Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier: FqRZzYyIQ+ksyOIemh7mj1T1RlAh0HNUmgxxCf0syJQ=
Subject key identifier: C9:00:2B:A2:E8:E7:BD:AD:30:82:13:E5:67:5E:60:15:62:CF:46:87
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 019EC2247641E55D1DB23466832FA5531AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number: 0C64
Signing time: Sat 13 Jun 2026 18:00:29 +0000
Manifest this update: Sat 13 Jun 2026 18:00:29 +0000
Manifest next update: Sun 14 Jun 2026 18:00:29 +0000
Files and hashes: 1: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: OXr0ycXflZ1uvIAHDerDKzEbypzohz/5KP98Fl0Xex4=)
2: doW0mpCnrwRns3RIOxChwkliLTE.roa (hash: GsqyaGjy8E4RJKoWLdZmSypIUlVFghPNcYphYfam9qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:76:41:e5:5d:1d:b2:34:66:83:2f:a5:53:1a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Jun 13 18:00:29 2026 GMT
Not After : Jun 14 18:00:29 2026 GMT
Subject: CN=c9002ba2e8e7bdad308213e5675e601562cf4687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6d:ed:89:0c:93:9f:40:1e:47:e0:1d:93:1b:
78:37:a7:2a:0b:0e:f0:d8:2b:0f:8e:9b:e1:2a:54:
d3:4b:71:50:18:3e:29:96:43:2a:86:5e:de:35:b3:
bc:23:af:a2:b7:f8:a7:40:ef:d9:d8:e8:3e:92:12:
7c:46:c0:6e:fc:17:1e:4c:64:ee:b9:bb:71:c5:d3:
28:95:da:92:2e:b6:ad:de:34:89:5d:65:43:05:97:
71:96:2a:66:bb:a4:9f:1c:6c:27:0c:23:71:82:db:
8e:14:0f:57:e7:5a:bd:bd:58:fc:b0:ee:d3:9d:02:
8d:95:05:9d:28:23:f8:7f:93:4e:43:87:24:7f:9f:
65:d7:f5:e9:4b:16:5a:19:c0:26:cf:d7:5a:ec:d4:
04:3d:98:03:15:5d:5f:fe:db:5f:58:36:8a:5a:72:
f5:29:2f:ce:29:c4:90:58:0b:fd:b4:41:bf:39:1d:
dc:4c:18:36:7e:ef:d6:ea:1e:bc:03:19:c3:4c:e2:
f7:aa:34:7e:1d:5c:51:d6:ff:50:f7:95:93:6e:b5:
57:03:99:4f:5f:ed:54:9f:88:7f:c7:60:b4:5b:d4:
74:95:5c:9f:f9:15:10:04:13:73:73:5b:37:9d:af:
b6:12:d1:6e:65:7a:c6:49:a6:cc:ee:a2:5e:55:9a:
ca:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:00:2B:A2:E8:E7:BD:AD:30:82:13:E5:67:5E:60:15:62:CF:46:87
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ba:aa:bf:4b:47:62:48:6e:a7:2a:6f:d6:9a:3e:13:99:46:
1c:a1:e3:99:e7:aa:95:44:f2:15:03:e7:17:77:6c:4f:22:1c:
da:dd:5c:f2:44:84:1f:3a:b4:01:53:ee:98:2a:3d:84:3a:4d:
d6:5c:f0:de:a8:ce:83:04:51:19:34:07:2b:8f:e9:10:d4:54:
4e:8b:34:02:36:04:9c:77:30:00:f6:a5:8d:35:5d:62:0a:86:
92:b0:dc:54:80:60:1c:9b:d9:d6:e0:51:8d:f4:dd:89:ab:b0:
d4:04:2d:70:77:b7:68:f5:95:9b:f3:85:4f:06:4e:73:81:94:
19:da:b7:18:90:0f:ac:34:45:8c:a5:8a:d9:e6:9d:85:91:d0:
fe:27:7f:ac:49:42:87:4c:42:5e:ee:e5:b3:50:fb:fc:c3:2f:
9f:89:00:13:6b:3d:b5:f9:7a:95:7a:41:68:42:7c:c0:67:0a:
2a:74:1a:45:a8:0e:7f:55:bf:82:dd:d6:f8:53:77:81:dc:05:
8c:51:79:f9:84:ce:8b:56:6e:92:a1:1a:3f:25:52:2d:3c:8d:
1a:6a:95:b0:35:27:d0:56:ac:2f:fa:d2:cb:39:c3:18:c3:db:
fb:c8:03:ce:d7:0b:8f:aa:3e:fc:ed:77:f9:f8:e6:58:43:2c:
34:58:4b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:28 2026 by rpki-client