Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
File: 3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json)
Hash identifier: 2j/i2XzzXe68I+o/AfIXeI7fEqscMJdM1jAQOkjFEmo=
Subject key identifier: F9:9A:E0:7E:95:03:8F:A4:87:61:9B:55:27:ED:F3:4E:C9:CF:52:CF
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial: 01A1A111FC51A1C674EB442CCA91C40DE95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
Manifest number: 1AEC
Signing time: Tue 03 Nov 2026 11:01:12 +0000
Manifest this update: Tue 03 Nov 2026 11:01:12 +0000
Manifest next update: Wed 04 Nov 2026 11:01:12 +0000
Files and hashes: 1: 2W3yWm1HMzPskIDqOBKTk5NLDnk.roa (hash: zkzysD/L4UIm9OcLl6P6Mv4weJO+FXhHhd0t2XLROjI=)
2: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: /WCINN8FyD1OCqEhKg2H7OjDZb3ARPuH5pBn1pqvf+U=)
3: K3l-f-R4fzp0JNI40Ow_kAwQElE.roa (hash: lzT7cfBjG064YjxJ7JvC+eelDCQdNhykEA7ZwxG3cvA=)
4: PKWl5L-Kf_6-uLjkK3IrLmDHIJ8.roa (hash: a8KnYbin0YfzPy81a2Ft5OJRitrpc3uTgAStWm8odkA=)
5: WVGS-uOqCUSz2p_N5CL2Cz4z-K0.roa (hash: IB5UKLk0ZZT7DbiIeOg9ZlXwRRXDT147MF0fykJ8TKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a1:11:fc:51:a1:c6:74:eb:44:2c:ca:91:c4:0d:e9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Validity
Not Before: Nov 3 11:01:12 2026 GMT
Not After : Nov 4 11:01:12 2026 GMT
Subject: CN=f99ae07e95038fa487619b5527edf34ec9cf52cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ea:c6:11:0d:cd:0d:a3:8d:bf:30:03:8b:ce:
36:78:6c:ee:aa:b4:e6:c9:d5:10:88:ec:c3:4b:d3:
66:d0:e0:67:c5:11:95:fa:37:df:65:9b:5b:f2:12:
d7:f0:75:3a:de:18:2a:a5:06:66:45:40:f1:f7:3e:
44:f4:48:32:1b:27:32:27:37:d3:5a:64:15:c4:97:
93:0a:8d:1e:c0:1e:c5:b8:65:ef:22:f8:b6:a8:a5:
3a:1a:4d:0f:ba:da:76:c9:d1:3d:f2:a6:54:ae:91:
81:5a:91:52:52:04:9f:42:bd:26:51:ad:41:e5:17:
d8:34:2e:f0:e9:57:4c:92:c9:6c:35:1f:7e:bf:b8:
f1:7c:be:58:61:ad:95:b0:ad:e4:e3:58:76:bd:63:
9c:e4:4c:74:62:bc:9d:86:88:41:bb:70:60:aa:ed:
7a:db:66:f4:d6:02:a9:24:6d:28:30:ec:b2:c1:33:
93:3f:5d:84:22:bf:7d:bd:d7:a6:cf:61:be:67:36:
c8:e4:e4:5b:7a:fb:bd:a8:90:b4:6a:f2:d7:11:26:
f0:57:7c:c6:8d:ad:72:db:48:df:48:ec:2c:36:16:
20:34:a3:e3:c9:43:6c:16:9c:63:a7:ac:41:ef:96:
56:6d:7b:12:cc:f6:2c:05:90:b9:03:0a:17:59:e7:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9A:E0:7E:95:03:8F:A4:87:61:9B:55:27:ED:F3:4E:C9:CF:52:CF
X509v3 Authority Key Identifier:
keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:07:c4:83:7b:7c:16:e4:fc:17:a5:78:e2:38:87:35:0f:e1:
98:04:cb:67:34:6a:b5:aa:a4:12:64:7b:bb:f4:48:84:0f:89:
ee:96:70:3b:ff:e2:ca:77:b9:30:8b:52:00:0d:44:6f:e2:57:
0c:13:ab:04:e1:70:58:a2:ea:f3:7d:57:6a:53:64:f8:bb:74:
15:46:ea:40:24:c4:12:b3:da:8e:7f:4d:19:b6:9d:ca:e3:be:
de:28:2f:97:7a:01:65:86:e6:a0:aa:85:38:4c:03:be:e6:bc:
5c:97:18:c1:c4:c4:5d:8d:3f:4a:aa:7a:dc:62:08:75:84:2a:
fa:67:1d:a1:20:f9:8b:de:c7:a2:e0:55:dc:a4:ea:d2:9d:ae:
d5:e4:8c:9d:0c:06:8a:cd:9d:94:76:b2:65:61:0d:1e:21:d6:
43:1d:42:57:89:dd:aa:db:64:0f:df:83:18:31:4e:ec:da:7d:
b4:ad:0b:00:32:e7:b2:e5:3d:09:52:79:6c:1f:21:e2:e4:df:
21:e3:f5:19:14:5d:a0:fc:a9:a9:69:c8:da:b0:e0:35:ac:2c:
41:ef:b7:2b:73:30:29:4e:09:bb:a2:32:1e:6f:13:bb:74:c3:
e0:2b:1b:fa:3c:76:d3:c4:c0:80:e5:a0:5e:a6:18:c6:35:76:
45:e7:c4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 20:16:12 2026 by rpki-client