Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: fzK1NmhYqlgHTk7V2uGbZ5j5WPWtevBgJZGfNa4Y5Jk=
Subject key identifier: 3D:EA:65:CD:2B:B8:66:F6:5E:A0:BD:C9:7D:0B:E5:B9:2B:3B:38:0F
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 019F11899B4F58F76F70353E1DB8D3B2AF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 0625
Signing time: Mon 29 Jun 2026 04:00:58 +0000
Manifest this update: Mon 29 Jun 2026 04:00:58 +0000
Manifest next update: Tue 30 Jun 2026 04:00:58 +0000
Files and hashes: 1: INyi55Cem-fKRbCyhWoBxset2V8.roa (hash: ewguotn20Zrkv6k2+CkZNOeCi50wOffr5aj3RIiSuA0=)
2: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: 29WYQWFN5RVQyxmQTPpRBTOh9rW5oeTQUAIuREygJlU=)
3: lot016U7U6JL43wtM60yljMjF4I.roa (hash: 18/d/s7/WmFdWb3qjzEB9yH+6YTufgLNjpNy8KhdOs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:89:9b:4f:58:f7:6f:70:35:3e:1d:b8:d3:b2:af:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Jun 29 04:00:58 2026 GMT
Not After : Jun 30 04:00:58 2026 GMT
Subject: CN=3dea65cd2bb866f65ea0bdc97d0be5b92b3b380f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:ad:b6:0c:56:0d:08:61:4d:8e:e2:be:43:
b9:27:fc:e4:83:9b:a3:d8:a4:b9:8a:35:98:e5:15:
d8:07:05:ce:2c:5a:dd:9e:dd:aa:b0:94:80:6f:f7:
d1:be:68:9e:06:2d:96:98:3d:32:83:ad:0a:9c:31:
a0:55:b4:2a:db:46:eb:8c:1a:02:03:a7:b7:81:96:
26:32:ba:58:30:33:a9:de:00:cd:27:d4:09:3b:01:
ea:9f:cc:94:3e:86:ab:30:2e:54:6d:b0:45:1e:5d:
e4:10:d5:92:04:38:52:60:f8:2c:b2:78:a6:c7:87:
fc:65:e7:d9:2f:e6:4c:28:2e:2b:24:50:bf:fa:be:
75:d7:22:cc:69:8d:9f:4e:50:d0:bb:0a:bc:32:0b:
33:a4:18:39:47:b2:fc:c5:f2:b0:f2:99:b0:a5:0d:
31:9e:d2:47:9b:8d:31:69:76:b5:ad:4e:7b:16:1b:
d0:64:bc:3d:b1:5b:18:36:d0:bf:f8:92:61:74:5a:
c5:83:f0:13:29:0a:80:7d:e4:64:21:80:9a:41:1e:
17:3f:78:a1:ca:26:00:11:90:30:32:86:e4:18:3e:
14:56:c8:da:4a:cb:6d:ee:cc:72:54:17:0b:91:7d:
12:6f:d4:eb:9b:3e:7a:75:49:c0:86:59:7f:6a:32:
34:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EA:65:CD:2B:B8:66:F6:5E:A0:BD:C9:7D:0B:E5:B9:2B:3B:38:0F
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:21:28:87:6b:97:2a:97:4f:23:41:91:82:80:49:2c:e3:49:
0c:9d:09:a9:e0:da:87:e9:7e:95:64:89:ba:45:ef:28:96:ea:
2d:98:88:2a:b8:ae:62:30:4f:b0:90:0b:2b:a8:07:c7:22:70:
74:35:b0:59:d2:1e:f6:28:49:0b:6c:02:82:f8:bd:13:32:e2:
5c:fa:98:d1:ac:c8:7b:31:54:ff:03:41:44:22:cc:4a:4c:b8:
1a:40:60:4b:fc:ff:4a:72:78:f6:07:c5:78:b5:d7:ff:b0:e0:
17:86:4b:a1:3c:dc:8c:69:68:1a:f2:cd:8e:11:9e:79:c4:36:
a4:09:48:25:8a:04:f1:36:6e:80:26:ac:97:a0:cb:52:6e:68:
79:4c:3e:7b:4f:02:e0:ef:bf:d4:a2:fc:43:5c:d3:d7:4b:cb:
53:c2:cb:8a:d4:a4:6c:27:e2:c6:9b:60:22:c3:99:7a:fa:fd:
64:4f:22:f6:b4:21:7f:10:90:25:df:1a:e8:60:7d:1f:2d:70:
19:bf:48:75:5c:7c:12:2a:30:c4:74:9a:a5:35:6b:70:e3:75:
58:0a:4f:a0:8a:84:a0:89:df:5a:bb:82:6f:33:dc:2f:78:75:
3e:83:4e:d9:d0:9f:74:e9:ad:69:9f:e8:f8:4d:53:a1:a1:a0:
cc:83:e1:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RiZtPWPdvcDU+HbjTsq9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OTliM2U3ODIzNzBkYzI4MTRmNTI1YzFkNmVjZTg0ZDhm
NzBmMzYwHhcNMjYwNjI5MDQwMDU4WhcNMjYwNjMwMDQwMDU4WjAzMTEwLwYDVQQD
EygzZGVhNjVjZDJiYjg2NmY2NWVhMGJkYzk3ZDBiZTViOTJiM2IzODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxImttgxWDQhhTY7ivkO5J/zkg5uj
2KS5ijWY5RXYBwXOLFrdnt2qsJSAb/fRvmieBi2WmD0yg60KnDGgVbQq20brjBoC
A6e3gZYmMrpYMDOp3gDNJ9QJOwHqn8yUPoarMC5UbbBFHl3kENWSBDhSYPgssnim
x4f8ZefZL+ZMKC4rJFC/+r511yLMaY2fTlDQuwq8MgszpBg5R7L8xfKw8pmwpQ0x
ntJHm40xaXa1rU57FhvQZLw9sVsYNtC/+JJhdFrFg/ATKQqAfeRkIYCaQR4XP3ih
yiYAEZAwMobkGD4UVsjaSstt7sxyVBcLkX0Sb9Trmz56dUnAhll/ajI0KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3qZc0ruGb2XqC9yX0L5bkrOzgPMB8GA1UdIwQY
MBaAFJWZs+eCNw3CgU9SXB1uzoTY9w82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80MGExMDItZWZjZC00ZmQyLTkzNzMt
ZDA2YWE1MThhYTZkLzEvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi80MGExMDItZWZjZC00ZmQyLTkzNzMtZDA2YWE1MThhYTZk
LzEvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSEoh2uX
KpdPI0GRgoBJLONJDJ0JqeDah+l+lWSJukXvKJbqLZiIKriuYjBPsJALK6gHxyJw
dDWwWdIe9ihJC2wCgvi9EzLiXPqY0azIezFU/wNBRCLMSky4GkBgS/z/SnJ49gfF
eLXX/7DgF4ZLoTzcjGloGvLNjhGeecQ2pAlIJYoE8TZugCasl6DLUm5oeUw+e08C
4O+/1KL8Q1zT10vLU8LLitSkbCfixptgIsOZevr9ZE8i9rQhfxCQJd8a6GB9Hy1w
Gb9IdVx8EiowxHSapTVrcON1WApPoIqEoInfWruCbzPcL3h1PoNO2dCfdOmtaZ/o
+E1ToaGgzIPhzQ==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:29:38 2026 by rpki-client