Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier: 03cYCTE/roLN8GT4YlHlVV3xUUSr0f8K2aLrzuLBKvc=
Subject key identifier: 56:C2:65:6F:82:95:AD:6B:E0:5E:45:86:E8:E1:ED:A0:DE:58:3B:11
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 019D9AABB66ACD679973964B909A26E75556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number: 0BCB
Signing time: Fri 17 Apr 2026 09:00:37 +0000
Manifest this update: Fri 17 Apr 2026 09:00:37 +0000
Manifest next update: Sat 18 Apr 2026 09:00:37 +0000
Files and hashes: 1: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: Sxs9WSqzEnDqukhRXDD/7Dk8jqFYngqcA2hO84PAk/k=)
2: doW0mpCnrwRns3RIOxChwkliLTE.roa (hash: GsqyaGjy8E4RJKoWLdZmSypIUlVFghPNcYphYfam9qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b6:6a:cd:67:99:73:96:4b:90:9a:26:e7:55:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Apr 17 09:00:37 2026 GMT
Not After : Apr 18 09:00:37 2026 GMT
Subject: CN=56c2656f8295ad6be05e4586e8e1eda0de583b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:76:18:b1:8f:61:01:5f:72:2e:0a:4e:ea:
f8:13:b6:8a:9c:09:3e:04:45:02:17:17:f0:ee:16:
7a:74:2a:ab:21:41:f5:a7:31:8b:cd:0c:11:f0:6f:
ea:b2:07:4c:7b:71:b9:9f:65:f7:17:82:7f:82:f5:
5a:32:55:fb:4d:fe:02:b9:75:15:6a:54:7f:28:d4:
16:ae:b8:08:b8:d8:e7:25:06:1a:f8:cb:fb:67:4e:
b7:4f:00:b4:ff:b8:08:ad:11:c4:53:a0:e9:99:b5:
c1:d9:b9:a7:fb:57:4f:bf:f6:39:e0:09:c5:94:96:
da:b3:97:82:a6:c0:1f:f3:0d:39:6c:2c:7e:09:d5:
9f:c3:37:31:ae:9a:66:db:19:b6:ab:f6:e9:bb:22:
0a:e7:52:dd:36:fa:96:fc:1f:0b:51:3d:d8:e9:fc:
33:8c:40:a6:d7:66:a2:38:8e:ef:b6:f5:9b:7a:75:
2f:4d:62:d3:d6:d4:f9:ce:59:14:09:d5:b6:ca:15:
b1:5e:45:7a:2b:50:60:0f:c5:7a:76:79:90:dc:82:
f2:4a:1a:8d:4a:00:53:74:51:e2:15:a0:94:a2:da:
44:45:3d:0a:6a:06:06:1f:69:39:3a:32:06:76:df:
52:17:00:74:e6:9b:13:0a:1e:3e:78:f4:e7:95:f2:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C2:65:6F:82:95:AD:6B:E0:5E:45:86:E8:E1:ED:A0:DE:58:3B:11
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f7:f8:de:12:f7:53:df:4a:bd:99:02:30:13:7e:bf:0e:42:
31:6d:81:20:df:da:97:e2:60:ea:57:84:a4:86:1b:b9:4a:0c:
54:07:48:83:e1:f6:34:c4:61:c2:bc:bb:5b:f6:f7:81:a0:8e:
cf:6f:72:39:41:b6:2b:2c:69:07:63:91:92:7c:03:82:75:ee:
d3:f6:b8:ee:d5:9d:f5:87:52:26:19:ea:99:8c:ef:08:92:c8:
1d:3e:80:4e:9c:f9:40:50:29:6e:b8:48:fa:7e:9b:1f:11:11:
2f:5f:ab:6c:40:5a:89:9a:41:c9:a9:32:8d:c3:ec:2d:09:5f:
c6:bb:07:12:eb:82:4c:bc:c8:be:0a:ca:52:c2:b2:6c:b7:59:
f3:03:4b:b6:08:46:7b:18:c0:87:9a:14:bf:fd:ab:1a:e2:4b:
8e:38:43:c9:89:64:41:31:e3:b2:0a:3d:30:6d:f0:cc:05:48:
72:bb:83:06:d7:8a:35:9c:75:55:86:a9:5d:46:4e:5d:41:30:
f7:ba:8f:de:be:85:76:9b:2a:aa:65:d3:7f:9a:bd:b0:9b:c9:
03:c9:b8:42:3d:1b:f9:6e:f8:b0:4b:9f:77:7d:aa:69:7e:95:
d8:0f:17:c9:09:42:65:ce:8e:03:54:11:5c:1e:d5:61:d6:ee:
54:17:9b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:37:48 2026 by rpki-client