Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json)
Hash identifier: 8n1Fc+8P6CPUvyoF5M/F7YaILoF26AiQnGrQH0DUoPs=
Subject key identifier: 46:71:99:03:1D:89:A3:54:A6:4D:45:9B:26:BC:D7:39:E1:FC:FC:4C
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 019EC1B6740733F774B4B19914E335850679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
Manifest number: 1963
Signing time: Sat 13 Jun 2026 16:00:20 +0000
Manifest this update: Sat 13 Jun 2026 16:00:20 +0000
Manifest next update: Sun 14 Jun 2026 16:00:20 +0000
Files and hashes: 1: GOIVhBnn15XT5eXlASEvxn2hNDw.roa (hash: AmDJ5Odj0fdYze4B6QAdyi2ODpezKvZwj7zUISc+vO0=)
2: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: pOG9oSGwJWo7w0yiMLjxyQ+FiYO5JNK+HnzyhjC8zfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:74:07:33:f7:74:b4:b1:99:14:e3:35:85:06:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Jun 13 16:00:20 2026 GMT
Not After : Jun 14 16:00:20 2026 GMT
Subject: CN=467199031d89a354a64d459b26bcd739e1fcfc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:b6:25:aa:1e:71:7a:0f:aa:f6:45:a8:0e:
c6:e6:39:3c:28:1a:04:e1:45:2c:4d:6e:f0:93:a1:
16:c5:80:fb:e8:8c:75:b9:5c:a0:b6:24:1a:8a:55:
e2:34:ba:a2:dd:5f:dd:08:88:27:7a:ac:f6:f8:e7:
f6:7f:b1:32:68:a9:f6:ae:14:ed:d7:47:bd:3a:cb:
06:ab:93:f4:17:c2:d6:ae:10:72:84:de:b9:0f:75:
7d:5a:66:5c:02:b3:94:9a:02:f5:4a:37:04:db:dc:
70:4c:39:cb:85:37:6d:cd:f2:0e:d7:77:ca:42:05:
d9:e9:a9:d7:b3:d1:39:0e:c0:be:af:bb:c2:37:46:
53:c8:41:5a:17:95:b6:2e:e3:29:be:fa:aa:4c:f4:
d3:e2:3f:5e:65:89:70:23:68:02:78:8c:51:eb:17:
0f:f4:35:f5:96:ff:f2:fe:76:7e:d1:27:ac:bf:5a:
c1:0b:18:c1:e7:43:59:a8:a4:5f:9a:f2:dc:0d:fa:
00:83:39:06:a8:eb:51:db:0e:8b:b5:01:ce:9d:f7:
ee:16:d3:ec:00:ba:1d:07:97:c8:5b:8f:a8:13:60:
29:e0:0e:1d:4f:44:cc:8b:9e:25:81:0d:59:cf:99:
5f:ad:2d:db:51:89:b2:d3:b7:01:58:ce:00:72:3e:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:71:99:03:1D:89:A3:54:A6:4D:45:9B:26:BC:D7:39:E1:FC:FC:4C
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:49:65:c6:09:7e:03:c5:07:5f:a2:ec:3e:30:33:0a:dd:92:
cf:ab:82:fb:a5:ce:10:1e:c8:51:a7:a1:9e:fc:ed:1f:1e:ff:
aa:1f:c6:86:b3:df:04:98:8d:6e:e0:ec:31:9c:a7:88:2d:88:
ba:21:90:70:9b:7c:95:5a:20:d1:d1:5e:e8:e2:fd:48:23:9d:
7f:49:b3:5e:eb:5e:e0:a5:97:0c:98:52:59:21:91:e3:75:93:
bf:d2:57:68:51:97:80:08:4a:39:89:33:d9:47:bf:44:aa:76:
2f:46:0d:6d:23:1e:2b:64:fc:8a:13:d9:69:a9:09:7b:83:91:
10:cb:b8:af:eb:1b:36:56:fb:08:2b:0a:6f:db:7f:ca:00:73:
64:b9:89:fa:d9:35:eb:25:49:bc:2a:e8:d9:28:c2:8d:0f:be:
8b:03:75:55:84:d9:d6:a1:09:93:4b:40:17:9d:4c:68:c9:6f:
4b:37:bd:17:d9:27:95:e2:67:2f:f3:df:91:50:a9:8d:33:3a:
1d:a6:84:12:65:6e:e9:93:e0:2a:ab:35:fd:b5:a3:d0:ae:1d:
01:40:79:7f:a6:0a:c2:fa:05:da:5a:99:74:ff:7f:b2:ea:2d:
48:bc:f0:b0:fd:8c:a0:fa:74:65:f3:cb:60:ae:d3:88:66:6c:
3d:04:ae:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BtnQHM/d0tLGZFOM1hQZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OWVmZTZlZjk3NzI4YTQyODJhZTJjN2IwNWEyNDA1MDY1
NzFmMWMwHhcNMjYwNjEzMTYwMDIwWhcNMjYwNjE0MTYwMDIwWjAzMTEwLwYDVQQD
Eyg0NjcxOTkwMzFkODlhMzU0YTY0ZDQ1OWIyNmJjZDczOWUxZmNmYzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX+2JaoecXoPqvZFqA7G5jk8KBoE
4UUsTW7wk6EWxYD76Ix1uVygtiQailXiNLqi3V/dCIgneqz2+Of2f7EyaKn2rhTt
10e9OssGq5P0F8LWrhByhN65D3V9WmZcArOUmgL1SjcE29xwTDnLhTdtzfIO13fK
QgXZ6anXs9E5DsC+r7vCN0ZTyEFaF5W2LuMpvvqqTPTT4j9eZYlwI2gCeIxR6xcP
9DX1lv/y/nZ+0Sesv1rBCxjB50NZqKRfmvLcDfoAgzkGqOtR2w6LtQHOnffuFtPs
ALodB5fIW4+oE2Ap4A4dT0TMi54lgQ1Zz5lfrS3bUYmy07cBWM4Acj5YIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZxmQMdiaNUpk1Fmya81znh/PxMMB8GA1UdIwQY
MBaAFJWe/m75dyikKCrix7BaJAUGVx8cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YzFlNDktN2RkMS00NDhkLTg4MTUt
YTA5MjY2YmI0ZDhjLzEvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84YzFlNDktN2RkMS00NDhkLTg4MTUtYTA5MjY2YmI0ZDhj
LzEvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEllxgl+
A8UHX6LsPjAzCt2Sz6uC+6XOEB7IUaehnvztHx7/qh/GhrPfBJiNbuDsMZyniC2I
uiGQcJt8lVog0dFe6OL9SCOdf0mzXute4KWXDJhSWSGR43WTv9JXaFGXgAhKOYkz
2Ue/RKp2L0YNbSMeK2T8ihPZaakJe4OREMu4r+sbNlb7CCsKb9t/ygBzZLmJ+tk1
6yVJvCro2SjCjQ++iwN1VYTZ1qEJk0tAF51MaMlvSze9F9knleJnL/PfkVCpjTM6
HaaEEmVu6ZPgKqs1/bWj0K4dAUB5f6YKwvoF2lqZdP9/suotSLzwsP2MoPp0ZfPL
YK7TiGZsPQSuWg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:31:03 2026 by rpki-client