Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier: vywAgH+oQ+W6q9/PXasxA2wSbFx3P4k3uHyQja2GBIk=
Subject key identifier: E5:AE:F2:4A:17:1E:92:08:EC:F2:F2:B3:D9:F1:3B:26:8C:7C:4B:EE
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 019CAD227725518D54F0229EECDD2C95DA92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number: 0EEF
Signing time: Mon 02 Mar 2026 06:00:42 +0000
Manifest this update: Mon 02 Mar 2026 06:00:42 +0000
Manifest next update: Tue 03 Mar 2026 06:00:42 +0000
Files and hashes: 1: C0AVe4iSzt1tLzO1z3J_8BFSSwQ.roa (hash: 1x0Uuntsxdx1mq0mpp7kC3SseRJDTb+Eb50/cVmhJPA=)
2: idAPicjfcAurqzPxNV2Y-GlWZVM.roa (hash: 9WnV/PIHV4CmrkZ1/Csc9lXw9Lt4fmaI0bw+OleKvs0=)
3: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: YFlp8TeQgKDXVZViSz+IZkCdbvxbgwbOAwkA32Eg0Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:77:25:51:8d:54:f0:22:9e:ec:dd:2c:95:da:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Mar 2 06:00:42 2026 GMT
Not After : Mar 3 06:00:42 2026 GMT
Subject: CN=e5aef24a171e9208ecf2f2b3d9f13b268c7c4bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:93:20:77:b5:95:29:f6:89:1c:c1:18:a0:
7b:ca:29:f8:99:29:c4:49:85:2c:e3:4d:95:a1:ef:
3c:18:37:f4:c4:a3:a9:e3:1d:2a:65:73:db:fd:d6:
74:dd:37:07:3b:29:75:38:e7:6f:e9:62:ad:00:ab:
d0:40:83:d6:b9:e8:99:a6:51:75:55:af:91:b4:8f:
d1:8b:03:fe:08:82:90:7d:f3:f7:db:82:8b:3a:81:
36:85:fe:bb:8f:6d:5a:fd:59:48:5a:9a:72:49:4e:
74:64:8c:10:ff:76:a7:15:6d:15:96:3a:a5:3e:70:
8c:cb:73:85:cc:2c:29:f3:11:50:87:d4:a3:62:91:
12:f2:31:4c:f0:5d:33:0a:10:eb:6c:39:a0:92:cc:
1b:d9:c4:b9:af:fe:45:42:f4:d4:ec:a1:6f:94:b7:
29:70:90:9a:86:d2:af:27:74:bc:73:7a:68:b7:62:
e1:0b:42:19:ba:86:7a:06:24:d0:1a:6c:f3:b7:d9:
df:c1:b0:3b:ed:c7:4a:bb:cd:19:ae:73:f1:01:e4:
fe:28:d0:fa:f0:a0:41:7c:36:e3:38:6a:9b:8d:1c:
c3:a2:86:a3:49:2d:63:ca:c4:ec:02:9b:7c:41:86:
4b:2f:19:51:62:a0:fb:00:60:c9:44:9c:c4:04:6c:
da:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AE:F2:4A:17:1E:92:08:EC:F2:F2:B3:D9:F1:3B:26:8C:7C:4B:EE
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1d:23:f6:4c:45:a0:9e:2c:09:7e:cc:d8:5b:2d:85:b7:59:
c1:ed:52:c1:89:61:5b:8e:70:3e:0a:8c:97:63:59:19:41:57:
49:51:4a:81:9a:1a:de:2e:93:f9:30:7b:b7:8f:c1:f7:53:4a:
23:71:27:63:50:90:df:41:1f:5b:5b:6e:c1:1d:87:48:f1:ae:
49:b6:21:31:0c:18:07:30:f0:8d:1d:6c:75:0b:bc:83:9d:19:
8c:48:c4:ac:9a:1d:c4:38:5e:43:64:ff:df:7d:a2:a3:ee:69:
33:b9:0b:4b:99:3a:21:29:2c:31:97:e7:f3:63:7d:e6:57:8e:
e8:1b:9a:b5:14:33:56:c0:a3:d7:1d:64:83:0d:e1:1a:61:9a:
d7:ae:e1:25:93:83:ba:2a:a5:86:40:0a:37:6a:05:e7:c0:87:
ad:07:cf:ff:45:02:c1:80:a1:bd:2f:ad:b6:4f:ac:0d:4f:1c:
9b:f6:a3:71:13:c3:4f:ec:a0:fe:be:3e:44:29:df:6c:7e:3e:
bb:3a:01:61:cd:dc:ca:c8:ab:f1:96:4a:dd:a7:a0:04:8e:49:
da:d2:1f:e2:c4:a6:36:74:49:b0:2c:96:a9:7b:d5:4e:45:79:
17:4a:ab:9c:96:ca:f7:04:2e:45:93:90:fb:b4:a0:5a:69:82:
79:b8:d1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:28:27 2026 by rpki-client