:97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:21:f4:d0:bd:93:a6:da:2e:e0:d0:1f:15:3c:18:ca:e1:cc:
0c:c0:c9:14:87:e2:a2:a0:10:5a:b4:6a:7e:5f:85:5b:88:b1:
80:a0:d5:bb:66:8f:54:86:ac:0e:e1:76:3f:f6:5b:4a:6a:0d:
14:60:96:c2:1a:99:17:8c:48:90:b0:b6:e5:a9:76:3c:61:80:
d9:ba:08:c2:8b:cb:56:7d:ca:60:bd:11:a0:ed:b0:9b:e5:42:
76:14:5c:cd:2c:bf:c1:8e:e3:97:a4:f8:fd:33:34:93:84:a0:
f0:92:e1:e3:d9:1f:e6:df:dd:89:f5:85:b7:78:7f:e5:f7:a7:
be:9f:aa:7d:b9:1d:59:f5:23:ef:9c:2c:a6:43:fd:d5:ef:21:
60:3f:8b:d2:9e:6d:7a:7f:28:86:e4:55:f1:d1:ea:55:ab:7e:
cf:b0:b6:04:c8:cc:e2:70:0c:82:4d:79:31:9d:c7:7b:ed:cb:
71:06:64:a3:cd:67:00:90:04:0c:04:52:aa:d6:32:28:ba:18:
68:48:61:79:2f:fd:e1:92:06:b1:df:b2:f6:47:4b:d3:f4:e4:
2a:99:e8:af:57:4d:28:d8:f9:e2:d2:4d:2e:ad:c2:c9:8f:b9:
f2:46:0e:49:53:2b:ff:1b:49:f8:b2:8f:a1:e4:45:7d:7f:67:
15:43:0d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:03:24 2026 by rpki-client