Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: 4ZggXliePY1BGUX+sgLKL9HERgk05EAfa1PJ8R8WD5Y=
Subject key identifier: 4E:05:27:2A:6E:8A:06:34:2D:58:CE:75:33:32:A7:20:28:54:60:38
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 01A002EFB2CF581FC65207DB2F667D507123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 06A2
Signing time: Sat 15 Aug 2026 01:00:58 +0000
Manifest this update: Sat 15 Aug 2026 01:00:58 +0000
Manifest next update: Sun 16 Aug 2026 01:00:58 +0000
Files and hashes: 1: INyi55Cem-fKRbCyhWoBxset2V8.roa (hash: ewguotn20Zrkv6k2+CkZNOeCi50wOffr5aj3RIiSuA0=)
2: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: QeKA5B0AlzcwMui+1VQ4WHJL3Ko0IQ2DuSyy5k12shM=)
3: lot016U7U6JL43wtM60yljMjF4I.roa (hash: 18/d/s7/WmFdWb3qjzEB9yH+6YTufgLNjpNy8KhdOs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:ef:b2:cf:58:1f:c6:52:07:db:2f:66:7d:50:71:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Aug 15 01:00:58 2026 GMT
Not After : Aug 16 01:00:58 2026 GMT
Subject: CN=4e05272a6e8a06342d58ce753332a72028546038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:d4:34:93:f9:28:81:4e:dd:e9:c5:ae:a1:
6e:1e:04:80:cb:47:c6:59:42:f3:ba:34:9f:3d:d3:
d2:40:cb:e5:d9:2a:c0:da:bb:bb:3e:6b:c4:8d:4e:
ac:07:03:af:50:7d:b5:28:24:e8:59:2e:7c:64:8c:
cb:54:fa:3e:36:17:9a:ac:fe:fe:cd:5c:52:e2:7a:
9e:06:f1:a4:ba:c9:1e:cb:8c:5f:2e:a2:55:ae:8a:
80:bf:63:bc:ef:d5:ff:17:8c:31:33:22:7a:df:1d:
fe:cd:9f:be:8c:96:c4:94:55:8f:28:fb:1a:58:34:
e1:06:9c:18:b9:20:d5:fc:80:34:07:7b:5c:f3:f2:
9a:f9:8f:dc:a0:92:38:ef:02:b3:09:21:73:d7:8c:
c7:57:3f:e4:ac:41:cd:2a:31:5e:07:67:ef:97:1a:
5f:e3:99:f4:02:96:10:a8:64:a2:43:77:be:09:32:
cd:40:cb:6d:ea:78:92:66:c5:ed:69:76:ac:dd:fa:
81:1a:ce:12:83:89:e8:1d:22:4f:80:7e:40:3a:e4:
a7:99:60:2c:4e:9d:bd:c0:dd:4c:20:5d:2c:ed:c1:
8a:02:1e:70:3c:69:91:85:09:49:15:6e:42:e6:5a:
74:b1:f5:a0:79:98:b2:1c:2c:97:f1:02:b2:5b:d6:
15:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:05:27:2A:6E:8A:06:34:2D:58:CE:75:33:32:A7:20:28:54:60:38
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2f:2d:60:55:ec:89:3e:14:09:f9:bb:22:74:a1:ea:e4:28:
00:c3:61:5b:8c:52:7c:a7:c6:fe:ff:6c:00:4e:ce:1d:2a:ba:
dd:6a:ad:d2:74:3f:58:e3:d5:37:7c:9e:59:e4:5c:35:5b:d4:
96:41:c5:85:8e:c6:8e:64:86:f3:e3:9b:3e:12:51:a7:28:c3:
95:0e:fb:82:9b:56:ff:49:77:f9:2f:d0:c9:ca:5f:43:40:d6:
72:45:3f:ad:f1:82:88:06:0d:c1:92:aa:75:23:9a:de:00:7c:
ca:38:da:24:bd:bb:d6:99:a3:4b:6c:b2:e2:cd:5b:f2:8c:37:
f2:09:52:e5:8c:06:e4:db:58:2d:00:cc:e5:d2:66:6b:ec:c1:
4e:4c:60:2f:a1:9a:c3:9f:68:d3:32:e2:d7:56:23:17:84:22:
3b:ec:2c:06:0d:1e:95:3d:11:c0:ca:7f:8f:6c:9c:f9:90:35:
d6:c4:1e:60:d2:77:d6:60:cb:62:fe:a6:2f:59:b0:5f:e2:6d:
e6:1a:40:41:7f:03:24:4b:85:e9:da:99:97:e7:2f:ac:2f:87:
a0:47:7d:e3:ee:19:12:7c:45:fe:c7:31:7e:7c:01:b0:7e:bc:
ed:76:8b:d3:1d:81:2f:ca:ff:cd:3a:ec:95:1a:9a:b0:6d:78:
b4:f0:82:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:34:48 2026 by rpki-client