Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: ez647wrxF6FOPIrHElovw9HP4HD7cShWcq+IP5Hj040=
Subject key identifier: 17:B2:E8:51:A8:FC:65:A1:B4:77:EE:2B:92:19:DC:48:F0:F1:66:2B
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 01A17093573BB08515892F2436C98187E0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 06C6
Signing time: Sun 25 Oct 2026 01:01:06 +0000
Manifest this update: Sun 25 Oct 2026 01:01:06 +0000
Manifest next update: Mon 26 Oct 2026 01:01:06 +0000
Files and hashes: 1: IM21zWEfSOh921Z1zwkT3vvGFfs.roa (hash: W640/PCpAKPhrBYklv0d8kY3i3xSr0Wn6L53wsJDrnQ=)
2: b9vcmhhWmTdDD16HAHP6D8RbDkA.roa (hash: FBfH9P35YtWY9xE6pYzf6Mz1MG4bSL4q1phGJQRtJTw=)
3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: nEX3qddZXKywHhdrn1fDglM/0ZUwF//HErhFvKsPVBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:93:57:3b:b0:85:15:89:2f:24:36:c9:81:87:e0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Oct 25 01:01:06 2026 GMT
Not After : Oct 26 01:01:06 2026 GMT
Subject: CN=17b2e851a8fc65a1b477ee2b9219dc48f0f1662b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:35:a8:eb:8d:8c:a3:0b:28:19:c0:46:8e:
6b:91:2d:f0:de:12:90:56:5c:59:f7:f4:2e:e9:dc:
4f:96:eb:f3:9c:22:7c:aa:29:15:93:ed:e1:d6:f5:
68:32:32:47:2e:45:da:68:cb:32:cb:2f:4e:f9:ce:
75:ab:18:46:e6:22:7c:6b:a6:09:80:1a:bf:03:2e:
e9:1f:9e:a3:a2:8a:67:a3:3c:71:53:7d:89:2b:85:
8f:7b:f2:8d:e7:ff:75:6b:d0:24:43:3d:10:68:91:
96:b0:e5:08:58:05:ff:e8:e3:cd:41:09:1f:13:22:
d7:59:a7:f5:57:b1:10:e6:f5:64:4b:c1:7c:08:4e:
01:48:15:de:e2:15:e8:0e:aa:da:a5:64:2e:2c:47:
ab:c7:24:be:75:95:a4:6b:c2:c8:89:5f:3b:d4:1d:
e8:fb:a6:57:9d:1f:4c:8a:86:eb:f8:af:a6:62:0f:
88:10:22:0b:36:a9:a4:cb:43:95:19:de:0d:11:89:
15:15:f2:21:c9:24:73:61:6a:f5:5e:38:da:a4:da:
f2:e3:0b:ed:24:cd:1c:2c:d9:d3:d4:bf:08:9b:ca:
fd:41:e1:70:7c:a4:a1:e8:d8:19:47:e5:9b:59:67:
9c:b5:a1:41:a7:8d:0f:9b:00:2a:27:dd:8d:45:b7:
3f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B2:E8:51:A8:FC:65:A1:B4:77:EE:2B:92:19:DC:48:F0:F1:66:2B
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:03:07:34:70:ee:52:5e:2e:2f:14:99:a2:08:75:64:4d:bc:
25:5d:e4:8b:f4:9d:69:76:0b:fe:3e:09:24:14:f2:21:46:f8:
b0:28:be:41:db:04:5f:38:83:77:81:15:d2:97:dc:c5:1a:bb:
35:e3:ef:b4:08:4b:6f:9d:28:3b:3e:6f:71:f0:1e:51:f7:ee:
f5:3a:9a:91:9a:74:65:81:ce:92:71:7f:05:14:ac:45:6e:68:
c2:45:a5:d8:0b:44:f6:5d:a0:95:0d:ab:7e:e8:cf:e2:82:96:
c0:bb:74:20:1c:43:22:12:a4:c8:ef:89:0a:0a:4b:5f:de:2f:
64:ea:87:f0:8f:47:84:e7:82:0c:20:31:dd:60:a6:06:b6:9f:
bd:b0:46:7b:46:9f:85:9a:2d:d3:fe:71:57:91:1e:8c:05:b0:
13:af:f4:f0:04:6d:a0:5c:c2:66:bf:81:26:84:39:89:43:ea:
20:e8:08:58:8d:c6:7f:2a:f9:2a:de:08:3e:92:10:eb:60:bd:
f9:27:14:66:5f:5a:77:9c:35:c9:80:ee:d8:b1:42:af:8c:19:
11:0a:ee:ae:20:65:17:a7:d0:1b:b7:2b:0e:e0:3f:b7:9f:a5:
cd:86:e8:bc:06:cc:52:4b:66:f6:01:f3:fb:a3:67:c0:86:41:
aa:12:1a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:07:08 2026 by rpki-client