Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json)
Hash identifier: kHTS3rSZQ/X5OnmVMv+7w8Jwp5Ek+3T0zsInr8Bn+lY=
Subject key identifier: 93:4D:FE:54:E7:72:9A:52:20:3C:77:04:2B:B7:CD:62:82:D1:03:EF
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 019CE6A4680A8AD4F17DCAFB5D2E9D951396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
Manifest number: 186D
Signing time: Fri 13 Mar 2026 10:01:00 +0000
Manifest this update: Fri 13 Mar 2026 10:01:00 +0000
Manifest next update: Sat 14 Mar 2026 10:01:00 +0000
Files and hashes: 1: GOIVhBnn15XT5eXlASEvxn2hNDw.roa (hash: AmDJ5Odj0fdYze4B6QAdyi2ODpezKvZwj7zUISc+vO0=)
2: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: ZrNKeZBM5/ZkJhJo9Mi6HuB45wRlglfbdVKMCGFq8r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:68:0a:8a:d4:f1:7d:ca:fb:5d:2e:9d:95:13:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Mar 13 10:01:00 2026 GMT
Not After : Mar 14 10:01:00 2026 GMT
Subject: CN=934dfe54e7729a52203c77042bb7cd6282d103ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:dd:6f:a9:37:4d:c3:ed:8a:f3:29:1c:a9:
bf:bb:d7:a9:48:5b:c6:b3:6a:41:fc:d8:01:a3:06:
ff:41:40:2f:2e:3a:da:a1:f6:75:95:3a:fc:80:6b:
ac:7d:cc:6c:6d:08:80:bd:2e:51:53:ed:d4:5c:19:
22:74:58:39:c4:ea:08:fc:e7:d5:8d:37:93:40:7f:
ee:af:d6:79:24:c1:96:e6:0a:fe:fb:16:74:ae:87:
eb:59:76:a2:f9:8d:16:b5:9b:04:9e:4d:10:11:a5:
dc:34:2f:0e:c0:50:80:f3:7e:b0:94:67:23:dd:12:
09:15:4e:70:85:15:28:94:6a:7e:82:a7:10:b9:c0:
77:d4:c4:fb:2a:eb:10:85:6f:b3:ae:6f:ce:40:c3:
db:2c:95:d8:9e:69:2a:94:86:27:d4:96:a1:ef:44:
3c:f1:bb:f1:99:3d:65:55:8b:be:15:7b:79:ec:2a:
60:77:68:b1:82:47:bd:b6:bb:2e:53:df:77:dc:8e:
39:7d:89:98:f3:40:e0:82:6d:12:0d:a0:b6:ab:5b:
25:a1:5c:13:50:fe:ab:8b:02:5a:7a:45:8d:12:76:
f7:89:f3:26:a8:d4:9c:8f:e1:9d:94:89:db:d1:7b:
b8:e7:59:50:52:e0:a1:bd:44:60:ef:ca:68:5c:55:
fd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4D:FE:54:E7:72:9A:52:20:3C:77:04:2B:B7:CD:62:82:D1:03:EF
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:13:01:3d:e6:38:94:1f:20:76:9e:1e:c0:19:80:2e:be:8e:
3e:af:87:96:02:c5:84:3a:d8:2a:bb:c8:73:c5:dd:34:d1:ec:
46:3a:30:33:e4:5f:cb:2a:23:56:63:2e:32:49:b3:5c:b4:07:
1a:cf:db:4e:31:24:c6:c1:79:db:70:7e:24:16:bf:27:7a:fb:
56:a3:55:cb:98:2e:94:cf:72:9c:c4:39:e9:71:4a:03:ec:2b:
99:e2:b4:19:80:7d:13:62:16:9b:38:67:42:6c:64:19:51:f3:
dd:8b:d7:56:63:ac:c0:5f:37:35:1f:0f:3c:29:5a:98:11:e5:
b9:bf:ee:df:3f:8d:8d:7e:15:77:f1:7b:ff:24:1f:33:fa:4c:
66:3b:c4:db:80:67:e5:5e:fa:fe:6b:47:df:c4:fe:96:b2:0e:
d5:6e:7c:f1:bb:89:38:b8:78:b7:db:f2:f9:91:19:48:4b:ea:
a8:f3:5f:75:4a:f6:81:95:bf:a5:75:e8:52:b0:19:b1:44:5e:
69:49:1a:ef:11:bd:76:70:c4:49:1a:28:bb:60:2a:5f:3e:9a:
e0:7d:9c:09:78:7d:fa:e9:42:a6:81:bf:c0:9d:66:ff:de:45:
72:a0:c3:32:ea:65:f0:a1:9e:b6:3a:08:70:55:bc:ff:d0:20:
24:7c:ec:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:58:34 2026 by rpki-client