Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: l9qX3Amu8kibJJisZLPlFybvfNIAyUFNnTkQG0BMQAg=
Subject key identifier: 83:3E:7F:74:25:89:B2:71:9D:85:27:EA:92:7A:B9:20:DC:70:2B:13
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 019D3865EA2706FEB4779F796670AB1C5ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 0530
Signing time: Sun 29 Mar 2026 07:01:36 +0000
Manifest this update: Sun 29 Mar 2026 07:01:36 +0000
Manifest next update: Mon 30 Mar 2026 07:01:36 +0000
Files and hashes: 1: INyi55Cem-fKRbCyhWoBxset2V8.roa (hash: ewguotn20Zrkv6k2+CkZNOeCi50wOffr5aj3RIiSuA0=)
2: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: Kt8IREtNfFv4Tc8jLM2kdj4EPzN0iALB1hJjWtzP7iE=)
3: lot016U7U6JL43wtM60yljMjF4I.roa (hash: 18/d/s7/WmFdWb3qjzEB9yH+6YTufgLNjpNy8KhdOs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ea:27:06:fe:b4:77:9f:79:66:70:ab:1c:5e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Mar 29 07:01:36 2026 GMT
Not After : Mar 30 07:01:36 2026 GMT
Subject: CN=833e7f742589b2719d8527ea927ab920dc702b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:0a:29:04:64:c9:a1:6e:df:74:04:e6:22:
2e:3e:ff:a2:d1:00:6d:e3:8a:a2:00:80:a0:37:16:
d5:0b:6c:4d:d6:a3:fc:6e:f8:92:71:ef:11:a8:53:
c3:d4:ef:9b:a6:43:bc:23:69:34:21:9b:c7:1d:30:
fc:d8:4f:69:61:0e:a4:53:9e:0a:e4:59:0e:90:79:
46:9a:51:f0:88:b1:1b:ee:04:ed:82:48:f0:65:9a:
47:2c:93:42:86:ed:43:1a:a4:1f:fd:09:4d:36:23:
8e:ca:44:6e:61:f6:0c:c3:78:62:aa:af:96:c7:34:
ce:51:ed:a5:01:ea:7c:8b:45:5b:ea:26:ff:ee:06:
a8:13:43:d9:fb:a4:82:11:a9:d4:39:d8:a8:b3:ef:
74:c2:ae:6e:c2:84:d1:ab:6a:23:76:6f:0f:81:e7:
a7:d1:ce:35:07:71:a8:cc:65:d3:0a:37:6a:84:d3:
a6:6b:a6:a0:4e:01:f1:ac:e3:b8:e2:72:ec:99:bc:
88:2f:23:30:b7:b8:8d:3e:dc:19:b3:94:80:bf:45:
ab:e4:c6:2e:bc:16:f0:f7:ad:2d:b4:00:97:cc:f6:
d8:b6:a4:92:7b:f4:19:01:b8:6e:7b:68:8f:86:09:
0f:70:ec:09:ab:d5:7b:c0:f4:ac:e3:84:6d:77:e1:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3E:7F:74:25:89:B2:71:9D:85:27:EA:92:7A:B9:20:DC:70:2B:13
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3d:1d:a6:de:84:a2:3f:07:5a:ce:f1:8a:8d:67:b9:6b:05:
a4:0c:2d:1a:6c:20:3f:27:a9:e2:b8:c8:b7:29:28:1c:37:72:
a1:d9:67:ee:5d:03:e5:1e:21:36:14:d3:8a:7a:c5:85:08:97:
60:cf:ed:33:7c:49:39:0c:c9:a7:56:1c:0d:8e:4e:ab:52:27:
4f:89:74:49:b4:05:76:86:41:a6:71:0d:ff:6c:38:74:dd:e5:
23:7d:3f:a3:80:b3:8a:7c:cf:7c:e6:97:36:33:92:ed:67:bc:
c8:83:b1:fc:a1:37:b8:17:3a:bb:d5:83:54:a6:e0:9e:cc:0e:
3b:d5:77:62:29:8a:10:22:87:41:8f:19:88:7e:f7:66:4c:1a:
fe:74:10:a6:b2:33:bd:b9:4e:c0:63:ac:69:58:e0:5e:6d:e1:
ea:e3:ca:55:bf:d3:e6:6d:bd:c2:ef:53:f8:43:b3:d4:54:1e:
b7:33:45:3e:71:c7:66:7e:82:5c:ea:84:86:bc:a3:06:71:85:
bc:d8:91:47:4c:1c:3a:03:17:ce:53:f4:94:2a:42:27:7b:66:
42:3d:5b:1c:1a:19:04:26:87:30:fb:76:4b:62:1b:34:35:6f:
86:d3:e3:aa:9e:3a:01:82:97:51:76:2a:6d:17:d5:7a:dc:57:
a5:a2:bc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:14 2026 by rpki-client