
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
File: LzFLwAp-WuIzSeBUBik6fWBgzaE.mft (raw, json)
Hash identifier: QC+/jdg2kVRNCJGtnirdmBy9aypwNMfHzNOBUZW32eA=
Subject key identifier: 59:F0:C0:23:89:DC:90:03:01:27:B9:CD:02:5F:CD:CE:E3:AE:5B:FD
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Certificate issuer: /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial: 01A180E286A82E44B177F801CB652701EC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
Manifest number: 1789
Signing time: Wed 28 Oct 2026 05:01:31 +0000
Manifest this update: Wed 28 Oct 2026 05:01:31 +0000
Manifest next update: Thu 29 Oct 2026 05:01:31 +0000
Files and hashes: 1: LzFLwAp-WuIzSeBUBik6fWBgzaE.crl (hash: Pd6JdNZPG31pieYxc2Pbwj0YiDcvfQ6bq59Z1qcpcpc=)
2: cdp1tnEqjEuwTYVbdI1j3wHPDuE.roa (hash: PSpmNX2+qtjxbQErRebhWCHH46VZVaH6NZ253k2cPGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:86:a8:2e:44:b1:77:f8:01:cb:65:27:01:ec:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Validity
Not Before: Oct 28 05:01:31 2026 GMT
Not After : Oct 29 05:01:31 2026 GMT
Subject: CN=59f0c02389dc90030127b9cd025fcdcee3ae5bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:56:83:3e:a6:cb:1b:13:11:34:6a:f9:9c:
4e:a0:d7:44:76:78:41:26:60:90:97:8c:8d:78:d7:
6a:de:44:ce:b5:58:0e:a5:33:25:82:ef:06:b7:c8:
82:eb:1f:b6:53:b5:57:cf:64:a8:0e:44:46:22:8a:
6d:94:bb:13:23:54:a2:b3:a1:78:70:73:f4:cf:af:
ba:91:49:a0:6a:82:79:47:0e:3f:83:bf:ab:d7:7d:
72:df:02:68:2f:ad:f1:ca:c3:d5:e1:cc:e9:e4:d7:
d3:d8:40:d1:08:24:a7:f0:3c:e9:e7:c1:30:ba:18:
9d:b0:56:06:b7:63:68:49:e8:88:f6:20:bb:e9:9a:
e1:27:ef:8b:a7:4d:28:7d:15:ba:7d:0d:0d:f8:94:
fa:54:1c:f7:14:bc:12:81:ba:c1:2f:c4:64:94:97:
76:fe:cb:fd:7f:cc:2d:44:b4:a0:41:81:49:ae:53:
76:2c:d0:52:43:db:fa:e2:36:f9:84:e1:6a:08:9b:
c1:b2:ec:15:1e:ba:e0:fb:b0:8d:11:fc:7b:e7:d9:
6c:39:b3:97:ac:96:3c:05:9e:35:4c:8c:2f:99:4b:
e1:19:f2:c5:cd:cb:1c:86:28:8a:c6:11:e6:db:94:
6c:4b:3a:44:2f:fc:07:65:ed:a9:69:d2:35:06:79:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F0:C0:23:89:DC:90:03:01:27:B9:CD:02:5F:CD:CE:E3:AE:5B:FD
X509v3 Authority Key Identifier:
keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:84:60:a6:a3:d1:3f:60:6b:ae:0a:f5:11:84:b0:23:87:a6:
7b:d5:48:62:9f:2e:2b:70:34:61:3b:8f:a8:ed:90:58:df:15:
75:43:53:5c:2e:ca:0b:ee:97:ee:6e:89:f8:73:20:d6:6d:73:
fd:0c:ae:42:ee:22:a4:4f:cb:1f:13:bb:63:bf:40:70:21:ff:
02:c8:8c:9e:6f:30:79:4b:aa:06:75:51:46:2c:76:cc:9d:bc:
30:f7:c4:a0:12:fc:c4:c7:14:0b:8b:3d:55:82:7b:56:12:f0:
22:35:75:d3:b6:da:9c:0b:c0:23:80:ef:c3:45:de:cd:76:c8:
ef:80:38:a6:a0:97:0d:1b:4a:73:8c:4b:f5:cb:08:98:13:19:
0b:52:57:0c:0e:21:14:e5:8e:8d:3d:d9:a8:94:1e:0c:f9:c5:
10:21:1c:be:e4:f4:1f:4d:c0:c7:c0:c9:f3:0c:b9:21:cd:9f:
8b:1b:48:32:a4:58:8e:67:7f:9f:49:03:09:13:1f:69:49:1d:
5c:1f:6e:f3:63:b7:90:ce:18:5f:f5:be:6e:cf:e9:8e:5a:f6:
d0:11:4f:b7:ca:4e:4a:d3:8d:c1:da:df:1e:1e:e1:0a:38:cd:
7f:a8:84:c2:fc:47:db:35:2f:c8:b7:1b:2e:49:3c:f7:0f:2b:
72:6a:d4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:32:30 2026 by rpki-client