Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/41159e-b9b8-452c-9e17-129ca50e68a3/1/lz2H2kECyQf3XZuO8leVuvQdxSI.mft
File: lz2H2kECyQf3XZuO8leVuvQdxSI.mft (raw, json)
Hash identifier: RNNKUsNWghuzzU7GAadKDe+kyLs37IXZSx0qdimQjt0=
Subject key identifier: 64:D8:5B:D1:58:F9:48:81:CE:B7:21:DF:BC:0C:D1:95:23:7E:3B:44
Authority key identifier: 97:3D:87:DA:41:02:C9:07:F7:5D:9B:8E:F2:57:95:BA:F4:1D:C5:22
Certificate issuer: /CN=973d87da4102c907f75d9b8ef25795baf41dc522
Certificate serial: 01A195B222EE62E8D9B289D2F36CA67AC454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lz2H2kECyQf3XZuO8leVuvQdxSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/41159e-b9b8-452c-9e17-129ca50e68a3/1/lz2H2kECyQf3XZuO8leVuvQdxSI.mft
Manifest number: 36
Signing time: Sun 01 Nov 2026 06:00:41 +0000
Manifest this update: Sun 01 Nov 2026 06:00:41 +0000
Manifest next update: Mon 02 Nov 2026 06:00:41 +0000
Files and hashes: 1: lUcK27-H_fmA-TQEwMN9A4twLhM.roa (hash: qcpVRseJpc1BNOs3YpDnjWVfADxuU7jV1Iiya0OlWnM=)
2: lz2H2kECyQf3XZuO8leVuvQdxSI.crl (hash: S1qcGujyl+XTHFofmOyDirXLGdPdn3ZRHA9CuUdVMZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/41159e-b9b8-452c-9e17-129ca50e68a3/1/lz2H2kECyQf3XZuO8leVuvQdxSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/41159e-b9b8-452c-9e17-129ca50e68a3/1/lz2H2kECyQf3XZuO8leVuvQdxSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lz2H2kECyQf3XZuO8leVuvQdxSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:b2:22:ee:62:e8:d9:b2:89:d2:f3:6c:a6:7a:c4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973d87da4102c907f75d9b8ef25795baf41dc522
Validity
Not Before: Nov 1 06:00:41 2026 GMT
Not After : Nov 2 06:00:41 2026 GMT
Subject: CN=64d85bd158f94881ceb721dfbc0cd195237e3b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a5:48:4f:42:9a:ff:4c:0e:81:e5:0c:43:73:
35:af:65:32:b5:a5:7f:6f:8f:bc:da:53:40:2f:18:
b4:04:0c:1a:80:ff:54:08:b1:23:a6:05:36:38:11:
57:c7:6f:e4:0c:19:72:cb:eb:9d:5f:7f:da:89:75:
7c:b0:0d:7d:03:c7:45:de:cc:f1:4f:aa:3b:f0:d4:
39:19:34:c2:6e:d7:97:21:13:b9:8a:c2:ff:3b:79:
4f:8a:7c:44:10:5b:34:ce:e7:f0:e3:59:ca:22:ca:
9a:34:da:a1:65:01:75:dc:02:1c:f9:96:07:44:72:
ea:84:84:af:a7:4b:a7:3c:57:b1:a3:d3:0d:7e:8c:
39:55:65:ac:f3:19:c1:1a:15:48:c6:85:3f:2e:f8:
f4:2c:d2:24:90:c2:c2:f2:7e:d3:46:2e:18:27:72:
27:d6:5a:14:fc:06:88:0a:12:cc:81:1c:2e:a4:8d:
16:49:df:37:c9:5f:44:f1:15:9b:94:1c:b7:8e:a0:
24:21:0b:c4:32:97:65:c2:c3:d1:9d:cb:17:06:9d:
04:b5:5e:1c:71:6a:16:49:ae:fa:a3:55:7a:f9:42:
c3:1a:37:2a:92:dd:27:45:34:42:8e:a5:d2:4f:d6:
2b:7f:5d:ef:48:8b:eb:22:87:28:7b:13:06:4a:8e:
56:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D8:5B:D1:58:F9:48:81:CE:B7:21:DF:BC:0C:D1:95:23:7E:3B:44
X509v3 Authority Key Identifier:
keyid:97:3D:87:DA:41:02:C9:07:F7:5D:9B:8E:F2:57:95:BA:F4:1D:C5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lz2H2kECyQf3XZuO8leVuvQdxSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/41159e-b9b8-452c-9e17-129ca50e68a3/1/lz2H2kECyQf3XZuO8leVuvQdxSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/41159e-b9b8-452c-9e17-129ca50e68a3/1/lz2H2kECyQf3XZuO8leVuvQdxSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f7:26:00:20:2c:37:7f:9c:fe:e8:49:4d:bc:0c:e2:0f:a3:
fd:b9:00:a5:2e:58:28:ed:57:23:75:66:f1:42:3a:db:09:21:
1b:f9:4e:79:d9:d6:54:b1:9d:bb:b0:24:2c:c9:6f:20:41:34:
a7:af:28:dd:70:ea:f5:20:5a:d2:4c:9f:64:f6:f3:14:e8:24:
de:90:cf:ee:dd:dc:39:7a:36:eb:a5:4f:b9:df:e3:c3:ed:a9:
10:7c:47:65:8d:2d:37:84:62:c8:2e:d2:5d:09:d1:a9:ef:32:
79:59:5a:26:1d:b2:26:2c:d6:e0:7a:50:f6:13:a8:93:9d:ab:
13:75:07:64:31:49:7b:fe:f7:da:07:2d:77:9d:2a:bd:73:2a:
fb:ab:d6:5f:78:93:e2:81:bc:f3:f2:b9:30:e8:60:a6:61:8f:
7d:db:42:83:2c:d2:d0:f1:61:17:fb:23:af:be:dc:c3:74:4b:
bf:d3:c6:8e:9d:eb:90:6b:a7:9d:82:4c:30:ad:fe:8d:33:60:
7b:8d:37:1a:5d:7f:d2:dc:8d:f9:2d:e7:64:91:bb:c4:8c:92:
45:fc:08:47:64:3a:47:c9:00:58:d6:26:18:2d:cc:0c:f6:7b:
c6:97:cf:ba:ed:49:0d:63:ab:e2:de:1a:8b:cb:66:44:48:0d:
32:07:06:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:31:05 2026 by rpki-client