
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
File: Lz6vTsdU9KDj2EyiU61AbunH3hU.mft (raw, json)
Hash identifier: wb0z5tzoqCM4LZXYG54b1Usvk6SxcxHBZFpycogF2gw=
Subject key identifier: 15:4D:4C:54:CE:6A:96:DD:AE:4F:1D:63:15:95:D9:7E:07:69:76:FB
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Certificate issuer: /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial: 019D99D0DD8EF6FA207AD5D569ADF3D4EB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
Manifest number: 1541
Signing time: Fri 17 Apr 2026 05:01:35 +0000
Manifest this update: Fri 17 Apr 2026 05:01:35 +0000
Manifest next update: Sat 18 Apr 2026 05:01:35 +0000
Files and hashes: 1: EGpVIrdRnG9CRa6NrIGgUaf4RK0.roa (hash: qlEpn4VlX/rteCsE8wb4JuutsTGuUOTJhd52p/j8504=)
2: Lz6vTsdU9KDj2EyiU61AbunH3hU.crl (hash: yxAx3fiGjGZ2R2X1GhaefwIgZW91nzK+EvHJ6Qk5F3k=)
3: vrV8KB95q2_fxuLiil-ALWVgbaA.roa (hash: v1waj9FATfrwz5lLbL9USP8KlqV0JVnfBS+y9CnLHbA=)
4: x0MELFSbqqJKiGquntsM_ntKjzI.roa (hash: AoRA2wOoPtKeWgJD9qk2RQiOPxBRat9/lgim3GntO3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:dd:8e:f6:fa:20:7a:d5:d5:69:ad:f3:d4:eb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Validity
Not Before: Apr 17 05:01:35 2026 GMT
Not After : Apr 18 05:01:35 2026 GMT
Subject: CN=154d4c54ce6a96ddae4f1d631595d97e076976fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:a1:78:d4:5b:ef:de:0d:ed:b3:97:b2:97:
e8:44:17:b1:e4:1d:95:b0:32:e0:83:e0:01:d6:fc:
99:13:72:b8:ed:12:16:7c:a9:b9:17:b8:44:6e:1a:
40:74:d4:a8:be:fd:7a:e0:62:17:72:e8:2a:88:f5:
c9:62:f9:75:36:11:e2:fe:09:33:b0:aa:b0:cc:16:
ed:27:fe:42:de:c9:f6:f3:31:f1:24:b3:52:57:fe:
ec:36:ec:cc:00:d7:27:6d:c2:e5:30:52:cd:5c:fd:
f0:9f:bf:fc:a7:fd:92:8a:d5:ba:bf:bf:70:37:29:
37:a0:14:e4:f2:fa:fc:62:c5:1f:d1:6a:42:39:f5:
b9:0b:60:0e:4f:ee:3f:92:67:38:d9:3a:f4:bf:62:
2b:19:f0:57:99:57:0b:69:97:26:14:01:be:96:1a:
c5:f1:24:08:ec:e0:52:04:6c:7e:81:42:07:d8:e6:
52:2a:bc:9a:9a:b3:f5:81:5e:d8:43:f8:af:f6:26:
4c:3b:4b:81:5a:46:31:da:de:d1:3b:b3:1b:3f:c4:
14:da:a3:4d:a4:b1:1a:34:21:40:cf:80:02:47:8d:
f6:2d:48:e4:3e:26:0f:24:17:6a:ec:62:4f:c7:2c:
60:8f:3e:53:5c:79:da:3c:e2:06:4b:6c:d0:67:5f:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4D:4C:54:CE:6A:96:DD:AE:4F:1D:63:15:95:D9:7E:07:69:76:FB
X509v3 Authority Key Identifier:
keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1f:be:09:c3:a0:57:75:9f:9e:bb:d1:a0:78:cd:d2:12:b1:
03:7d:5d:9f:ae:36:53:ad:47:96:f2:32:98:00:ad:ac:a1:c5:
57:77:67:0f:dc:47:d0:dd:cc:21:3d:34:28:9e:1a:ed:f9:71:
d2:47:e1:f6:3b:e8:20:3c:57:91:4f:3f:2f:be:b2:b7:ba:05:
92:97:83:ef:15:3f:8a:1e:16:f9:c4:0e:ee:12:5c:aa:2f:d7:
4c:a6:33:45:65:f9:ba:55:45:4c:b2:84:be:d2:93:a1:eb:53:
b0:90:65:41:04:c7:34:7a:9a:26:06:bf:52:21:d9:c7:4e:49:
25:59:4d:a7:77:5f:e1:d0:8a:be:19:78:6a:18:62:40:4b:3c:
2d:97:00:cd:13:3b:b3:ac:93:6a:cd:13:78:3f:ad:7a:02:bc:
6a:38:71:65:6d:fb:40:30:6e:43:28:77:77:b6:86:8d:c1:49:
58:02:68:fc:4c:0a:40:07:61:3d:57:69:73:fa:9b:3f:92:63:
39:32:c2:7f:56:f9:75:df:25:7d:fe:90:26:9c:b8:eb:69:51:
5d:f1:1a:d4:d0:09:ad:04:92:71:4e:30:1e:6b:fe:3a:28:e2:
d6:26:58:f7:06:e7:20:20:5b:4e:02:0e:aa:9e:ad:bc:fe:3d:
81:7d:e9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:27:06 2026 by rpki-client