Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
File: LzQYB_ILBFGcVSuzjONykUt8w0U.mft (raw, json)
Hash identifier: kyxtrsz2OEijXJ8bhLo6C9fBhCpagOplvxm/5uQIxN4=
Subject key identifier: FF:93:07:0C:61:DD:ED:06:3E:88:B5:39:75:26:56:A3:E4:49:75:C1
Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
Certificate issuer: /CN=2f341807f20b04519c552bb38ce372914b7cc345
Certificate serial: 019DA4F8DBCC697A86DE9B399DA094168F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
Manifest number: 1858
Signing time: Sun 19 Apr 2026 09:01:05 +0000
Manifest this update: Sun 19 Apr 2026 09:01:05 +0000
Manifest next update: Mon 20 Apr 2026 09:01:05 +0000
Files and hashes: 1: LzQYB_ILBFGcVSuzjONykUt8w0U.crl (hash: 7clfIG9c2WoYQk6jUhtroP7pA/vs0VuHkjeXDc0ZLBM=)
2: MP5fwJ2kgaZRpvM723kXW1TGyuQ.roa (hash: 3o1b+cqzLxMPAxiZfWRR+nsYECaSogtgZoDIe2bwcaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:db:cc:69:7a:86:de:9b:39:9d:a0:94:16:8f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345
Validity
Not Before: Apr 19 09:01:05 2026 GMT
Not After : Apr 20 09:01:05 2026 GMT
Subject: CN=ff93070c61dded063e88b539752656a3e44975c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:87:40:a2:eb:a0:d5:fb:33:fd:5d:ab:e6:ad:
34:56:47:05:50:82:0a:47:9e:52:f0:ba:59:f6:4d:
7d:10:0a:c2:fb:cc:dc:d8:05:01:ac:9d:bf:45:eb:
bb:9b:4e:45:6f:3c:cf:29:24:c2:23:3c:10:99:cf:
db:c2:f6:5e:cd:b9:6f:35:02:20:9a:a3:99:d7:50:
0f:1f:5f:af:69:3c:4e:b3:85:b6:2a:bc:ff:aa:1f:
46:24:19:c8:bb:0f:44:85:1a:5d:87:27:66:17:4a:
14:17:96:c2:c2:4e:7b:77:47:46:58:0c:69:2e:07:
93:15:9c:f8:b4:49:75:7f:62:b0:29:57:13:4f:34:
7a:c3:88:fe:d4:32:6d:9f:c7:d2:cc:9d:02:38:47:
52:93:a9:ea:3e:a9:a1:b7:06:ac:bb:75:e5:53:1f:
43:6b:84:12:5e:07:6a:fb:cc:98:bb:ed:74:64:d2:
8f:47:cd:6d:46:01:20:f5:7e:e5:a3:59:d6:50:54:
b4:bd:ec:0d:6e:d7:d8:8a:a2:a0:2f:af:a1:fb:12:
86:a9:5a:66:37:80:3d:e2:99:81:31:6b:57:07:d3:
c2:5f:06:88:15:f4:c8:67:eb:87:ad:3d:61:bf:9f:
5e:18:76:5a:a7:b1:53:c9:42:1d:91:46:da:ec:18:
21:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:93:07:0C:61:DD:ED:06:3E:88:B5:39:75:26:56:A3:E4:49:75:C1
X509v3 Authority Key Identifier:
keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ba:5e:e6:39:6c:b8:c2:15:f1:01:af:00:b6:50:70:76:17:
21:e6:2a:33:bf:d2:79:67:b5:79:37:15:66:5b:fe:64:5c:b0:
98:31:58:ec:6f:af:f1:cd:59:a4:99:e2:48:3d:9d:a3:aa:76:
c1:cd:95:57:a6:cf:b1:c9:e9:1a:31:28:c5:40:ac:e2:79:14:
82:02:95:36:aa:96:ba:1d:ac:06:d2:47:37:a7:4d:0b:1c:af:
be:f0:a0:74:0b:99:bd:ab:ad:41:26:f8:43:f3:14:0c:42:28:
4b:bb:35:e2:d2:22:8c:0b:84:71:0f:b9:cc:16:94:2e:fa:48:
6f:4f:60:ff:b2:39:48:71:ad:75:b7:29:4a:f3:95:bf:d5:5e:
56:e7:73:d5:d7:e9:3e:34:b0:06:6c:55:b7:a8:58:09:28:ba:
5a:46:b5:c9:9a:bb:db:dc:98:d3:00:7d:6b:e9:d0:92:3e:f1:
3c:5c:ae:05:57:c0:1c:36:2b:17:c0:bb:38:1b:9d:87:7b:51:
4b:c8:81:d1:7f:51:5b:f0:2d:be:26:cb:a7:dd:bc:4b:92:97:
d8:2c:1d:e4:bf:62:00:56:01:b5:99:30:52:15:af:46:52:df:
6a:20:4d:45:58:db:67:57:3e:43:1d:9a:70:89:d0:4a:bb:16:
e4:1d:9a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:33:01 2026 by rpki-client