Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
File: 3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json)
Hash identifier: JpbAZLMF71A4gnOjS9Bt2LouOEHZLqGZmbZaktkKVzA=
Subject key identifier: 57:E3:62:74:1B:7E:0A:58:FA:CD:F3:48:88:04:D6:70:09:22:1A:B6
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial: 019FAAF547513121E925010BF7D7E0316366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
Manifest number: 19E8
Signing time: Tue 28 Jul 2026 23:00:29 +0000
Manifest this update: Tue 28 Jul 2026 23:00:29 +0000
Manifest next update: Wed 29 Jul 2026 23:00:29 +0000
Files and hashes: 1: 2W3yWm1HMzPskIDqOBKTk5NLDnk.roa (hash: zkzysD/L4UIm9OcLl6P6Mv4weJO+FXhHhd0t2XLROjI=)
2: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: QvajvTSMahO4tY9RCL3ikMdYOpVThhOdCZWHmcKxejE=)
3: K3l-f-R4fzp0JNI40Ow_kAwQElE.roa (hash: lzT7cfBjG064YjxJ7JvC+eelDCQdNhykEA7ZwxG3cvA=)
4: PKWl5L-Kf_6-uLjkK3IrLmDHIJ8.roa (hash: a8KnYbin0YfzPy81a2Ft5OJRitrpc3uTgAStWm8odkA=)
5: WVGS-uOqCUSz2p_N5CL2Cz4z-K0.roa (hash: IB5UKLk0ZZT7DbiIeOg9ZlXwRRXDT147MF0fykJ8TKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:47:51:31:21:e9:25:01:0b:f7:d7:e0:31:63:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Validity
Not Before: Jul 28 23:00:29 2026 GMT
Not After : Jul 29 23:00:29 2026 GMT
Subject: CN=57e362741b7e0a58facdf3488804d67009221ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:56:a4:9b:e2:b0:0b:fe:87:7d:d8:e7:5f:1e:
5b:20:63:f2:79:27:89:2f:da:eb:10:46:bb:69:ef:
4b:a7:86:3d:7b:fa:a9:94:40:06:4d:a8:39:8b:42:
08:54:1e:f4:2e:44:e5:95:4a:fb:bb:3c:e3:a0:27:
f1:25:19:a6:30:a6:80:98:52:a7:68:7a:83:eb:eb:
ed:97:5c:ca:a5:cb:82:70:2f:e8:93:eb:f8:6d:4c:
30:fe:7b:34:85:8f:ac:5a:89:5d:b6:26:93:8f:3c:
f7:97:f2:cf:cc:5c:84:d3:56:21:a8:39:8c:8d:b6:
df:fe:50:ad:1a:1e:4c:15:05:10:a7:63:e4:40:c9:
6b:36:4e:74:a2:18:4d:79:cb:45:8b:31:a1:53:97:
2e:75:2d:a8:16:22:4a:90:fe:d8:8a:2f:97:5d:e3:
c4:84:22:eb:c6:00:ab:c9:19:1d:23:cc:e0:9d:e8:
8d:a2:a3:88:ab:27:b8:fc:06:d2:a2:a3:de:f2:1f:
0d:54:2a:72:bf:64:5e:03:98:21:5e:cc:23:30:19:
b9:26:47:0a:4a:2d:d3:e0:3e:d1:ef:96:38:f3:3b:
db:8e:67:f4:cb:7b:76:f6:80:a3:97:93:b4:20:be:
0f:03:db:36:89:e6:d2:02:3e:23:80:03:c9:cb:4b:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E3:62:74:1B:7E:0A:58:FA:CD:F3:48:88:04:D6:70:09:22:1A:B6
