Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: 0pWMVG9abXbPA8pla2rcZ0itHDs3rjlW3RUkcmtzuQk=
Subject key identifier: 5B:5D:9F:89:3D:02:00:4C:38:F3:89:C3:01:A1:F6:7F:71:20:F9:39
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 01A156D435328184250E683805133CD5B621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 0752
Signing time: Tue 20 Oct 2026 01:01:50 +0000
Manifest this update: Tue 20 Oct 2026 01:01:50 +0000
Manifest next update: Wed 21 Oct 2026 01:01:50 +0000
Files and hashes: 1: INyi55Cem-fKRbCyhWoBxset2V8.roa (hash: ewguotn20Zrkv6k2+CkZNOeCi50wOffr5aj3RIiSuA0=)
2: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: PuZtInXvlMnsBNS2p1/p/LFJy9Q0/Ls8ovBXCAfgdr4=)
3: lot016U7U6JL43wtM60yljMjF4I.roa (hash: 18/d/s7/WmFdWb3qjzEB9yH+6YTufgLNjpNy8KhdOs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 01:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:d4:35:32:81:84:25:0e:68:38:05:13:3c:d5:b6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Oct 20 01:01:50 2026 GMT
Not After : Oct 21 01:01:50 2026 GMT
Subject: CN=5b5d9f893d02004c38f389c301a1f67f7120f939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:3b:18:dd:b6:c1:eb:69:c0:09:0f:9b:48:
45:28:12:01:c0:22:fe:01:9a:4a:db:9e:3c:cb:3d:
43:85:43:89:90:fe:4a:2c:b6:a5:23:51:a1:ec:4f:
60:58:c0:f7:c2:8b:96:b4:84:c7:74:1a:4f:3f:7d:
00:8c:8b:53:1c:24:18:3a:bf:72:45:04:25:1c:21:
f2:cd:32:36:8d:f5:c4:56:66:c1:ab:fb:9a:56:fb:
44:76:b9:cd:de:0e:37:1c:2d:6d:5d:aa:f9:27:8b:
45:93:cd:01:3a:26:ee:e9:5b:74:34:ed:2a:b9:a0:
27:f1:24:f4:a8:22:c2:b7:5a:34:f5:f5:83:60:7d:
42:77:c9:0a:3b:dd:e4:52:db:80:26:5d:f7:3a:41:
c6:e5:8e:e3:d3:46:67:a5:1d:8e:a3:f5:2c:a0:99:
57:f1:bc:b2:14:7b:10:a2:b8:a4:6b:83:99:7f:e2:
a8:b8:58:68:b9:a8:67:66:81:98:d7:e1:ca:bc:57:
8f:65:23:a0:04:60:fa:cd:4d:94:c4:e6:a4:5d:f2:
b1:88:29:95:b3:a4:9a:a5:7f:01:d0:68:8c:1c:a7:
e1:84:52:2f:a2:8f:d5:1d:bd:1b:9f:32:f6:7f:af:
92:0d:d0:d0:21:8b:6e:48:cc:bc:f7:7b:c8:ca:bd:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5D:9F:89:3D:02:00:4C:38:F3:89:C3:01:A1:F6:7F:71:20:F9:39
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:01:e8:81:f0:9e:62:d5:22:7d:52:f6:45:26:4a:be:d2:71:
57:ac:70:d1:3c:17:91:48:53:ec:04:be:16:ae:0b:ca:4b:13:
52:89:84:4c:a7:b8:8c:56:9a:fc:9c:4d:78:1f:7f:76:c5:6a:
17:55:37:ee:01:44:0a:8f:03:dc:b8:73:6c:91:f0:8a:a0:bc:
da:54:bb:26:25:30:88:aa:31:e8:43:ca:3b:70:05:6a:64:4d:
ac:0b:14:1c:fd:b5:20:ea:55:ca:2c:50:f8:00:08:bb:96:46:
b2:ae:20:c7:5e:e8:75:67:3b:57:f3:ce:a1:bb:5c:a5:27:cb:
ce:d3:5f:62:97:14:4b:6f:7d:9e:ed:41:69:4a:21:e2:73:3b:
22:91:a8:62:f6:6b:87:1d:e9:29:8e:d7:89:85:cd:03:4c:9a:
87:e8:69:77:a0:21:d6:b4:77:4a:49:8c:39:bc:01:3a:f9:7a:
61:9a:fa:dc:69:14:67:a3:ad:12:4f:ca:a2:ee:a6:dd:65:d2:
74:83:c6:85:f0:84:6c:84:57:c1:65:9f:69:6f:7b:93:05:ac:
0c:79:73:3c:28:14:c7:dc:5b:85:6e:b7:b9:7c:5d:45:47:78:
52:bb:3d:d8:13:e5:9f:21:8d:05:92:3e:c7:ca:5e:51:9d:57:
35:d8:5a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:36:29 2026 by rpki-client