Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
File: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft (raw, json)
Hash identifier: MMfg+iRq0/rm2bbPbTsiELMKWVLPE3YX4jLdgZb+A5g=
Subject key identifier: F7:E2:2D:13:3C:26:E1:1A:64:E8:D2:21:19:6C:C0:C4:6B:36:58:B4
Authority key identifier: BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E
Certificate issuer: /CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
Certificate serial: 019CAC103A795A8B0C89FD898CDF83D38320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
Manifest number: 17D8
Signing time: Mon 02 Mar 2026 01:01:10 +0000
Manifest this update: Mon 02 Mar 2026 01:01:10 +0000
Manifest next update: Tue 03 Mar 2026 01:01:10 +0000
Files and hashes: 1: HkESZav4s-gaBhayorEKTs_dvWY.roa (hash: 4pdtiZ94ktcZKGQXEiN4JbBohEK0TkGQ1CIQ5Piq3Ns=)
2: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl (hash: Jyddpdm45BWYOmQCboW1SiOqS0xdOJvbDp7gkczRDio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:3a:79:5a:8b:0c:89:fd:89:8c:df:83:d3:83:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
Validity
Not Before: Mar 2 01:01:10 2026 GMT
Not After : Mar 3 01:01:10 2026 GMT
Subject: CN=f7e22d133c26e11a64e8d221196cc0c46b3658b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:c8:66:45:9c:96:82:d1:d3:2a:2b:85:44:
1c:06:cd:f2:ce:57:26:9b:cb:e2:b1:5e:69:c0:07:
71:60:89:14:86:15:da:a6:6f:6a:5f:32:11:44:8a:
29:37:a4:67:21:2d:32:64:36:7c:34:d4:12:c1:16:
79:23:59:96:94:4b:42:50:1e:e7:3b:6c:e1:91:b1:
d9:38:1c:24:a5:b1:d1:59:f1:f9:a7:e7:39:9d:92:
c6:b2:1e:93:29:1c:53:27:2f:b0:cf:53:71:e2:8f:
87:bf:ed:f7:ab:d4:ab:19:15:1c:ec:7a:16:aa:2c:
df:80:4e:0e:bc:f4:ff:e5:b0:32:c1:e4:e5:4c:6f:
a9:01:26:36:04:15:ad:4f:5f:8a:d0:7e:24:cd:ce:
75:b4:ff:c6:cf:f8:b3:d6:5a:27:a5:fc:7c:d9:46:
fa:80:de:5e:8a:14:49:79:5e:0a:d3:84:23:49:39:
05:37:97:9a:39:5e:88:cd:cf:5e:8e:4d:1b:11:94:
de:d6:62:f9:07:3f:bf:c4:6b:78:66:0e:e5:77:99:
e0:17:fe:54:5a:25:8e:25:50:23:1f:54:81:c2:94:
ad:04:a4:f9:c5:bd:1a:44:43:47:5f:29:4d:c6:4c:
a0:90:3a:36:c4:47:9e:17:0a:f5:2a:bd:b0:15:b8:
69:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E2:2D:13:3C:26:E1:1A:64:E8:D2:21:19:6C:C0:C4:6B:36:58:B4
X509v3 Authority Key Identifier:
keyid:BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:48:57:31:38:e7:97:ae:ee:f1:16:ee:12:57:55:23:fe:90:
ad:8c:56:a4:93:cd:13:73:d9:6f:13:b1:1a:51:66:db:b7:4b:
92:79:6c:69:bc:b8:92:39:aa:90:cb:22:82:94:85:a8:0d:c5:
7f:78:c0:a7:4f:b4:9e:67:d4:0b:73:89:61:a0:d0:1f:5a:83:
d5:da:80:bb:43:e7:90:ed:a2:ec:e0:d4:27:24:d9:8c:e7:d1:
12:b3:23:76:95:bc:2d:81:78:89:e0:15:23:60:71:aa:47:5a:
26:96:cc:9f:5e:d2:26:13:cc:6b:7c:4d:cb:8a:98:a3:aa:fe:
99:92:cc:b1:21:15:55:14:17:1b:ec:61:9a:97:7a:fd:4b:33:
d1:3b:21:dd:27:47:b9:42:dd:fb:d0:ce:af:80:4c:e3:da:ae:
fe:1a:30:67:a6:4f:c3:76:7e:65:8c:4d:2b:a9:ad:e9:5a:c6:
73:19:fa:2b:74:fe:b6:9d:d6:f4:9a:b8:e4:b5:ea:ab:96:2e:
69:23:21:03:bd:2e:ce:c3:50:d4:59:11:9a:ae:0b:75:14:0c:
1e:d4:a5:3b:e7:cb:77:df:17:52:7a:ea:65:b6:86:8b:84:fb:
9d:9c:38:16:38:da:a3:37:ae:25:be:b6:60:d5:b4:db:7f:98:
de:31:29:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:35 2026 by rpki-client