Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
File: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft (raw, json)
Hash identifier: Im603ehYqrMbd/L5bfyx0mqBaHUfkrtSlTvXmenLiYE=
Subject key identifier: B6:A5:31:45:0E:5B:89:B3:C5:54:19:C5:3A:2D:AD:92:26:63:C8:CA
Authority key identifier: BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E
Certificate issuer: /CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
Certificate serial: 019DA34160E57CE52BFB90597A5845BBEC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
Manifest number: 1858
Signing time: Sun 19 Apr 2026 01:01:03 +0000
Manifest this update: Sun 19 Apr 2026 01:01:03 +0000
Manifest next update: Mon 20 Apr 2026 01:01:03 +0000
Files and hashes: 1: HkESZav4s-gaBhayorEKTs_dvWY.roa (hash: 4pdtiZ94ktcZKGQXEiN4JbBohEK0TkGQ1CIQ5Piq3Ns=)
2: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl (hash: +GN7SADr+MNlCkjBFNb11SncE7esrdj5I8JQoRFGfQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:60:e5:7c:e5:2b:fb:90:59:7a:58:45:bb:ec:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
Validity
Not Before: Apr 19 01:01:03 2026 GMT
Not After : Apr 20 01:01:03 2026 GMT
Subject: CN=b6a531450e5b89b3c55419c53a2dad922663c8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:af:a0:08:8e:8c:ae:51:b7:0e:03:0a:cc:
aa:70:b4:ff:9e:5b:63:57:20:38:55:e7:e8:16:c4:
0a:bf:da:1d:59:87:be:4b:cf:7f:52:a9:a6:e7:0b:
75:98:8d:7f:ea:00:8a:5a:8a:16:e0:a0:97:8e:15:
d1:dc:6a:fb:6a:2c:da:c6:e1:87:ee:c9:15:bc:ba:
bf:80:d9:0c:7c:77:df:01:63:ae:b6:78:9b:6a:ea:
a4:99:4c:e4:1b:33:71:e3:29:b5:97:51:6f:e7:60:
6b:03:81:08:38:12:1c:2b:0d:21:72:3b:ee:c5:47:
2c:24:92:bc:60:e2:7b:e7:d3:f6:96:3b:13:0a:72:
ab:96:4e:39:5d:16:d4:af:7e:3c:12:03:ad:1f:6a:
95:59:3d:6b:96:3c:9b:0f:8e:c1:c0:7d:d8:c4:08:
cd:cc:f5:97:75:b4:04:cb:ca:d1:5c:4f:ef:e8:fd:
2b:0c:95:2a:20:fb:b1:c8:b4:0d:30:f0:d2:e9:88:
6d:03:73:22:a2:60:5b:e8:c1:28:a8:98:50:0f:ce:
05:ad:3c:6e:9c:3e:d7:08:2e:56:ec:dd:54:11:5d:
30:18:d6:68:f1:cc:e8:43:57:68:87:f5:bb:32:96:
a3:e6:fe:4f:13:6f:12:54:24:ed:3f:e1:85:d8:32:
b1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A5:31:45:0E:5B:89:B3:C5:54:19:C5:3A:2D:AD:92:26:63:C8:CA
X509v3 Authority Key Identifier:
keyid:BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:25:c3:e8:9a:de:84:89:c7:0b:03:86:35:e8:f6:6a:d4:25:
fd:6d:ab:7c:21:92:a3:b3:64:14:9f:39:3d:16:26:08:aa:a7:
b1:61:af:89:d0:03:b4:1a:d1:02:78:65:f7:f0:94:57:35:5b:
a2:ed:7b:f8:24:6e:3c:e4:95:05:23:6e:2b:54:17:16:3a:13:
f9:8c:52:91:9e:e7:30:06:e7:10:57:db:ab:6f:52:6c:c9:27:
ec:00:b4:cd:bd:b3:42:bc:7b:44:0b:ae:68:44:f9:b0:5a:08:
ae:85:e5:a8:a3:02:01:1e:a4:81:81:94:ca:6e:c8:21:48:ae:
e0:1e:6b:71:fd:45:c1:69:77:da:06:5c:b5:91:43:b4:55:4d:
a6:24:3f:e5:54:01:3b:85:3b:19:33:7c:38:ba:83:27:76:ec:
49:e3:2f:97:aa:84:22:dc:56:3d:04:5e:08:04:18:dd:e7:31:
99:eb:a9:ec:44:ec:23:ea:bd:cf:ae:0e:c0:d9:56:3f:ca:c0:
75:3b:5e:21:51:aa:34:8c:7d:0c:5f:44:be:36:e9:cf:28:22:
c6:b9:4b:0f:3b:a9:4e:aa:c9:89:30:27:5d:39:fb:5c:5f:5a:
9a:a2:cd:90:f2:a3:e5:3b:fd:dc:99:27:a6:a6:7a:e6:66:d1:
63:8a:d2:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jQWDlfOUr+5BZelhFu+x/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNGZjYjY0YWViMzQ1NWZiMzk4OTdlMzEyOTVkZGU4M2Fk
ZDRkMGUwHhcNMjYwNDE5MDEwMTAzWhcNMjYwNDIwMDEwMTAzWjAzMTEwLwYDVQQD
EyhiNmE1MzE0NTBlNWI4OWIzYzU1NDE5YzUzYTJkYWQ5MjI2NjNjOGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8OvoAiOjK5Rtw4DCsyqcLT/nltj
VyA4VefoFsQKv9odWYe+S89/Uqmm5wt1mI1/6gCKWooW4KCXjhXR3Gr7aizaxuGH
7skVvLq/gNkMfHffAWOutnibauqkmUzkGzNx4ym1l1Fv52BrA4EIOBIcKw0hcjvu
xUcsJJK8YOJ759P2ljsTCnKrlk45XRbUr348EgOtH2qVWT1rljybD47BwH3YxAjN
zPWXdbQEy8rRXE/v6P0rDJUqIPuxyLQNMPDS6YhtA3MiomBb6MEoqJhQD84FrTxu
nD7XCC5W7N1UEV0wGNZo8czoQ1doh/W7Mpaj5v5PE28SVCTtP+GF2DKxKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLalMUUOW4mzxVQZxTotrZImY8jKMB8GA1UdIwQY
MBaAFL9Py2Sus0Vfs5iX4xKV3eg63U0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zZTc5ODAtN2UzMS00ZmQxLWI3OWQt
MGJkNjJjODNlOTJiLzEvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8zZTc5ODAtN2UzMS00ZmQxLWI3OWQtMGJkNjJjODNlOTJi
LzEvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCXD6Jre
hInHCwOGNej2atQl/W2rfCGSo7NkFJ85PRYmCKqnsWGvidADtBrRAnhl9/CUVzVb
ou17+CRuPOSVBSNuK1QXFjoT+YxSkZ7nMAbnEFfbq29SbMkn7AC0zb2zQrx7RAuu
aET5sFoIroXlqKMCAR6kgYGUym7IIUiu4B5rcf1FwWl32gZctZFDtFVNpiQ/5VQB
O4U7GTN8OLqDJ3bsSeMvl6qEItxWPQReCAQY3ecxmeup7ETsI+q9z64OwNlWP8rA
dTteIVGqNIx9DF9EvjbpzygixrlLDzupTqrJiTAnXTn7XF9amqLNkPKj5Tv93Jkn
pqZ65mbRY4rSWA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:58 2026 by rpki-client