Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: lH3WNKyLLSf7OfuHlIVfRK+PUP6+XwhHub5FmhU8CgE=
Subject key identifier: A9:30:08:6E:7B:66:CF:0D:6C:E5:79:5E:A5:6F:D3:24:83:5B:FD:3A
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 01A06BDDF3232554AF06342D57AD0807310C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 063F
Signing time: Fri 04 Sep 2026 10:01:42 +0000
Manifest this update: Fri 04 Sep 2026 10:01:42 +0000
Manifest next update: Sat 05 Sep 2026 10:01:42 +0000
Files and hashes: 1: IM21zWEfSOh921Z1zwkT3vvGFfs.roa (hash: W640/PCpAKPhrBYklv0d8kY3i3xSr0Wn6L53wsJDrnQ=)
2: b9vcmhhWmTdDD16HAHP6D8RbDkA.roa (hash: FBfH9P35YtWY9xE6pYzf6Mz1MG4bSL4q1phGJQRtJTw=)
3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: qgCgF8Uk/TCQ58Drk3QuBrNwqetuIexMuZ/odave9ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:dd:f3:23:25:54:af:06:34:2d:57:ad:08:07:31:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Sep 4 10:01:42 2026 GMT
Not After : Sep 5 10:01:42 2026 GMT
Subject: CN=a930086e7b66cf0d6ce5795ea56fd324835bfd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:97:dd:6d:39:bd:b3:de:5c:ca:a0:01:e4:
8c:73:cc:d2:d4:a6:04:53:28:f2:cb:76:f5:3f:fe:
98:71:1a:83:21:1c:39:aa:f3:c8:e8:25:15:20:fd:
4e:59:a7:18:c2:8b:24:fc:8c:97:73:8a:a2:3e:6e:
14:9a:f9:db:5c:93:10:71:ca:c7:6b:28:87:d4:99:
2d:d3:ab:49:8e:65:c0:3d:f3:56:67:cd:75:64:31:
38:40:de:03:0d:8b:16:dd:a2:ab:8e:dd:49:be:03:
c8:40:16:bc:1b:8f:e3:65:44:96:0e:ad:5f:e0:0a:
54:59:77:e6:af:05:e8:52:24:93:7c:cc:f8:59:21:
99:cc:49:1d:db:b6:3d:d9:77:31:00:86:25:b0:be:
c4:46:17:e9:81:fa:b0:df:46:20:09:21:11:4e:55:
46:26:b9:c4:01:60:10:97:0b:ac:25:cd:d1:99:97:
3f:47:ab:a0:70:9e:8c:c3:b1:b5:50:f2:0f:0a:2b:
aa:15:dd:2b:2e:05:71:69:29:f3:cd:6c:9f:ee:0d:
19:fb:32:65:f2:b0:97:7c:03:7f:97:cd:08:0d:22:
1b:a7:e9:e3:f3:fb:28:3d:01:de:0c:8b:5c:17:2a:
63:28:e5:ee:ff:a0:0f:4d:a4:55:b1:65:29:33:27:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:30:08:6E:7B:66:CF:0D:6C:E5:79:5E:A5:6F:D3:24:83:5B:FD:3A
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9d:1b:0a:64:75:d4:9f:18:44:95:6a:3d:42:cd:cd:e4:7f:
a9:b7:67:27:82:e2:03:91:c5:e6:60:a6:a6:5e:b2:bd:e3:aa:
36:ee:07:15:92:c9:d7:d9:6a:5c:55:b8:f1:ba:f4:8f:88:98:
77:c9:84:1c:2f:da:ec:4e:c3:05:fb:76:eb:84:ad:6f:a1:1b:
e2:93:f6:1d:da:31:2a:8b:30:da:29:29:3b:42:04:56:3e:d1:
30:9d:a2:d0:ef:e0:c6:6a:3c:57:b6:49:56:81:13:b3:0e:f8:
78:f9:a4:ee:fc:19:84:ba:fe:f7:e1:3d:fe:7b:b1:89:09:11:
40:09:41:c5:b1:4a:f0:ff:c3:c9:3d:b9:2d:6d:c5:b0:2f:13:
cf:82:cd:ba:81:93:5a:72:86:46:35:f0:60:31:fe:52:d5:1d:
65:60:00:1b:bb:34:4c:7d:83:0b:7b:e0:97:15:cc:51:e5:b2:
bb:e6:b5:e7:6a:79:bc:90:2c:47:38:1d:c3:fc:b8:33:8d:81:
46:f4:df:62:63:17:37:fa:46:b7:04:29:2f:55:ea:c1:78:57:
76:58:79:2b:d1:28:67:67:00:f0:74:e6:87:eb:cf:49:43:03:
03:18:fc:e4:a9:90:37:45:84:e6:62:f5:1a:0d:4a:3d:a6:60:
30:18:fe:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:20:12 2026 by rpki-client