Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
File: LZKAom-DFWYViyYXyV0Z0zjuFdM.mft (raw, json)
Hash identifier: Hz6y93OnkEb1yNO7Ze5PW9zdsfUtxecwZmawDPd6Kgw=
Subject key identifier: DE:C5:CD:46:D8:0F:D7:33:88:34:C8:FC:2B:56:25:A7:14:AE:C2:CA
Authority key identifier: 2D:92:80:A2:6F:83:15:66:15:8B:26:17:C9:5D:19:D3:38:EE:15:D3
Certificate issuer: /CN=2d9280a26f831566158b2617c95d19d338ee15d3
Certificate serial: 019D999938041D605B06900C86009979C47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
Manifest number: 05D6
Signing time: Fri 17 Apr 2026 04:00:48 +0000
Manifest this update: Fri 17 Apr 2026 04:00:48 +0000
Manifest next update: Sat 18 Apr 2026 04:00:48 +0000
Files and hashes: 1: LZKAom-DFWYViyYXyV0Z0zjuFdM.crl (hash: uXSs8rKBgIBHzGYjuHMCLit+F/Jy6r+j9DpNIkCrgo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:38:04:1d:60:5b:06:90:0c:86:00:99:79:c4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9280a26f831566158b2617c95d19d338ee15d3
Validity
Not Before: Apr 17 04:00:48 2026 GMT
Not After : Apr 18 04:00:48 2026 GMT
Subject: CN=dec5cd46d80fd7338834c8fc2b5625a714aec2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:a2:a3:b9:a5:69:d5:38:40:d1:b3:34:35:
eb:92:1f:60:bf:ab:3a:37:88:e6:05:c2:c6:80:3f:
59:0e:a6:88:37:81:e9:7e:95:c9:3b:5e:0b:9d:35:
42:16:bc:01:eb:8d:05:b1:cd:fa:36:cf:12:10:ef:
90:ea:8e:0f:0b:bc:8a:84:1b:6c:e9:4b:3f:e1:5b:
a8:2f:a6:74:7b:d7:a2:00:64:49:2b:0b:f6:05:5e:
1f:7f:82:74:0f:d2:13:2e:2e:1e:ee:16:3e:d4:8c:
37:3e:9d:25:82:82:cc:da:8f:6b:a5:05:4b:47:54:
4d:c4:6a:82:c8:04:eb:f7:7d:a9:d0:ae:a6:b5:54:
23:a8:9d:26:08:8d:a1:aa:39:dd:d0:aa:82:42:78:
f2:ea:7e:2f:4e:d3:9b:e9:e6:25:71:f1:63:28:4d:
04:26:4b:c4:20:20:fc:63:60:d9:99:23:47:2e:6e:
ec:d6:56:8b:ae:57:0b:64:2f:75:e3:82:20:9e:c0:
12:84:91:15:55:dc:8b:98:06:f7:ee:15:29:e9:2f:
d8:1d:c4:93:3a:cc:63:df:5e:7e:6f:3e:bb:83:b7:
84:d6:7a:3d:e1:40:72:d4:18:1a:8e:10:9b:b1:a1:
7a:74:7a:aa:5c:49:9f:db:8e:48:36:04:e8:46:65:
8f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C5:CD:46:D8:0F:D7:33:88:34:C8:FC:2B:56:25:A7:14:AE:C2:CA
X509v3 Authority Key Identifier:
keyid:2D:92:80:A2:6F:83:15:66:15:8B:26:17:C9:5D:19:D3:38:EE:15:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c0:ed:ba:d4:8c:52:68:20:36:81:8d:a8:e7:0a:ba:f1:d3:
18:60:4f:12:7f:f2:1b:58:4b:c1:4b:57:86:bc:1c:9f:bf:13:
