Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
File: LzQYB_ILBFGcVSuzjONykUt8w0U.mft (raw, json)
Hash identifier: YZYF/SKIZJjw/afbfw2MVok/y/Z6Ck9cg4FtkW+1zNg=
Subject key identifier: C1:DF:E5:80:CB:AB:F2:AA:A3:91:71:BF:BA:4A:48:C1:14:94:3D:B1
Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
Certificate issuer: /CN=2f341807f20b04519c552bb38ce372914b7cc345
Certificate serial: 019D38D39EBB1810343FEE6881B0C3A5B38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 09:01:25 +0000
Manifest this update: Sun 29 Mar 2026 09:01:25 +0000
Manifest next update: Mon 30 Mar 2026 09:01:25 +0000
Files and hashes: 1: LzQYB_ILBFGcVSuzjONykUt8w0U.crl (hash: nIx12HNREVzPUkkL3g6G+KErJANst4DnSwMJhRX4GvA=)
2: MP5fwJ2kgaZRpvM723kXW1TGyuQ.roa (hash: 3o1b+cqzLxMPAxiZfWRR+nsYECaSogtgZoDIe2bwcaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9e:bb:18:10:34:3f:ee:68:81:b0:c3:a5:b3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345
Validity
Not Before: Mar 29 09:01:25 2026 GMT
Not After : Mar 30 09:01:25 2026 GMT
Subject: CN=c1dfe580cbabf2aaa39171bfba4a48c114943db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:75:08:9e:79:47:dd:7e:b9:95:a3:a8:84:1c:
cd:37:b9:9f:39:f9:c8:fc:46:1d:4e:f0:53:a6:ac:
4a:04:42:90:87:e6:60:50:1f:46:da:07:60:20:79:
35:89:a7:1a:c0:b1:ef:f2:bc:06:9c:a8:33:e8:ad:
5b:5a:3d:09:58:54:74:13:04:9a:0c:9a:ef:e7:61:
3f:61:94:97:ec:bd:27:18:2f:14:2b:88:b4:56:75:
04:b9:b8:04:0d:45:d8:69:ac:da:94:68:17:6c:9d:
6b:52:a7:f7:df:a1:83:9e:fa:ae:5c:1c:c9:50:d0:
a5:92:64:f4:74:1b:09:12:13:36:e6:34:95:5b:11:
e0:34:d0:d8:3a:bf:cb:d7:da:a3:e6:d7:1b:9c:c7:
c6:47:81:91:a0:32:e4:8b:96:9d:e8:f8:51:eb:15:
4d:91:98:ad:94:a7:4b:6d:2e:f7:b3:83:51:f9:78:
a8:08:08:53:46:7d:a2:24:64:8d:7a:40:7b:3e:0d:
1e:37:73:e9:a0:f4:d4:c4:cb:e6:79:2e:07:61:b1:
82:ba:c1:56:49:9b:13:09:7a:44:35:28:9d:e9:71:
79:82:95:f4:fb:8b:1a:d9:e4:e4:ba:14:fa:87:1c:
f8:db:79:ca:e0:ba:15:0d:2d:2e:bc:6b:52:e7:fa:
ff:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DF:E5:80:CB:AB:F2:AA:A3:91:71:BF:BA:4A:48:C1:14:94:3D:B1
X509v3 Authority Key Identifier:
keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c8:7b:b9:28:84:04:d7:10:b8:a6:ff:67:fb:2d:90:40:6f:
38:24:17:c1:2e:56:3f:9b:cc:61:1e:9f:ea:c0:a3:db:c1:bd:
a1:27:3c:80:58:0c:5a:a0:d2:de:b2:67:a2:8e:61:93:8d:10:
34:fe:dd:4a:a1:63:83:35:73:de:fb:36:26:67:da:26:79:eb:
76:9b:64:59:38:90:78:9e:0c:2f:a6:72:67:70:e2:ff:20:f2:
ff:9c:87:68:75:04:61:37:f6:dd:fe:4d:5f:b4:d0:e8:49:c4:
2a:01:f4:6b:17:6c:64:eb:6c:29:27:f3:da:e9:1e:e2:16:2c:
17:1c:4a:7f:2e:3e:90:9e:dc:c3:11:53:20:aa:61:40:42:16:
55:a8:88:d8:2a:fb:93:d3:15:e5:b4:81:6e:a2:3f:40:e1:71:
6b:36:5a:c6:0b:c2:e9:db:63:d0:d3:2f:a9:33:7f:a9:6d:f2:
a4:e5:a4:84:f9:e4:3e:7c:f8:96:5a:be:4f:7b:23:a1:3c:88:
5b:0c:12:e4:d2:f9:00:1a:50:99:17:0c:3c:e6:64:e3:1a:06:
03:65:c3:b0:15:46:2f:62:31:64:ac:57:44:7d:24:a1:ca:b9:
bb:7e:d0:1f:97:0b:28:c3:60:1f:f1:b8:f5:81:53:07:d3:77:
b6:46:06:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040567GBA0P+5ogbDDpbOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMzQxODA3ZjIwYjA0NTE5YzU1MmJiMzhjZTM3MjkxNGI3
Y2MzNDUwHhcNMjYwMzI5MDkwMTI1WhcNMjYwMzMwMDkwMTI1WjAzMTEwLwYDVQQD
EyhjMWRmZTU4MGNiYWJmMmFhYTM5MTcxYmZiYTRhNDhjMTE0OTQzZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9nUInnlH3X65laOohBzNN7mfOfnI
/EYdTvBTpqxKBEKQh+ZgUB9G2gdgIHk1iacawLHv8rwGnKgz6K1bWj0JWFR0EwSa
DJrv52E/YZSX7L0nGC8UK4i0VnUEubgEDUXYaazalGgXbJ1rUqf336GDnvquXBzJ
UNClkmT0dBsJEhM25jSVWxHgNNDYOr/L19qj5tcbnMfGR4GRoDLki5ad6PhR6xVN
kZitlKdLbS73s4NR+XioCAhTRn2iJGSNekB7Pg0eN3PpoPTUxMvmeS4HYbGCusFW
SZsTCXpENSid6XF5gpX0+4sa2eTkuhT6hxz423nK4LoVDS0uvGtS5/r/LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHf5YDLq/Kqo5Fxv7pKSMEUlD2xMB8GA1UdIwQY
MBaAFC80GAfyCwRRnFUrs4zjcpFLfMNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lNjRhMmYtZmUyNy00ZTQ3LTk5ZGUt
MzY4MGFlYjYzMmRhLzEvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9lNjRhMmYtZmUyNy00ZTQ3LTk5ZGUtMzY4MGFlYjYzMmRh
LzEvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMh7uSiE
BNcQuKb/Z/stkEBvOCQXwS5WP5vMYR6f6sCj28G9oSc8gFgMWqDS3rJnoo5hk40Q
NP7dSqFjgzVz3vs2JmfaJnnrdptkWTiQeJ4ML6ZyZ3Di/yDy/5yHaHUEYTf23f5N
X7TQ6EnEKgH0axdsZOtsKSfz2uke4hYsFxxKfy4+kJ7cwxFTIKphQEIWVaiI2Cr7
k9MV5bSBbqI/QOFxazZaxgvC6dtj0NMvqTN/qW3ypOWkhPnkPnz4llq+T3sjoTyI
WwwS5NL5ABpQmRcMPOZk4xoGA2XDsBVGL2IxZKxXRH0kocq5u37QH5cLKMNgH/G4
9YFTB9N3tkYGBg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:29 2026 by rpki-client