Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: X5FWkbyhEtaK+ASyvDePcoVBOqHrbzqURoDGHhwuIJU=
Subject key identifier: F0:86:0E:46:4F:2A:62:96:49:A1:A0:A9:6E:A2:48:6E:E9:75:6E:63
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 01A1630E94D387D539A9391D8056F9F1455B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 06BF
Signing time: Thu 22 Oct 2026 10:01:02 +0000
Manifest this update: Thu 22 Oct 2026 10:01:02 +0000
Manifest next update: Fri 23 Oct 2026 10:01:02 +0000
Files and hashes: 1: IM21zWEfSOh921Z1zwkT3vvGFfs.roa (hash: W640/PCpAKPhrBYklv0d8kY3i3xSr0Wn6L53wsJDrnQ=)
2: b9vcmhhWmTdDD16HAHP6D8RbDkA.roa (hash: FBfH9P35YtWY9xE6pYzf6Mz1MG4bSL4q1phGJQRtJTw=)
3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: g9i7O07llbSUdV1xXNVvffmksdsx2zBq+If/ucOAra4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:0e:94:d3:87:d5:39:a9:39:1d:80:56:f9:f1:45:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Oct 22 10:01:02 2026 GMT
Not After : Oct 23 10:01:02 2026 GMT
Subject: CN=f0860e464f2a629649a1a0a96ea2486ee9756e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:ab:2e:d9:95:36:59:39:63:b8:6d:92:0c:
08:5f:12:67:d6:c5:a8:e5:21:9f:3d:16:9a:74:00:
c7:22:41:7d:2c:fc:16:f2:2e:e4:da:3c:9f:3b:d8:
63:bc:52:14:64:c0:00:e7:7e:56:22:87:61:f3:c1:
c8:47:6a:3e:ba:28:7d:c4:d2:f4:f1:50:65:0e:ac:
51:dd:16:1b:4c:a3:10:45:f3:b7:15:d5:d8:f8:7a:
cc:52:c3:d3:6d:db:1a:8b:06:b3:dc:57:82:02:6f:
4e:41:39:50:e5:3c:1c:57:53:3b:45:6f:55:03:0f:
a0:55:20:d6:9c:ae:4c:e4:00:48:7e:25:4a:6c:dd:
e2:04:07:8a:b3:a6:2d:71:b2:07:e8:78:d8:f1:2e:
1c:a4:f9:2d:63:8a:29:5f:a1:3e:f2:6d:1e:6e:8b:
a0:fd:9a:cb:80:bf:6a:53:63:f4:d7:f1:35:db:96:
35:6c:65:80:6b:39:b8:fa:ff:fd:b0:af:2f:92:85:
cc:61:8c:94:48:4b:0d:73:a2:86:f6:9f:36:db:95:
c5:98:ca:9a:94:08:1d:d5:a4:6d:f0:ab:3c:c3:2f:
43:60:19:75:60:b6:93:af:7a:e3:5d:4e:5c:ec:1e:
18:19:2b:54:5d:ae:0d:1c:31:cd:d8:08:87:6c:23:
65:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:86:0E:46:4F:2A:62:96:49:A1:A0:A9:6E:A2:48:6E:E9:75:6E:63
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:68:a4:21:16:44:d6:9d:82:33:ae:94:7b:e4:b5:6c:8a:a6:
fd:01:9b:bd:2f:b9:7c:1c:7a:1d:c9:01:88:21:ed:d3:50:d1:
f7:07:f3:7b:0f:d8:31:15:14:db:d5:5c:dd:c1:a3:95:a5:64:
88:0f:c7:02:3b:0e:db:36:97:af:8c:ef:82:1f:8d:4c:aa:99:
24:cb:2c:cf:75:93:97:2a:b8:4c:aa:22:46:b0:ee:e4:3c:8e:
e8:23:a4:c7:9e:4b:9b:6a:c1:b6:57:f4:2e:fe:11:d2:96:25:
bd:6c:ea:4b:ab:ae:0b:83:b1:52:47:d8:ab:e2:c6:c8:46:e9:
f5:0c:be:8f:07:f8:2d:4b:80:b0:03:79:c3:8e:ed:88:fd:33:
1c:b0:44:eb:19:ce:ba:80:cc:e8:60:39:26:3a:f6:df:04:60:
b3:e5:2e:3a:35:af:bf:b5:bf:a5:35:4e:75:23:13:86:40:24:
e5:fc:5f:4c:6c:54:7e:5f:fe:83:26:77:d9:3e:f9:61:ed:e2:
0a:08:94:0e:91:22:a6:08:e6:d8:7d:96:76:2f:e7:f6:04:94:
5e:45:c5:e7:7f:76:09:3e:0f:3d:0c:67:f6:d6:33:51:da:0e:
47:b1:9e:79:05:e5:e8:29:6e:49:e4:fd:51:61:34:90:97:67:
8a:14:80:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:00:39 2026 by rpki-client