X509v3 Authority Key Identifier:
keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5b:1b:3d:2b:78:4b:91:a8:e2:e6:16:33:de:4b:93:a3:70:
05:71:70:9b:2c:fa:d7:5d:4e:4f:31:4b:18:16:f1:a7:f1:d3:
66:78:e1:83:1f:a1:e2:7c:ab:19:52:cb:c7:ab:27:63:1b:50:
d7:61:1f:98:4c:a3:94:f6:22:5c:51:3a:39:a3:6c:60:a6:32:
96:67:2d:1b:b6:55:cd:fd:3b:46:15:18:47:7b:ef:21:e2:93:
eb:15:3f:ed:48:04:3e:63:1f:2c:dd:1c:a5:10:19:26:36:9d:
c7:25:83:6a:67:8c:fc:ab:7a:8e:17:bc:7f:f4:c0:f5:1e:3e:
0f:25:ba:e6:ac:e3:cc:57:77:af:16:e4:59:d9:66:29:1f:06:
ae:94:f4:1b:2b:5f:db:88:02:c5:ee:0e:b6:97:86:15:25:2b:
44:f9:9d:37:7e:a6:76:bd:bc:7d:b5:06:6e:ba:09:40:9b:bc:
26:8b:18:cc:f4:42:85:af:b4:99:c9:d5:f3:a8:34:28:80:4d:
77:1d:f9:f3:e6:51:8f:56:61:1f:ba:68:84:c9:6b:ed:36:1e:
00:e5:7c:42:e8:81:90:82:ab:80:3f:97:75:c8:6d:a1:6a:e5:
38:e8:49:70:ab:c5:6f:2e:56:d2:c6:40:f1:10:b0:a7:0a:3e:
75:7b:1c:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9UdRMSHpJQEL99fgMWNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYjY1YTkwZWQzY2Y0YWUwNDUyNTU0ZWUzNGI5MmE4NDc2
ZGNmMTAwHhcNMjYwNzI4MjMwMDI5WhcNMjYwNzI5MjMwMDI5WjAzMTEwLwYDVQQD
Eyg1N2UzNjI3NDFiN2UwYTU4ZmFjZGYzNDg4ODA0ZDY3MDA5MjIxYWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Vakm+KwC/6HfdjnXx5bIGPyeSeJ
L9rrEEa7ae9Lp4Y9e/qplEAGTag5i0IIVB70LkTllUr7uzzjoCfxJRmmMKaAmFKn
aHqD6+vtl1zKpcuCcC/ok+v4bUww/ns0hY+sWoldtiaTjzz3l/LPzFyE01YhqDmM
jbbf/lCtGh5MFQUQp2PkQMlrNk50ohhNectFizGhU5cudS2oFiJKkP7Yii+XXePE
hCLrxgCryRkdI8zgneiNoqOIqye4/AbSoqPe8h8NVCpyv2ReA5ghXswjMBm5JkcK
Si3T4D7R75Y48zvbjmf0y3t29oCjl5O0IL4PA9s2iebSAj4jgAPJy0uUKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfjYnQbfgpY+s3zSIgE1nAJIhq2MB8GA1UdIwQY
MBaAFNy2WpDtPPSuBFJVTuNLkqhHbc8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEt
ODVhOTU1ZjIxNjNiLzEvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEtODVhOTU1ZjIxNjNi
LzEvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqlsbPSt4
S5Go4uYWM95Lk6NwBXFwmyz6111OTzFLGBbxp/HTZnjhgx+h4nyrGVLLx6snYxtQ
12EfmEyjlPYiXFE6OaNsYKYylmctG7ZVzf07RhUYR3vvIeKT6xU/7UgEPmMfLN0c
pRAZJjadxyWDameM/Kt6jhe8f/TA9R4+DyW65qzjzFd3rxbkWdlmKR8GrpT0Gytf
24gCxe4OtpeGFSUrRPmdN36mdr28fbUGbroJQJu8JosYzPRCha+0mcnV86g0KIBN
dx358+ZRj1ZhH7pohMlr7TYeAOV8QuiBkIKrgD+XdchtoWrlOOhJcKvFby5W0sZA
8RCwpwo+dXscBQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:21:49 2026 by rpki-client