9e:31:84:01:dc:84:10:1e:73:24:d0:1e:79:d3:90:00:33:87:
6f:6d:4d:72:2c:5d:fd:fe:25:a4:63:b5:6f:ec:12:14:f4:aa:
9d:db:70:3f:15:6e:ea:11:7a:f2:e1:99:e9:29:78:ba:26:61:
af:82:37:28:1f:6e:63:95:e6:8a:4a:94:86:41:fe:98:ec:a8:
1e:79:ba:53:51:8c:dc:7c:30:ec:07:b4:a4:33:14:d1:63:60:
4d:c3:4e:50:28:6c:43:8b:99:e0:79:02:bb:43:2d:46:20:32:
9d:55:e9:5f:53:03:35:80:8e:52:64:b3:7d:71:6e:ab:c4:47:
97:0e:2a:e8:6c:d8:5c:e9:7e:13:d4:a9:df:68:6c:36:06:88:
91:83:00:a7:a7:9a:16:1f:04:2c:fc:fa:4a:66:02:07:02:d9:
7a:f3:81:be:bf:01:18:54:cc:26:32:34:24:58:94:83:4c:1e:
cc:8c:c2:3d:8b:61:bb:d2:b3:58:c7:0a:98:56:42:08:a6:22:
08:f9:d1:a0:ff:14:bf:3d:b4:a4:4c:68:6b:32:a4:61:80:e7:
4e:3f:97:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmTgEHWBbBpAMhgCZecR7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkOTI4MGEyNmY4MzE1NjYxNThiMjYxN2M5NWQxOWQzMzhl
ZTE1ZDMwHhcNMjYwNDE3MDQwMDQ4WhcNMjYwNDE4MDQwMDQ4WjAzMTEwLwYDVQQD
EyhkZWM1Y2Q0NmQ4MGZkNzMzODgzNGM4ZmMyYjU2MjVhNzE0YWVjMmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm+io7mladU4QNGzNDXrkh9gv6s6
N4jmBcLGgD9ZDqaIN4HpfpXJO14LnTVCFrwB640Fsc36Ns8SEO+Q6o4PC7yKhBts
6Us/4VuoL6Z0e9eiAGRJKwv2BV4ff4J0D9ITLi4e7hY+1Iw3Pp0lgoLM2o9rpQVL
R1RNxGqCyATr932p0K6mtVQjqJ0mCI2hqjnd0KqCQnjy6n4vTtOb6eYlcfFjKE0E
JkvEICD8Y2DZmSNHLm7s1laLrlcLZC9144IgnsAShJEVVdyLmAb37hUp6S/YHcST
Osxj315+bz67g7eE1no94UBy1BgajhCbsaF6dHqqXEmf245INgToRmWPRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7FzUbYD9cziDTI/CtWJacUrsLKMB8GA1UdIwQY
MBaAFC2SgKJvgxVmFYsmF8ldGdM47hXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFpLQW9tLURGV1lWaXlZWHlWMFowemp1RmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iZTczMGEtMjdlNi00MTM2LWIyYzUt
Y2FlNDAzODRjNmJmLzEvTFpLQW9tLURGV1lWaXlZWHlWMFowemp1RmRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9iZTczMGEtMjdlNi00MTM2LWIyYzUtY2FlNDAzODRjNmJm
LzEvTFpLQW9tLURGV1lWaXlZWHlWMFowemp1RmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosDtutSM
UmggNoGNqOcKuvHTGGBPEn/yG1hLwUtXhrwcn78TnjGEAdyEEB5zJNAeedOQADOH
b21Ncixd/f4lpGO1b+wSFPSqndtwPxVu6hF68uGZ6Sl4uiZhr4I3KB9uY5XmikqU
hkH+mOyoHnm6U1GM3Hww7Ae0pDMU0WNgTcNOUChsQ4uZ4HkCu0MtRiAynVXpX1MD
NYCOUmSzfXFuq8RHlw4q6GzYXOl+E9Sp32hsNgaIkYMAp6eaFh8ELPz6SmYCBwLZ
evOBvr8BGFTMJjI0JFiUg0wezIzCPYthu9KzWMcKmFZCCKYiCPnRoP8Uvz20pExo
azKkYYDnTj+X5A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:38 2026 by rpki-client