Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier: 6N6hMm0WOOvRfhmHeQ8Y0vZrfO29ClIPUL/1xVubX4s=
Subject key identifier: B1:F8:58:4D:A6:98:41:33:1B:01:4E:AE:75:11:2B:DE:4A:EC:CE:39
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 019FADBF9BD02941959B39AAE5EA85D02AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number: 0CDE
Signing time: Wed 29 Jul 2026 12:00:42 +0000
Manifest this update: Wed 29 Jul 2026 12:00:42 +0000
Manifest next update: Thu 30 Jul 2026 12:00:42 +0000
Files and hashes: 1: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: FIAi+HHkpWNtpU6fuD9MvPjZjU+zZlJ4rEKGON0ltoA=)
2: doW0mpCnrwRns3RIOxChwkliLTE.roa (hash: GsqyaGjy8E4RJKoWLdZmSypIUlVFghPNcYphYfam9qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:9b:d0:29:41:95:9b:39:aa:e5:ea:85:d0:2a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Jul 29 12:00:42 2026 GMT
Not After : Jul 30 12:00:42 2026 GMT
Subject: CN=b1f8584da69841331b014eae75112bde4aecce39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:e9:4c:3c:06:40:12:fe:b3:ce:b9:1d:97:
9a:cb:c3:24:09:aa:2c:d1:9f:16:fc:fd:1c:f4:e4:
b0:5d:90:28:cc:b2:a2:ff:14:42:4f:60:75:c6:d1:
f2:c1:0e:46:12:16:2a:48:5c:42:a0:79:55:7f:59:
c1:9b:4e:65:35:b0:86:f2:04:c4:c5:1e:ea:94:0e:
e7:a4:7c:b0:12:96:3c:78:bc:f8:ad:15:4a:aa:a1:
0d:d6:a7:15:f6:e8:ce:06:0f:d5:6e:98:75:f3:7f:
2a:b5:8f:01:58:fd:2e:8d:83:8c:f7:02:06:35:92:
e1:76:2c:69:1c:da:fc:45:e8:fc:59:e2:77:79:7c:
56:3b:05:36:52:9a:ce:72:d3:d0:02:5d:cb:d4:b0:
3e:73:35:1f:06:3c:98:e6:ac:ef:b3:0f:3d:01:2b:
d2:87:ab:4c:97:3b:ac:6f:f6:6a:e4:b0:3c:e3:d5:
57:87:5e:e4:ff:33:6d:52:bd:f0:ef:53:9e:14:fe:
45:cd:ae:6c:b5:2f:88:e7:3e:ca:e8:b2:c5:de:fb:
4d:81:21:1f:f0:67:aa:fb:6e:af:95:ac:3b:30:e6:
02:f2:a1:f0:9b:7b:ae:56:ab:04:a8:56:22:a8:e7:
1f:13:08:ef:7e:0c:e7:72:17:b1:46:a3:70:00:ce:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F8:58:4D:A6:98:41:33:1B:01:4E:AE:75:11:2B:DE:4A:EC:CE:39
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ab:6d:95:85:28:50:25:6b:de:13:87:15:69:41:3b:c4:a4:
70:db:da:53:82:23:44:37:15:e6:3b:5c:d6:86:c9:57:13:c8:
70:8f:68:40:30:9d:e3:97:a0:fa:36:52:93:66:55:c8:4d:79:
fa:8b:d0:ec:3b:23:5e:69:c2:9e:6b:03:e3:95:be:86:39:82:
19:d2:6f:bd:52:66:33:0c:3d:cc:71:b3:ab:78:76:de:14:a2:
ac:c2:3c:ad:16:e4:5e:27:d2:64:73:02:75:d9:79:c1:ec:1a:
2a:9c:de:6f:2e:83:b1:a0:ac:60:8b:d2:68:db:7c:d1:90:f2:
85:52:d5:98:38:a6:a9:a3:b7:5b:57:00:e6:5e:97:ea:02:1b:
72:7b:1f:11:38:ae:60:8d:47:93:e9:41:00:a0:32:6f:b5:a1:
0f:ab:3d:52:32:20:13:e3:d8:63:af:52:b7:14:49:fc:4e:1a:
b9:14:2e:69:50:c2:4a:a4:68:de:5c:68:ef:4c:ec:8a:07:72:
37:65:7e:74:e4:b7:54:54:89:e3:a7:27:93:df:b0:0d:bb:d2:
58:27:b7:27:a0:cf:4e:ad:b2:d9:d9:00:59:a1:8f:cf:dd:23:
72:e8:9b:b3:27:ff:4e:f8:26:78:d9:ab:41:cf:76:aa:56:48:
6f:d7:7d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:19:34 2026 by rpki-client