Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
File: 3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json)
Hash identifier: TJ4ZGHS7kH/RF0OBJ4zLeStK0zpcR9Ox2BOyVe0i0xo=
Subject key identifier: 0D:91:52:8E:FD:9E:39:CE:8A:B9:1C:5F:0A:72:ED:26:3C:93:AC:AE
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial: 01A0E7AE9A71C052D4CBD7EA9CAD7B31CFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
Manifest number: 1A8C
Signing time: Mon 28 Sep 2026 11:02:54 +0000
Manifest this update: Mon 28 Sep 2026 11:02:54 +0000
Manifest next update: Tue 29 Sep 2026 11:02:54 +0000
Files and hashes: 1: 2W3yWm1HMzPskIDqOBKTk5NLDnk.roa (hash: zkzysD/L4UIm9OcLl6P6Mv4weJO+FXhHhd0t2XLROjI=)
2: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: nJb3jmyvrmWIpLQMPW4uBC2B3cCBCgYagLPXvrpb4cc=)
3: K3l-f-R4fzp0JNI40Ow_kAwQElE.roa (hash: lzT7cfBjG064YjxJ7JvC+eelDCQdNhykEA7ZwxG3cvA=)
4: PKWl5L-Kf_6-uLjkK3IrLmDHIJ8.roa (hash: a8KnYbin0YfzPy81a2Ft5OJRitrpc3uTgAStWm8odkA=)
5: WVGS-uOqCUSz2p_N5CL2Cz4z-K0.roa (hash: IB5UKLk0ZZT7DbiIeOg9ZlXwRRXDT147MF0fykJ8TKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:9a:71:c0:52:d4:cb:d7:ea:9c:ad:7b:31:cf:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Validity
Not Before: Sep 28 11:02:54 2026 GMT
Not After : Sep 29 11:02:54 2026 GMT
Subject: CN=0d91528efd9e39ce8ab91c5f0a72ed263c93acae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:bf:a5:5e:a5:5b:18:09:28:fc:53:af:32:
34:3b:77:ac:c5:75:b2:d6:6e:9f:2f:3a:89:2e:06:
04:ad:72:5c:5d:b5:23:d6:71:1e:a5:ed:68:07:b9:
ab:7d:31:74:68:51:6b:9a:25:4e:37:62:d2:7a:46:
bb:44:ef:27:78:03:a5:9a:fb:67:5e:7f:18:6a:06:
51:67:3b:dd:f5:76:6a:75:c4:9f:d0:76:16:08:47:
24:57:71:b4:38:76:0e:d5:53:da:ab:6d:5b:b2:a3:
33:62:9d:9d:1c:62:84:39:1d:00:40:e3:0c:5f:3b:
45:42:56:59:9c:4c:37:65:ed:ec:7c:6c:11:7f:e6:
2d:56:31:68:8e:5f:1c:11:08:98:f0:04:ba:07:4f:
0d:d4:0d:56:2a:a0:3d:cc:7d:c0:f4:13:16:49:87:
a1:79:af:11:fd:e5:4c:dd:de:f1:c3:40:0f:90:75:
da:4d:40:14:6a:85:82:5d:bf:a4:7b:73:00:90:46:
14:20:96:57:3d:2b:66:40:6d:72:bf:ce:02:f8:2c:
70:30:94:ff:ce:c5:69:df:5d:44:3f:96:02:5d:7a:
57:0f:a6:8c:ba:07:95:6a:13:4e:a8:b2:ba:14:5c:
f9:a0:a7:9f:c5:1a:b4:62:2e:11:70:54:e8:74:53:
d8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:91:52:8E:FD:9E:39:CE:8A:B9:1C:5F:0A:72:ED:26:3C:93:AC:AE
X509v3 Authority Key Identifier:
keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:98:95:1b:ea:c5:81:39:2e:22:fc:fa:d8:5c:da:9b:8c:e7:
3c:f8:d5:df:da:91:ae:49:5a:a3:96:d6:16:c8:d7:b7:33:3c:
0b:8c:17:cb:ed:49:73:96:2c:68:b6:ad:bf:32:bc:d5:bf:0c:
d3:42:d8:89:f2:67:46:e3:ed:8a:e0:3e:d4:ab:7b:d9:cc:19:
a0:e3:fc:e6:06:22:ff:6c:58:99:7a:4e:1a:a7:b9:42:df:cd:
c3:69:85:10:4f:4c:26:8b:48:79:4c:62:80:ee:67:e5:66:4d:
9a:90:be:8b:92:0a:a1:6b:a7:99:e8:58:45:86:a6:bc:61:b4:
f5:83:b0:dd:36:40:bb:9e:c8:2d:4c:32:9c:06:0a:f4:b4:c4:
73:d4:82:53:39:ac:37:fd:9e:3d:5f:76:4e:55:70:77:ff:8f:
6c:94:72:d8:07:d7:28:d0:74:ac:33:b2:5b:e3:fb:ad:61:fa:
d6:9f:38:51:ab:71:22:f7:d6:2c:53:f5:1d:be:ca:99:30:0a:
77:e1:b9:cb:ef:5f:13:77:f8:0e:04:13:61:77:23:b1:d9:36:
03:73:a6:02:ac:a2:40:ee:81:26:0d:48:49:a9:c8:de:2b:dc:
fe:6c:67:28:da:a2:ee:be:96:53:13:93:bf:d0:98:3f:9d:8a:
da:0d:e4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:58:03 2026 by rpki-client