Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.mft
File: lzUQXwm80g9MpHGS2HEgULOCGgU.mft (raw, json)
Hash identifier: SIPohjFzE2xHmx+oDN99SyBurDgu/YdTxsaNOU5Fnk4=
Subject key identifier: 08:3B:36:E6:7D:07:61:07:46:C7:B1:67:93:C3:C5:4D:6A:0C:47:B4
Authority key identifier: 97:35:10:5F:09:BC:D2:0F:4C:A4:71:92:D8:71:20:50:B3:82:1A:05
Certificate issuer: /CN=9735105f09bcd20f4ca47192d8712050b3821a05
Certificate serial: 01A0C66B5018B3EAD9F477A8EDAD6BFBA739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzUQXwm80g9MpHGS2HEgULOCGgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:01:56 +0000
Manifest this update: Tue 22 Sep 2026 00:01:56 +0000
Manifest next update: Wed 23 Sep 2026 00:01:56 +0000
Files and hashes: 1: lzUQXwm80g9MpHGS2HEgULOCGgU.crl (hash: 5r8U0V1kIs55x4pd0bitsdA9wGBqgvL2pLDQbziYRS8=)
2: olMM-bZayk15NVNMQRnr5L5ha3E.roa (hash: BGtUHPufR6/y3womVBoB/y7s8kOSrfbGJGbIgB+B20o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzUQXwm80g9MpHGS2HEgULOCGgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6b:50:18:b3:ea:d9:f4:77:a8:ed:ad:6b:fb:a7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9735105f09bcd20f4ca47192d8712050b3821a05
Validity
Not Before: Sep 22 00:01:56 2026 GMT
Not After : Sep 23 00:01:56 2026 GMT
Subject: CN=083b36e67d07610746c7b16793c3c54d6a0c47b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6a:d7:aa:56:21:13:a1:4f:ff:96:d9:c9:cf:
29:c3:07:34:e4:6e:a7:40:9e:b0:0f:65:6e:ed:85:
b0:73:fc:37:88:a9:e2:51:7b:ca:7c:0a:da:e1:b8:
d3:3a:ff:55:4d:14:5a:b1:e1:94:79:d5:c2:b2:aa:
6b:d2:dc:ad:7f:d9:0d:73:5a:5e:b5:09:3c:59:a3:
23:3e:dd:a7:1a:27:ed:20:e3:92:e0:77:9d:b9:a3:
4f:47:8c:1a:67:3e:bb:d2:10:72:64:95:b4:44:c6:
91:f5:0a:f1:8f:64:cd:61:eb:0d:1d:96:28:56:4a:
47:d4:f8:2f:5c:c1:41:23:b0:39:9c:42:a4:04:8b:
6c:44:a0:e7:55:af:85:8f:b4:d4:e7:6c:3f:a5:a7:
31:58:21:c7:2e:04:1a:15:95:06:f6:e0:de:41:90:
85:87:4e:56:17:e5:bb:9b:3b:1c:7c:d7:31:1f:97:
5e:3d:e8:58:b5:35:c6:42:a9:68:e7:b4:66:34:e5:
63:ef:24:33:07:8e:2a:93:4d:39:1b:55:67:92:04:
22:bf:bd:81:21:ef:45:8d:b9:22:34:a2:c1:a8:bd:
bb:93:d1:6f:68:09:af:cb:67:1e:f0:22:cd:36:c3:
56:e8:f5:3c:79:88:63:03:4f:87:6d:95:ae:9b:43:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3B:36:E6:7D:07:61:07:46:C7:B1:67:93:C3:C5:4D:6A:0C:47:B4
X509v3 Authority Key Identifier:
keyid:97:35:10:5F:09:BC:D2:0F:4C:A4:71:92:D8:71:20:50:B3:82:1A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzUQXwm80g9MpHGS2HEgULOCGgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6c:df:45:f0:9d:5b:26:f0:f7:1f:36:13:1d:70:ce:86:a0:
55:7b:ab:96:a4:f7:e0:61:3b:73:5c:03:db:49:5e:ec:6d:0d:
76:fd:c5:fd:61:12:99:4c:40:ac:23:6c:9c:06:5b:aa:72:08:
55:95:11:3f:2d:df:4f:ec:b6:9f:0e:e8:6d:56:6b:f7:af:44:
c0:ee:1d:c2:75:68:79:a6:0c:a3:c9:59:ab:41:7a:d1:44:c3:
93:25:a5:24:a8:57:c5:91:32:18:4e:09:44:14:b7:35:d9:6d:
49:52:ad:ff:e4:e8:2c:7c:3f:92:b1:1d:03:60:1c:07:99:79:
b0:3c:25:5f:55:53:ff:e5:4c:5a:16:64:63:af:9c:5e:9c:5b:
a5:b6:84:88:3e:9d:37:79:bb:e3:37:a6:0e:7e:e8:26:c1:fb:
5c:b5:1d:12:c3:be:e9:fa:89:b6:b4:07:ea:73:db:71:23:68:
7b:3d:91:04:bc:f9:fd:84:80:00:0a:73:12:79:a3:9a:89:e6:
da:7c:0a:05:fb:1d:6b:80:a2:54:32:20:71:9f:24:8c:b3:9a:
44:0c:45:24:92:c2:50:05:d5:22:d5:c9:a6:cf:0d:91:81:ce:
b0:50:8f:26:28:2c:19:63:63:96:ad:db:da:5a:a4:c0:c6:85:
9d:cb:46:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:42:04 2026 by rpki-client