Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
File: LzFLwAp-WuIzSeBUBik6fWBgzaE.mft (raw, json)
Hash identifier: NdLSKRo/1T0dxWWggQafcZ8h2mxs5oqoM7Y4+cl1fN0=
Subject key identifier: B3:7D:23:6B:13:DA:FA:C1:28:53:AD:D9:06:A9:D8:96:35:A2:9F:31
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Certificate issuer: /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial: 019D37F792DE2AE0C19AFBAAD972A93C377C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
Manifest number: 1551
Signing time: Sun 29 Mar 2026 05:01:04 +0000
Manifest this update: Sun 29 Mar 2026 05:01:04 +0000
Manifest next update: Mon 30 Mar 2026 05:01:04 +0000
Files and hashes: 1: LzFLwAp-WuIzSeBUBik6fWBgzaE.crl (hash: 3K1cO1OSvoRJgPw45967SB339YE9AszKZANc8uzJ+1Q=)
2: cdp1tnEqjEuwTYVbdI1j3wHPDuE.roa (hash: PSpmNX2+qtjxbQErRebhWCHH46VZVaH6NZ253k2cPGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:92:de:2a:e0:c1:9a:fb:aa:d9:72:a9:3c:37:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Validity
Not Before: Mar 29 05:01:04 2026 GMT
Not After : Mar 30 05:01:04 2026 GMT
Subject: CN=b37d236b13dafac12853add906a9d89635a29f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:ac:06:43:2b:50:fc:b6:36:13:06:d3:87:
92:66:96:3e:e3:ca:d1:7c:02:dc:b5:58:d2:00:e7:
30:46:68:b5:34:a4:7d:c7:3c:0a:7c:35:67:60:48:
58:30:b2:0d:29:e9:2a:85:00:51:02:26:2d:02:19:
36:cc:a9:01:44:1b:64:ae:e3:4d:84:3b:82:b5:fd:
87:e3:10:3f:ce:ea:a8:c3:bd:e9:63:4f:ec:f9:1c:
44:a9:42:34:ce:c9:c2:1e:1b:d5:63:39:dc:9c:0e:
b4:b0:82:1d:4c:ab:35:a5:95:47:eb:ab:7c:bc:66:
16:d0:e4:45:6c:6e:90:1a:d0:60:ae:00:7f:2d:b5:
f6:1d:0a:6d:cd:ff:16:e3:5f:02:24:60:97:39:82:
d0:2e:53:f9:da:68:c0:ea:60:f5:74:80:f1:f0:2a:
5d:d6:a2:48:fb:ea:d2:ed:09:4c:14:be:8e:1b:e1:
1e:99:ca:85:f6:45:2e:12:2a:22:41:df:e8:05:aa:
d4:6a:90:5d:80:ae:27:6e:a0:8a:2c:eb:0a:65:a0:
bc:56:73:a2:db:be:93:6d:c4:35:88:a6:c7:ca:70:
0c:5d:dc:e3:9b:65:3d:6e:fb:59:29:73:cb:38:ea:
c5:be:46:42:98:15:20:0a:ae:6b:6b:dc:8f:78:c5:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7D:23:6B:13:DA:FA:C1:28:53:AD:D9:06:A9:D8:96:35:A2:9F:31
X509v3 Authority Key Identifier:
keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f5:34:c8:55:6c:0e:2b:f7:2b:4e:16:eb:99:e3:89:a9:8b:
06:5d:16:f7:16:8f:43:66:00:18:9c:a3:0c:87:fe:fd:24:1f:
47:e2:0a:4e:dc:18:04:b6:c3:32:5c:04:e9:4d:c2:db:3f:ec:
8d:ad:54:2b:7f:a1:46:d3:58:c4:1f:20:b1:96:a2:72:d2:5b:
7b:d4:b1:ef:be:ec:b5:76:8f:d7:36:dc:9e:e0:01:d5:4c:9f:
ea:e4:52:d4:91:ea:51:08:91:17:a6:f8:95:7b:2c:f8:db:8a:
76:5e:81:70:92:a9:1e:d3:fb:43:16:b2:dc:ee:e7:dc:2c:35:
fb:28:6f:18:75:55:9e:f3:4b:49:92:6e:2d:6c:bc:35:b6:3d:
f2:09:12:15:2c:d5:06:69:7c:da:c7:85:13:79:b5:83:7b:a4:
4a:7d:2f:fe:92:50:62:d8:fd:96:12:47:07:7a:53:4e:6c:26:
99:57:a1:79:e4:05:c9:57:8b:d6:47:34:d9:26:05:04:39:3f:
89:5f:d0:04:ab:87:fe:b2:87:49:17:c9:16:b4:16:1b:39:7c:
84:bb:71:f9:fc:9c:f4:12:2f:15:75:86:36:75:a8:88:79:92:
bf:fe:ae:3d:38:ca:c8:e0:23:a1:13:1d:dc:2f:44:d9:50:46:
91:b9:d6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:38 2026 by rpki-client