Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
File: LzQYB_ILBFGcVSuzjONykUt8w0U.mft (raw, json)
Hash identifier: In/RPNNFs3ZktDsRlAoSZs0OLRpe0jr5jphxUPwquYs=
Subject key identifier: 04:90:66:F9:90:9C:55:77:D9:7B:F3:24:28:4A:39:3E:22:34:F3:B9
Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
Certificate issuer: /CN=2f341807f20b04519c552bb38ce372914b7cc345
Certificate serial: 019CABD97BA3A8A9FC36B7CAF7BDE7232CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
Manifest number: 17D7
Signing time: Mon 02 Mar 2026 00:01:22 +0000
Manifest this update: Mon 02 Mar 2026 00:01:22 +0000
Manifest next update: Tue 03 Mar 2026 00:01:22 +0000
Files and hashes: 1: LzQYB_ILBFGcVSuzjONykUt8w0U.crl (hash: wWIUVI8Qd+1tlTx9QON+BZ0M+s4YuXtbUxjaIW39IpM=)
2: MP5fwJ2kgaZRpvM723kXW1TGyuQ.roa (hash: 3o1b+cqzLxMPAxiZfWRR+nsYECaSogtgZoDIe2bwcaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7b:a3:a8:a9:fc:36:b7:ca:f7:bd:e7:23:2c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345
Validity
Not Before: Mar 2 00:01:22 2026 GMT
Not After : Mar 3 00:01:22 2026 GMT
Subject: CN=049066f9909c5577d97bf324284a393e2234f3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:b0:a9:c0:6a:ed:9f:9c:d5:81:3f:c1:4f:
22:0f:a7:a2:02:09:88:2c:e7:af:cc:f6:a6:2b:5b:
74:87:06:6e:ed:f2:7f:ae:94:2e:d3:d2:05:7a:35:
89:d9:7d:db:77:ef:3a:f6:dc:51:74:f7:87:de:a5:
b9:8f:96:24:82:8a:65:8f:24:df:b9:8a:cd:a8:11:
78:03:3b:3a:d3:0a:cb:75:65:53:2c:7f:7a:0c:e7:
59:b7:03:35:0a:1d:24:04:a1:24:0c:2d:47:3d:5f:
ef:d1:f4:3e:e3:e3:fb:72:c7:85:ee:41:ea:5e:4f:
51:b0:76:ee:b0:d3:d6:58:0f:75:3b:b0:58:18:8b:
e2:e5:17:3e:92:3d:75:10:4a:92:ae:53:7d:e2:cb:
36:04:f3:a3:14:2d:5f:fe:3c:80:e6:c1:53:ce:3c:
48:8b:36:b6:e6:56:d4:b9:f2:c1:b8:4d:e2:98:ed:
fe:1d:ea:36:9e:3b:b1:40:94:06:ea:b8:e2:6b:b0:
8b:eb:af:1c:dc:91:41:ba:30:db:5d:c7:a6:ee:0b:
e4:12:a7:fe:0a:0f:01:2f:6e:9a:dd:5a:01:19:22:
b3:dd:ad:9a:db:90:77:51:91:92:0f:b3:6f:8b:17:
76:b1:de:60:3f:a3:61:4a:0d:ec:0d:19:32:ed:ad:
c9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:90:66:F9:90:9C:55:77:D9:7B:F3:24:28:4A:39:3E:22:34:F3:B9
X509v3 Authority Key Identifier:
keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:68:04:b3:36:c2:5a:5d:ab:a2:47:3b:6e:4f:a3:90:e4:8c:
89:71:63:bf:77:4f:b6:df:3b:f9:9f:91:5f:3d:f7:09:32:28:
56:d1:89:42:14:29:02:b7:1a:0a:e2:a8:6e:00:a9:3f:f3:a5:
bb:c6:05:ed:8c:3d:65:0b:f3:98:b8:3f:e9:eb:84:3e:70:b2:
d8:55:10:0d:e4:8d:66:4a:36:86:de:d0:a3:33:d0:39:ae:57:
f4:d7:db:a3:be:42:f6:fe:48:9f:5a:17:4a:3f:34:a9:0d:c0:
7d:25:7b:01:13:90:11:1f:c3:ec:67:77:c8:b4:7d:31:f9:54:
7b:27:aa:7b:2c:09:d8:5a:57:c8:39:c0:8b:33:81:73:96:32:
10:6a:07:07:ee:1d:b4:80:97:22:53:78:78:a6:9d:b1:68:46:
e1:9b:16:d4:5a:42:a0:b0:5d:ce:a4:f4:b9:9e:09:89:f5:d8:
d2:66:42:e4:25:96:40:7e:52:d6:55:85:1e:5c:fa:cd:a3:b4:
de:c8:36:de:e7:e1:ae:90:6d:ac:93:1c:cd:08:7a:d6:ea:b7:
0c:e5:1f:32:49:99:0c:47:b4:16:49:8a:57:f9:9e:c0:0e:ea:
68:53:ea:65:7c:3a:c1:a9:d6:8c:ea:11:8f:4d:9b:70:43:ea:
2c:19:ec:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:01 2026 by rpki-client