Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json)
Hash identifier: DNaWbgpj2lBy53pXnEDFTv3twC0idZ4P2yugefhLNQU=
Subject key identifier: 27:39:36:74:F0:55:AE:B5:F3:08:5B:3D:F8:14:4A:56:C8:70:19:F9
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 019CAEA363D8B967DA7F920645F9537EF3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
Manifest number: 1850
Signing time: Mon 02 Mar 2026 13:01:09 +0000
Manifest this update: Mon 02 Mar 2026 13:01:09 +0000
Manifest next update: Tue 03 Mar 2026 13:01:09 +0000
Files and hashes: 1: GOIVhBnn15XT5eXlASEvxn2hNDw.roa (hash: AmDJ5Odj0fdYze4B6QAdyi2ODpezKvZwj7zUISc+vO0=)
2: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: 2ZMuhgOHvUJOD2Iqyj1LqsLSJHA8Aaf/UWt+DGJcB6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:63:d8:b9:67:da:7f:92:06:45:f9:53:7e:f3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Mar 2 13:01:09 2026 GMT
Not After : Mar 3 13:01:09 2026 GMT
Subject: CN=27393674f055aeb5f3085b3df8144a56c87019f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:52:b1:2d:a9:39:22:66:a0:3f:a1:c9:ff:
69:6c:35:69:40:11:d5:38:ba:5e:95:fa:0d:76:84:
1c:e4:f0:f2:9d:cd:d5:7f:71:5c:07:49:02:87:08:
23:86:f4:80:35:90:b5:fe:35:51:3e:0f:f3:54:15:
a3:07:2c:6f:47:42:c4:2f:b1:ae:dc:d3:b1:88:8e:
cb:de:5e:c1:55:7d:ff:ba:4b:b4:fc:75:b9:7f:31:
a2:ba:be:c9:aa:e9:51:4e:e7:77:16:0a:f1:98:cc:
fc:57:78:9a:41:9e:9e:79:91:fe:1c:49:31:2a:46:
35:0a:37:58:79:4a:58:dd:86:1e:73:5e:c1:5d:eb:
ee:fa:3c:2c:cd:69:96:af:ca:ce:71:2b:11:33:8c:
12:17:ca:42:01:84:00:60:48:fb:0a:76:97:c5:23:
0b:e0:de:77:33:2d:ab:ab:b0:46:b5:6b:ee:66:b5:
81:1e:37:5c:50:b3:bd:3e:39:33:99:64:f0:e9:98:
bd:c1:a8:7d:7a:0c:e8:a3:88:d7:2d:ef:39:0a:61:
91:8c:04:a3:bc:89:14:03:54:f8:f4:fb:59:4f:68:
cd:71:a3:1c:23:de:3a:07:6a:f4:6d:3c:bb:1d:b2:
5d:35:3e:01:ff:ad:07:f2:e8:37:73:f3:86:f8:47:
2d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:39:36:74:F0:55:AE:B5:F3:08:5B:3D:F8:14:4A:56:C8:70:19:F9
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0d:20:f7:d5:80:d5:75:bb:cd:2a:24:d5:00:0c:39:e9:cd:
54:c5:72:cb:4f:b8:0b:ae:51:54:b4:33:6f:5c:4c:83:3f:8b:
9b:69:b0:a6:dd:a7:33:d4:1b:1c:a1:28:2c:27:88:44:3a:ef:
91:ae:20:76:ac:e7:13:e0:88:1f:78:b6:a6:b8:a7:2a:d7:fa:
5d:86:4a:56:bf:e1:82:d0:dd:fb:4b:8f:83:b1:5c:7b:8a:49:
0e:13:fd:ec:78:bc:21:25:1d:ef:5c:c7:45:fd:33:35:19:c1:
95:93:c9:22:1e:ca:0f:80:f0:ef:60:54:e9:c9:11:4a:9a:c0:
7f:ba:39:79:a8:c4:62:38:ed:09:23:af:aa:6a:e4:66:26:5c:
54:ee:ac:eb:2b:f6:aa:d4:74:ea:5c:6e:f8:f2:38:40:1e:13:
67:19:87:e6:fa:71:bf:60:4a:37:64:be:21:41:66:02:9a:e7:
a3:4b:a7:9b:ff:0d:f2:06:56:7c:45:24:5d:5e:37:c6:df:38:
4a:75:99:b5:bd:2f:79:9d:ec:8e:cc:f6:61:d9:00:f9:fd:9c:
90:ff:25:ae:a4:38:89:19:11:ad:b6:dc:a7:0a:33:2c:7e:9d:
fe:0d:79:f4:7e:9f:ae:68:51:49:4e:9e:7c:7c:53:6d:5e:e0:
08:8e:44:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:03 2026 by rpki-client