Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: sJJ+W6zWeRxSF+d1NF1vF9ew3TE9TqeSLPCrv5Rw2Fw=
Subject key identifier: 2F:80:2C:CF:31:51:58:C8:D3:2D:6A:D0:72:D7:D8:6F:B9:EC:B0:24
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 019E29CBF6FF36C2D6CED519EA1BDBB6F34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 05AD
Signing time: Fri 15 May 2026 04:01:33 +0000
Manifest this update: Fri 15 May 2026 04:01:33 +0000
Manifest next update: Sat 16 May 2026 04:01:33 +0000
Files and hashes: 1: INyi55Cem-fKRbCyhWoBxset2V8.roa (hash: ewguotn20Zrkv6k2+CkZNOeCi50wOffr5aj3RIiSuA0=)
2: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: xAk3R/bOnF000tnUuJS/NSkEi9l50/nL5r5nSzSkEKw=)
3: lot016U7U6JL43wtM60yljMjF4I.roa (hash: 18/d/s7/WmFdWb3qjzEB9yH+6YTufgLNjpNy8KhdOs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cb:f6:ff:36:c2:d6:ce:d5:19:ea:1b:db:b6:f3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: May 15 04:01:33 2026 GMT
Not After : May 16 04:01:33 2026 GMT
Subject: CN=2f802ccf315158c8d32d6ad072d7d86fb9ecb024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:e0:2b:04:38:49:e1:3d:e5:64:4d:01:65:
d0:4b:cf:5a:cc:8a:94:08:c7:2d:0c:08:4e:ab:3e:
42:f6:74:32:5b:09:4f:a6:eb:ba:34:86:52:86:71:
82:ab:2b:89:ac:3d:54:33:df:0a:22:2e:77:1b:b6:
b8:36:a0:1a:7c:61:37:13:98:f0:92:6e:51:1f:49:
1d:4e:ba:0e:fe:01:d5:ac:7b:ce:e7:7b:f1:07:cc:
c4:8e:9d:45:70:a5:60:71:af:ef:d8:4e:fe:93:7d:
52:4e:cb:7b:b3:b5:93:c6:40:4f:51:7c:6f:37:17:
d5:17:f5:bd:05:cc:01:c3:ed:d3:32:b9:1a:62:50:
a9:a1:db:29:78:65:90:59:f1:bf:89:af:31:95:e5:
71:b3:16:22:54:6b:35:b9:3f:1f:a7:0d:99:48:66:
dd:c2:18:18:4f:8e:36:92:95:79:46:32:06:89:e0:
54:76:a8:cb:2d:c5:c7:8d:47:46:7a:6c:30:8d:e0:
cf:38:d2:5f:36:9e:bf:cd:d3:da:e3:4c:ac:65:fe:
21:c9:29:d5:c2:9a:83:54:f8:77:f4:ff:af:a5:16:
86:6d:b9:d4:35:3a:ae:bd:43:ae:5e:d2:fb:12:df:
51:0f:0b:ad:5f:60:06:ed:05:89:11:b5:87:b3:83:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:80:2C:CF:31:51:58:C8:D3:2D:6A:D0:72:D7:D8:6F:B9:EC:B0:24
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:21:15:a6:86:4b:bb:97:6f:3e:35:14:75:be:71:5d:d0:d3:
ff:75:c6:39:5f:40:ea:8c:a4:3e:de:fd:4b:0c:a8:54:dc:81:
12:0c:16:4b:39:c8:2a:f6:69:43:f5:0e:a7:93:cc:b0:bc:4e:
67:f7:44:fc:a8:eb:c0:e3:de:bd:2d:49:80:7d:ab:fc:0c:05:
77:43:27:f6:6a:cb:a5:82:d2:12:4c:45:36:c9:78:24:cd:13:
d4:4f:3b:b5:7b:00:b7:da:84:bd:d2:a8:ba:e0:45:de:6e:4e:
57:3e:cb:4c:55:80:a7:a4:a2:33:06:98:f5:f0:0b:88:5c:e6:
a1:5e:eb:ba:c1:39:de:b6:9a:1d:3d:3c:d7:89:bd:7a:2d:12:
b2:3c:d0:e8:17:c8:c0:5b:8d:3e:bc:a0:7a:83:83:54:44:5d:
2a:6e:d0:56:52:1c:42:48:95:85:ce:2f:f3:1f:f5:36:99:dd:
20:d0:a0:10:2c:b5:9b:57:58:37:65:94:d9:3f:20:0c:8e:d4:
a7:33:62:c3:25:cd:69:48:0a:27:28:8f:b5:55:1b:21:31:c9:
4b:2c:53:60:3a:c0:20:cf:e1:75:27:18:b3:ae:4e:86:67:0a:
fd:e5:5c:e5:92:38:80:66:ff:fc:e0:56:63:d1:a4:22:78:32:
01:3b:65:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:59:37 2026 by rpki-client