Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
File: LzFLwAp-WuIzSeBUBik6fWBgzaE.mft (raw, json)
Hash identifier: A9lD+eVKnLtVaxssytYuPRgtdpr2aB4WPmwDlsJrwOM=
Subject key identifier: AE:54:2D:8A:99:48:D0:40:B0:34:35:AA:1D:8E:2B:8E:0B:F1:CF:40
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Certificate issuer: /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial: 019FA3E0C7DD1D430AA5482483E33DAA6720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
Manifest number: 1692
Signing time: Mon 27 Jul 2026 14:00:45 +0000
Manifest this update: Mon 27 Jul 2026 14:00:45 +0000
Manifest next update: Tue 28 Jul 2026 14:00:45 +0000
Files and hashes: 1: LzFLwAp-WuIzSeBUBik6fWBgzaE.crl (hash: b29PsM0YpbEhkhExF4U48DtcPsyQwoEvTRtlz4+AeDI=)
2: cdp1tnEqjEuwTYVbdI1j3wHPDuE.roa (hash: PSpmNX2+qtjxbQErRebhWCHH46VZVaH6NZ253k2cPGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e0:c7:dd:1d:43:0a:a5:48:24:83:e3:3d:aa:67:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Validity
Not Before: Jul 27 14:00:45 2026 GMT
Not After : Jul 28 14:00:45 2026 GMT
Subject: CN=ae542d8a9948d040b03435aa1d8e2b8e0bf1cf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:0b:44:1b:3b:66:a8:9e:ae:f2:d5:29:67:
e6:a6:01:d4:13:ea:fd:b8:c6:6b:13:50:2e:ad:2d:
b1:10:a5:9e:ab:d8:81:81:59:b5:4b:28:f5:08:b0:
44:84:dd:cb:87:b9:72:ea:2e:da:2a:e8:cd:13:4b:
87:05:0c:22:8e:02:53:3b:53:f0:bc:36:2a:e9:2c:
27:a0:1b:84:8f:03:0e:0c:02:71:ee:db:c6:0d:06:
cf:01:98:80:89:d0:3b:cd:09:f1:99:32:9a:ed:e1:
3a:c0:f0:33:8e:2d:f8:dc:b5:9f:5b:1f:be:06:28:
19:67:d5:88:2d:83:97:bf:81:35:ff:e2:c2:bc:f4:
7d:af:0f:dc:5e:ed:09:c1:30:ae:a5:b7:ea:63:05:
d4:3d:1b:7e:a1:5a:21:07:d0:20:3a:c6:d1:a5:61:
fc:1a:40:06:64:7e:83:90:bf:b1:03:61:3e:0d:8f:
1a:bd:e7:50:07:6f:b9:26:75:d5:15:27:1f:da:61:
5d:f0:f8:a6:44:97:c9:1e:b0:c4:b9:07:bb:9b:98:
7f:07:22:f3:3b:27:e7:ff:ce:2e:41:03:54:51:8e:
07:7f:0b:30:26:1a:d3:21:11:7d:3f:7b:3b:ad:f2:
94:4d:10:80:6f:c1:d4:14:d6:2d:1e:23:59:92:3a:
11:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:54:2D:8A:99:48:D0:40:B0:34:35:AA:1D:8E:2B:8E:0B:F1:CF:40
X509v3 Authority Key Identifier:
keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:8e:a9:66:2a:82:8a:e0:44:53:44:a2:2d:1a:1d:60:93:16:
05:ff:c2:a6:1f:02:7d:8f:83:47:28:64:c6:a4:81:4c:31:78:
d8:59:71:dd:a0:db:85:89:d8:a1:04:b3:78:4d:7c:25:10:3f:
44:7b:70:94:c7:b1:61:0d:8d:8c:f4:83:60:3f:66:a6:4b:bd:
3b:87:fc:8d:17:44:89:8c:53:b7:4a:af:4d:e0:f7:ec:ad:26:
6e:c4:0f:39:6e:d4:a3:01:05:41:3b:60:bb:c8:6b:8d:d6:08:
4a:0d:93:19:63:74:87:ff:99:d4:a3:85:ce:4b:c0:8c:85:1f:
00:db:b5:85:e5:78:45:6b:79:e0:59:7b:fb:d2:0d:53:e4:b5:
ab:20:61:f5:cf:96:7a:5a:31:5a:94:83:e5:97:f6:1e:78:78:
6d:28:2b:0c:5f:ff:cc:02:3a:42:5e:c2:74:26:75:ac:6d:4f:
bf:e0:20:60:9f:f7:fe:c8:7c:3a:20:33:1e:8d:b3:05:77:cf:
cb:51:83:77:e6:b9:20:a8:27:3b:94:cf:72:bc:7d:d1:df:b8:
f9:e2:38:16:cc:27:ec:f8:24:c4:a8:fc:93:6b:fc:bc:fe:6c:
8c:a0:4b:96:7a:ac:21:a2:18:6f:63:13:0d:81:99:06:34:4c:
2d:99:77:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:08:30 2026 by rpki-client