Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
File: lzDCc6-etVZkMIjkO-86ahgch8I.mft (raw, json)
Hash identifier: /pG2DQkr0cOHS/rSc2bc0asN75xx8rEmpLmLLSU2q04=
Subject key identifier: 1E:8B:EC:A9:EC:EC:6C:0D:22:C4:AE:BB:91:44:7C:75:B9:2A:10:B5
Authority key identifier: 97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
Certificate issuer: /CN=9730c273af9eb556643088e43bef3a6a181c87c2
Certificate serial: 019DA453B9D964AE5060C5A1F5B9F614E4D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
Manifest number: B9
Signing time: Sun 19 Apr 2026 06:00:43 +0000
Manifest this update: Sun 19 Apr 2026 06:00:43 +0000
Manifest next update: Mon 20 Apr 2026 06:00:43 +0000
Files and hashes: 1: LftAIu9k2wnzZP9QfqBNpPsB7GA.asa (hash: oB3unSja7fyioWETroS2ws+p/jX5s1fLimygzH+96YE=)
2: lzDCc6-etVZkMIjkO-86ahgch8I.crl (hash: iryveHUy6i5DGtIusuxqKu6aY/SnX2/LM9ONELKxZEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:b9:d9:64:ae:50:60:c5:a1:f5:b9:f6:14:e4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9730c273af9eb556643088e43bef3a6a181c87c2
Validity
Not Before: Apr 19 06:00:43 2026 GMT
Not After : Apr 20 06:00:43 2026 GMT
Subject: CN=1e8beca9ecec6c0d22c4aebb91447c75b92a10b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:23:0e:70:1f:58:2e:7a:1c:5f:ce:f9:7a:
36:a1:20:15:4b:c8:3f:46:e8:0f:88:df:fd:2b:86:
49:6c:d8:d9:e9:87:48:f4:b6:ec:73:fe:b2:41:4f:
46:1a:5c:c7:a8:c9:d1:8c:c1:00:e4:fc:a6:59:36:
5e:dd:90:e2:41:0b:aa:e8:6a:75:f8:14:30:3d:ac:
23:59:03:7e:76:2f:ed:ff:7b:71:47:e5:46:8d:52:
90:2c:f9:0d:6c:d6:11:72:e6:fb:be:20:10:66:ca:
59:db:4b:02:9c:8f:9b:5c:34:e6:bd:85:8b:cb:48:
4e:e8:1b:eb:d4:3d:02:fd:e5:26:ce:c6:44:ae:ca:
5f:c8:e3:f5:d0:45:08:b9:48:1b:3f:55:3e:df:f5:
21:cc:4a:9e:36:a3:96:6c:71:00:6f:90:66:e6:9f:
06:af:3d:41:29:93:05:c5:53:32:49:2c:18:83:fd:
d3:f7:eb:a0:ed:66:f2:1e:2b:ca:d5:2b:58:62:70:
41:fe:04:6e:16:20:66:6d:45:59:95:61:2e:7f:2f:
95:de:a9:4b:11:31:8e:dd:13:dd:dc:61:52:dc:c2:
46:73:67:a4:c5:22:14:06:36:a7:c6:f4:53:42:2a:
dd:37:86:23:f3:b8:54:b6:c8:a0:13:a8:30:4c:ff:
f8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8B:EC:A9:EC:EC:6C:0D:22:C4:AE:BB:91:44:7C:75:B9:2A:10:B5
X509v3 Authority Key Identifier:
keyid:97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:99:bd:c8:d8:06:cc:85:70:4b:eb:98:99:77:ce:0b:30:e9:
eb:f5:d9:2f:59:36:67:05:84:2c:96:8a:2d:1b:2a:0d:da:32:
1d:86:f3:0a:9e:b3:de:e9:b7:67:15:39:bf:43:97:a7:ef:9c:
00:d7:a0:54:0d:13:7b:ae:55:63:0f:93:1c:86:ae:96:33:e9:
3a:42:37:8f:6f:4a:ce:4d:37:9a:61:d0:4d:ac:fd:1e:e5:7e:
f3:43:7e:36:03:51:87:68:9a:55:82:9f:ff:36:f2:4a:93:ab:
42:cd:14:b2:59:55:c1:60:eb:27:6e:a2:f2:ff:34:87:28:df:
97:af:16:8b:ff:f4:32:28:1c:1b:60:f1:fc:78:c2:6c:4a:d5:
42:bb:05:24:bb:ef:24:8d:89:ea:ab:62:0b:68:df:ad:83:bb:
0c:6d:39:85:5f:65:6f:c4:c4:14:d5:c4:86:d6:ec:70:5f:3c:
d5:af:68:9e:61:48:f0:fb:81:24:f4:37:90:2f:8a:27:8f:da:
7f:80:8e:99:ca:f9:c8:04:5d:2a:71:55:c4:a1:b2:c2:f5:3a:
04:e3:bb:57:b2:99:12:fc:6d:b1:ae:da:2d:b4:16:e8:aa:89:
a3:42:d2:e3:bd:aa:0f:4d:61:46:78:43:06:0e:e3:76:bb:35:
56:7a:b8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:11:56 2026 by rpki-client