Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier: qrBTvs+sgx1Rrlupdl9gC0f/PAJTPvCUaB1GfhMeivQ=
Subject key identifier: EA:D6:10:B0:68:1C:7E:F8:29:76:D6:E3:DE:EE:DE:23:81:B3:D3:66
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 019CAD225DE199DCA188E6BC3F31444859B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number: 0B50
Signing time: Mon 02 Mar 2026 06:00:36 +0000
Manifest this update: Mon 02 Mar 2026 06:00:36 +0000
Manifest next update: Tue 03 Mar 2026 06:00:36 +0000
Files and hashes: 1: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: qAmlEm3HpwlUUAB86lvtw88BataKwR2JJkrIiDNGqx0=)
2: doW0mpCnrwRns3RIOxChwkliLTE.roa (hash: GsqyaGjy8E4RJKoWLdZmSypIUlVFghPNcYphYfam9qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:5d:e1:99:dc:a1:88:e6:bc:3f:31:44:48:59:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Mar 2 06:00:36 2026 GMT
Not After : Mar 3 06:00:36 2026 GMT
Subject: CN=ead610b0681c7ef82976d6e3deeede2381b3d366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:1e:bd:9e:59:c1:62:f1:8b:d8:27:83:39:
de:49:be:4b:2e:81:a1:94:e0:e0:34:bd:fc:81:37:
0e:fe:89:57:30:f9:2d:14:68:2a:50:db:06:f4:d6:
0c:fb:af:0d:1b:ea:a1:32:92:30:f4:ab:6c:a7:57:
85:1b:ad:fd:23:ae:28:95:4a:46:16:90:43:12:2e:
35:32:70:a2:18:94:46:a3:e2:9f:fa:d1:e2:e1:2f:
7c:f2:e7:bb:d8:fe:35:5c:60:dd:fe:4e:19:4d:3b:
1f:a9:bd:16:06:82:c1:bd:79:6a:fe:dd:9c:12:a8:
42:29:af:2c:95:59:8d:ca:19:57:d9:50:39:a7:6e:
22:9b:ab:60:3f:8f:23:ea:e6:66:dc:fe:3e:09:48:
b9:32:e6:69:a5:5d:48:9d:12:91:0e:64:ab:b8:ef:
b4:52:06:33:c4:b9:73:f9:f6:b9:35:33:d2:2d:cd:
3f:ea:82:a7:f3:72:0b:a2:06:97:48:dd:a0:62:21:
28:05:ef:90:88:fd:40:dd:7d:40:d6:58:e2:4c:c0:
18:99:06:92:e6:dc:ae:05:b1:c0:db:98:14:c1:15:
43:6d:fc:a7:e3:99:b3:d1:81:1f:7f:55:ea:6b:59:
d9:c4:1d:c3:41:06:3a:fa:e7:f1:50:da:e1:e6:1e:
9b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D6:10:B0:68:1C:7E:F8:29:76:D6:E3:DE:EE:DE:23:81:B3:D3:66
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0a:55:97:ab:14:cb:03:b4:9c:99:db:03:bb:3d:d0:94:53:
1e:90:2c:2c:9e:90:f9:3c:f4:24:cf:fe:b6:2b:36:a1:df:94:
ef:d4:be:e6:3d:4e:88:90:1e:0f:ae:1b:a0:02:33:0b:53:60:
fb:6f:ba:2f:73:01:c7:2f:3e:cc:a4:23:72:33:0c:57:8d:6c:
0c:92:82:90:d4:21:eb:9a:11:58:4b:ed:8e:ea:03:9e:4a:05:
b8:4a:61:e9:0b:76:59:83:98:0f:f4:da:ae:28:53:2c:ea:23:
01:a1:7c:90:7a:c5:ad:0e:95:cb:8e:1c:d8:16:ba:09:55:e0:
86:ef:8d:29:13:22:cf:58:39:51:4b:ac:45:eb:93:31:d8:ce:
65:af:7a:50:06:f1:2c:33:d0:e4:7c:6a:a3:81:71:67:a4:e0:
4f:db:30:74:66:93:a1:10:ff:10:31:b8:ca:f9:94:85:a2:08:
57:fa:a1:19:5f:6e:3b:77:b0:84:c7:ff:08:e1:b0:b1:96:bd:
87:b0:ca:78:c0:a1:9f:b3:fb:ce:aa:cc:e8:f0:af:dd:eb:29:
24:25:19:3e:a7:15:5c:91:ad:b6:a5:07:c9:66:75:57:2a:f0:
ae:17:80:dd:bd:72:b4:36:e0:24:de:e5:68:01:f6:54:9d:14:
51:91:35:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIl3hmdyhiOa8PzFESFm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmM2ZjYjY0MjVkNTk4ZTRiODdiMDQ5MTdiM2VmOTUwOWUz
YjU2YzAwHhcNMjYwMzAyMDYwMDM2WhcNMjYwMzAzMDYwMDM2WjAzMTEwLwYDVQQD
EyhlYWQ2MTBiMDY4MWM3ZWY4Mjk3NmQ2ZTNkZWVlZGUyMzgxYjNkMzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv4evZ5ZwWLxi9gngzneSb5LLoGh
lODgNL38gTcO/olXMPktFGgqUNsG9NYM+68NG+qhMpIw9Ktsp1eFG639I64olUpG
FpBDEi41MnCiGJRGo+Kf+tHi4S988ue72P41XGDd/k4ZTTsfqb0WBoLBvXlq/t2c
EqhCKa8slVmNyhlX2VA5p24im6tgP48j6uZm3P4+CUi5MuZppV1InRKRDmSruO+0
UgYzxLlz+fa5NTPSLc0/6oKn83ILogaXSN2gYiEoBe+QiP1A3X1A1ljiTMAYmQaS
5tyuBbHA25gUwRVDbfyn45mz0YEff1Xqa1nZxB3DQQY6+ufxUNrh5h6b5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrWELBoHH74KXbW497u3iOBs9NmMB8GA1UdIwQY
MBaAFC8/y2Ql1ZjkuHsEkXs++VCeO1bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzct
NmY3MWNhZDE2Zjk2LzEvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzctNmY3MWNhZDE2Zjk2
LzEvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggpVl6sU
ywO0nJnbA7s90JRTHpAsLJ6Q+Tz0JM/+tis2od+U79S+5j1OiJAeD64boAIzC1Ng
+2+6L3MBxy8+zKQjcjMMV41sDJKCkNQh65oRWEvtjuoDnkoFuEph6Qt2WYOYD/Ta
rihTLOojAaF8kHrFrQ6Vy44c2Ba6CVXghu+NKRMiz1g5UUusReuTMdjOZa96UAbx
LDPQ5Hxqo4FxZ6TgT9swdGaToRD/EDG4yvmUhaIIV/qhGV9uO3ewhMf/COGwsZa9
h7DKeMChn7P7zqrM6PCv3espJCUZPqcVXJGttqUHyWZ1VyrwrheA3b1ytDbgJN7l
aAH2VJ0UUZE12w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:36 2026 by rpki-client