
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
File: 3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json)
Hash identifier: cT1YgmZMq5YZLvyPd2fnP/OQCSV4MshUOik4Hrm48og=
Subject key identifier: 12:0E:AB:AD:CC:47:8A:28:CC:82:0A:BB:3E:4A:0A:3E:3B:DD:D9:B5
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial: 019D99D0DD680D35C2BBEAC91FD5C7B3A062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
Manifest number: 18D6
Signing time: Fri 17 Apr 2026 05:01:35 +0000
Manifest this update: Fri 17 Apr 2026 05:01:35 +0000
Manifest next update: Sat 18 Apr 2026 05:01:35 +0000
Files and hashes: 1: 2W3yWm1HMzPskIDqOBKTk5NLDnk.roa (hash: zkzysD/L4UIm9OcLl6P6Mv4weJO+FXhHhd0t2XLROjI=)
2: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: 6kNsN8kP4MXur5V/UZcKm/feuqmWVog7SXqHV+5hJPI=)
3: K3l-f-R4fzp0JNI40Ow_kAwQElE.roa (hash: lzT7cfBjG064YjxJ7JvC+eelDCQdNhykEA7ZwxG3cvA=)
4: PKWl5L-Kf_6-uLjkK3IrLmDHIJ8.roa (hash: a8KnYbin0YfzPy81a2Ft5OJRitrpc3uTgAStWm8odkA=)
5: WVGS-uOqCUSz2p_N5CL2Cz4z-K0.roa (hash: IB5UKLk0ZZT7DbiIeOg9ZlXwRRXDT147MF0fykJ8TKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:dd:68:0d:35:c2:bb:ea:c9:1f:d5:c7:b3:a0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Validity
Not Before: Apr 17 05:01:35 2026 GMT
Not After : Apr 18 05:01:35 2026 GMT
Subject: CN=120eabadcc478a28cc820abb3e4a0a3e3bddd9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:7e:9e:e3:56:19:94:8b:ce:b3:69:69:39:
2e:d1:0e:63:62:6b:4c:06:da:6d:95:90:09:77:bb:
1d:5e:d7:4b:9d:a5:fb:ea:98:b3:94:78:92:b2:72:
79:50:c3:dd:b9:3e:93:23:9f:3d:31:97:61:9d:1f:
e4:4c:09:a5:08:a5:70:0e:3d:64:b9:58:85:be:f8:
d5:28:d8:ff:5f:10:2e:d8:52:7e:8a:23:23:ab:6c:
fa:8c:55:fa:42:04:6b:dd:a2:55:8a:b5:12:72:ba:
e2:26:d6:a4:ed:46:60:92:a8:b8:d2:13:36:60:96:
c3:e0:2e:07:e7:88:16:89:ff:fd:47:25:1c:a6:55:
1d:b4:e9:c4:ea:cb:3c:0f:21:35:db:c3:62:54:9a:
45:00:50:3c:9b:54:70:a0:db:b6:3c:d4:17:31:19:
15:3a:b0:e7:da:2e:e3:36:c7:7a:39:17:bb:82:04:
1a:5e:cf:55:77:58:0f:b6:83:83:25:5e:f0:df:ca:
78:09:4c:1d:c2:81:07:3d:ba:58:3b:65:a1:a3:92:
9a:9e:63:ba:18:ee:26:49:f1:68:f3:0a:ea:7f:bb:
e2:aa:46:03:03:78:28:13:c7:ec:dc:12:d5:9f:28:
92:cf:98:e3:99:86:ed:f1:2e:8b:fa:a5:ca:ee:4b:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0E:AB:AD:CC:47:8A:28:CC:82:0A:BB:3E:4A:0A:3E:3B:DD:D9:B5
X509v3 Authority Key Identifier:
keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7a:0f:10:a3:11:79:64:fe:fa:61:13:4a:1c:00:91:ac:99:
78:b7:94:ff:cb:61:d8:f5:96:5c:6b:e1:6f:91:82:39:a3:35:
a4:97:31:47:71:3d:c2:ad:40:4d:01:81:e9:2e:d8:cf:15:1b:
72:2f:60:19:a5:a2:91:be:e6:e1:4b:c5:5b:61:2c:68:f2:f1:
05:e7:dd:28:2b:d7:be:f5:18:4e:6a:09:06:20:5f:60:81:43:
06:9c:26:9f:67:0f:27:ed:54:0c:27:df:11:0c:46:12:2b:ec:
a0:80:c0:75:1b:29:6d:c3:5d:08:b9:75:d6:d0:fe:5f:ae:16:
bc:e2:f1:1e:10:ee:5d:3e:69:40:56:22:66:51:e2:14:ae:1a:
c4:7d:c2:82:c9:1e:d6:ec:c3:a8:81:90:1b:c8:67:90:7d:90:
95:e7:8a:66:13:3b:9b:d2:3e:d2:2f:15:c7:ea:34:19:66:4a:
ea:01:e1:b1:05:18:86:e1:c7:49:12:05:48:d4:3b:1a:93:94:
42:fe:46:37:3a:13:3c:78:b5:7e:38:1f:e8:01:98:76:29:36:
cf:5b:7a:3c:df:56:6c:8d:11:25:2e:43:39:d0:40:82:19:f6:
24:62:37:07:05:e4:4c:bc:90:2c:75:98:53:bd:63:75:d3:a4:
21:f2:2a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:48 2026 by rpki-client