Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
File: lzDCc6-etVZkMIjkO-86ahgch8I.mft (raw, json)
Hash identifier: n54MEBLHEGQi6uIANJRGacyIaWuDKhQ0gmZADJtdfBk=
Subject key identifier: 63:9B:A6:DA:01:8F:80:7D:18:A7:14:53:C3:40:C8:84:7C:E5:3A:10
Authority key identifier: 97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
Certificate issuer: /CN=9730c273af9eb556643088e43bef3a6a181c87c2
Certificate serial: 019CF49710AB5255FD04A0292EF225A90E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
Manifest number: 5E
Signing time: Mon 16 Mar 2026 03:01:06 +0000
Manifest this update: Mon 16 Mar 2026 03:01:06 +0000
Manifest next update: Tue 17 Mar 2026 03:01:06 +0000
Files and hashes: 1: LftAIu9k2wnzZP9QfqBNpPsB7GA.asa (hash: oB3unSja7fyioWETroS2ws+p/jX5s1fLimygzH+96YE=)
2: lzDCc6-etVZkMIjkO-86ahgch8I.crl (hash: UOlJD14cjDrYl0dCywsbJzNpkqBQQoJg75GBBrssa+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f4:97:10:ab:52:55:fd:04:a0:29:2e:f2:25:a9:0e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9730c273af9eb556643088e43bef3a6a181c87c2
Validity
Not Before: Mar 16 03:01:06 2026 GMT
Not After : Mar 17 03:01:06 2026 GMT
Subject: CN=639ba6da018f807d18a71453c340c8847ce53a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:33:e9:48:76:67:91:75:d6:18:1f:74:61:
27:6a:8c:d3:5b:30:e9:07:39:34:ac:3d:2d:5b:be:
e3:56:0a:1a:ed:45:97:96:5d:e0:96:bc:56:96:f0:
41:05:e0:47:8a:ec:b2:c7:72:7e:42:62:e8:b4:61:
da:c9:a0:c2:ed:00:fd:9e:cb:b3:57:51:0c:96:a8:
ef:55:3b:da:3e:f7:f9:05:46:f0:ba:9d:1c:a3:1b:
b4:31:88:14:9c:e2:8a:4a:42:7c:c0:43:d0:b0:06:
81:b5:40:b1:dc:81:99:cc:9c:e2:65:07:64:54:4c:
5d:b3:bb:4c:ab:26:7e:ac:d9:9a:a8:b8:42:a6:f2:
15:76:3c:b1:c0:8c:2f:9f:1c:c1:5d:25:10:2c:24:
f2:8e:53:ef:3f:b4:24:e4:3a:40:ea:5f:4f:a5:31:
8e:ed:f0:77:ed:1f:ff:f7:28:81:c1:de:6f:b8:f0:
56:ef:56:ee:da:5d:68:89:49:64:39:6f:bd:a7:20:
88:44:bb:cb:69:f8:43:03:35:b1:1d:44:b7:ce:8f:
51:ef:27:80:5f:81:b3:e4:58:cf:10:c7:ff:03:8a:
a4:6a:c0:b4:a1:1f:76:c7:0d:00:37:56:52:6f:e8:
fc:a1:35:3b:ec:e4:25:2a:03:95:35:d3:00:9b:1c:
fb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9B:A6:DA:01:8F:80:7D:18:A7:14:53:C3:40:C8:84:7C:E5:3A:10
X509v3 Authority Key Identifier:
keyid:97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e4:36:6f:1e:78:46:c8:4b:2a:c6:49:38:8b:fe:59:59:0f:
f4:ce:5a:21:da:28:57:3a:2b:87:ac:23:25:7e:ff:cc:1a:4d:
ff:e0:cf:6f:af:7e:03:d0:c7:91:12:42:c9:1f:3a:88:e1:ea:
44:c7:f1:c7:7e:7d:fc:19:cb:80:66:85:45:ca:09:ac:6a:fe:
29:f3:ba:5c:8e:f4:d2:34:1a:80:70:72:b0:89:25:8c:7f:6d:
5b:f8:9c:72:cb:f1:02:70:cc:d3:87:d5:45:d1:3c:c0:25:86:
c1:32:8a:6f:e0:96:7e:e9:00:3c:13:03:89:ec:ba:af:cd:40:
e5:66:bb:77:fd:fa:fa:a0:56:6e:74:f1:0c:89:56:26:7c:d5:
bb:41:a6:9f:41:63:c7:0e:d6:5c:ca:82:9a:b1:11:b8:1d:a7:
01:2d:60:d5:14:db:ee:d8:cf:75:c1:db:cc:c8:3f:eb:0f:c4:
71:63:bd:0f:e9:94:70:60:a8:f8:cb:c7:cc:ff:20:3b:ab:59:
d5:8b:55:e4:98:f0:98:a8:2c:27:ab:78:56:72:3a:20:65:d1:
8e:1d:d5:fd:25:1b:2f:5e:58:18:3c:87:8a:8f:7f:70:49:1b:
da:a7:c0:f7:ec:df:2f:2f:e4:8b:96:1a:1b:8a:7e:9a:51:06:
2e:3d:ba:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:11:08 2026 by rpki-client