Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
File: lzDCc6-etVZkMIjkO-86ahgch8I.mft (raw, json)
Hash identifier: ytxGUBrlRUTtTYrg/k0e+d9tU3sBRym+5cuEiKmRZS4=
Subject key identifier: 34:81:55:A7:12:24:05:A4:9B:F5:DD:41:33:03:59:75:F6:72:F6:BC
Authority key identifier: 97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
Certificate issuer: /CN=9730c273af9eb556643088e43bef3a6a181c87c2
Certificate serial: 019DDC5543B3EEC2C93873154FFE1124D181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
Manifest number: D6
Signing time: Thu 30 Apr 2026 03:01:08 +0000
Manifest this update: Thu 30 Apr 2026 03:01:08 +0000
Manifest next update: Fri 01 May 2026 03:01:08 +0000
Files and hashes: 1: LftAIu9k2wnzZP9QfqBNpPsB7GA.asa (hash: oB3unSja7fyioWETroS2ws+p/jX5s1fLimygzH+96YE=)
2: lzDCc6-etVZkMIjkO-86ahgch8I.crl (hash: DNf61YK20Ta3tG4ka+NYU8klmnhwA80PFaJcrYhBt8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:55:43:b3:ee:c2:c9:38:73:15:4f:fe:11:24:d1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9730c273af9eb556643088e43bef3a6a181c87c2
Validity
Not Before: Apr 30 03:01:08 2026 GMT
Not After : May 1 03:01:08 2026 GMT
Subject: CN=348155a7122405a49bf5dd4133035975f672f6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:a1:a0:95:f3:3d:a6:f2:54:b2:d9:ff:ba:
3a:22:01:4b:cd:da:7f:28:18:ed:ce:9e:6c:13:53:
54:af:e5:e4:f7:c2:4f:38:bb:16:0e:a4:4d:98:18:
1e:58:33:7a:0e:17:e8:29:a4:a7:08:c4:7a:bd:9f:
44:c6:d9:05:61:87:ac:be:c8:9e:bf:92:eb:ff:2b:
98:f2:18:bd:fa:fe:fe:42:61:fd:24:d2:16:47:6c:
2b:cc:06:fa:77:2b:a7:fa:33:da:51:6e:b2:d8:b9:
bf:c1:f9:85:5f:02:d9:51:15:ce:2c:33:a1:f9:74:
a4:0c:dc:d1:42:f7:a8:db:28:58:04:0f:3f:f4:9d:
52:f5:d1:ed:52:4e:a5:b7:53:42:6e:13:43:22:c4:
25:68:a3:79:17:9e:56:02:e4:4f:00:34:9e:1c:ad:
12:16:40:5a:a0:44:0b:19:22:23:f6:ef:d3:65:66:
06:2a:3f:15:09:ad:10:1b:81:7b:a9:4c:63:3a:b2:
19:33:7b:a0:6f:06:cf:91:2e:12:b8:73:94:ff:83:
4f:2b:30:ad:3d:9f:b7:5e:31:66:42:13:8e:38:5b:
5d:3f:88:a7:e5:e8:ab:5d:2f:24:24:43:83:40:e4:
1a:0c:b0:2c:98:d2:e3:b4:e0:86:10:9d:f3:37:ad:
f2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:81:55:A7:12:24:05:A4:9B:F5:DD:41:33:03:59:75:F6:72:F6:BC
X509v3 Authority Key Identifier:
keyid:97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e7:c4:64:ac:a3:8d:37:56:a9:23:6d:39:bf:3f:e4:86:10:
a3:ca:a7:ca:ab:d0:7b:b0:02:a7:7d:8a:0a:73:ff:5d:02:e9:
09:45:c0:a0:48:43:ac:a4:58:56:d6:08:9c:aa:ab:05:b7:93:
26:bd:78:fe:fb:6d:dd:fa:04:4e:eb:f7:f9:42:53:99:9c:b4:
12:13:54:66:33:87:7b:ae:d5:50:df:66:48:a1:e2:58:68:ea:
7c:c2:d5:eb:fe:58:9b:57:0e:0f:6b:a9:96:ac:ab:dd:1a:91:
ef:b6:cc:4e:33:50:85:dc:68:4e:b9:37:5b:f5:69:42:8c:5e:
be:41:4f:1a:49:90:66:26:5c:6d:4a:a2:63:00:03:05:bf:ad:
7b:f6:3c:7e:0f:ac:d9:2b:9c:d9:05:36:50:fb:5f:51:19:c8:
c9:68:c1:65:70:8b:2e:f0:f5:4f:f4:86:15:28:3d:2a:c6:41:
43:02:9b:2c:35:ed:39:86:f4:ec:c2:58:9b:43:ed:18:20:54:
6c:32:c4:59:db:ed:37:c8:52:46:de:5f:67:d8:40:45:d8:74:
79:d2:f2:71:81:1b:f3:46:82:52:4a:d2:30:4e:76:72:d3:a2:
62:de:af:c2:57:92:e9:e5:0a:73:2f:77:08:e3:81:9c:bb:6f:
57:94:b1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:48:49 2026 by rpki-client