Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
File: LAzrgevOhZ9Qko6O0-HwqFERUts.mft (raw, json)
Hash identifier: ndi4uJXYqJZfOIUaUpmwGue47IYnxGP0iOnyqei79co=
Subject key identifier: 73:CA:32:DE:62:3D:05:E0:86:C6:24:C8:70:24:E8:A5:DC:CC:C3:F6
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 019DDD9F1293142FCFFA3800F420A64C3974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
Manifest number: 0CCE
Signing time: Thu 30 Apr 2026 09:01:22 +0000
Manifest this update: Thu 30 Apr 2026 09:01:22 +0000
Manifest next update: Fri 01 May 2026 09:01:22 +0000
Files and hashes: 1: 4xcAwvHt__8M4q7q6_P8GmcGdJ0.roa (hash: 4N+MVFoHn+t4XX6dy0VLE63oifYd03KKG5mUbwfZupw=)
2: LAzrgevOhZ9Qko6O0-HwqFERUts.crl (hash: Kpzz4RjZZBOosfWhbJ9SgGCGxIaNRG2VIyJWHhyOXKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:9f:12:93:14:2f:cf:fa:38:00:f4:20:a6:4c:39:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: Apr 30 09:01:22 2026 GMT
Not After : May 1 09:01:22 2026 GMT
Subject: CN=73ca32de623d05e086c624c87024e8a5dcccc3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6f:f3:b1:ac:d3:90:d3:08:4c:98:f9:aa:ba:
b3:e8:bd:8d:7d:77:7b:77:eb:24:11:76:1b:0f:81:
ca:5a:b0:8f:ce:98:10:35:4a:64:85:f5:e7:dd:99:
87:d8:af:ca:da:f0:5a:ca:5d:f5:84:b7:68:8f:57:
e1:41:ab:74:90:ad:85:0c:fe:4e:8f:16:1e:79:13:
96:a9:a3:9b:02:6d:d0:0c:46:de:c3:00:a5:2b:3c:
8e:d3:ef:74:3d:43:d0:95:f8:33:cc:8f:f2:26:63:
c2:06:3c:37:4b:cb:f6:c0:7e:0e:30:57:33:df:88:
cf:42:27:3d:19:c6:20:9e:b7:77:1c:31:e5:f6:ef:
16:0a:b5:8d:0f:77:94:c5:bd:47:a5:ce:50:db:87:
2d:e7:25:68:53:61:63:b0:96:17:63:53:fe:5b:af:
ec:8e:3c:15:14:92:3a:c0:54:8b:35:8b:89:c1:09:
f1:ad:37:cb:57:2a:55:1e:47:2a:37:cc:2b:19:67:
14:57:b5:ea:00:c2:10:f1:13:64:df:0d:c3:14:74:
e8:64:09:2b:f1:7b:bd:05:a0:37:d3:4f:7e:07:93:
ea:a9:4c:cf:83:fb:79:5f:cb:16:0f:8b:d9:92:77:
cc:bc:98:1d:d9:8e:1d:62:72:13:87:8d:a7:02:7b:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CA:32:DE:62:3D:05:E0:86:C6:24:C8:70:24:E8:A5:DC:CC:C3:F6
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8b:8d:61:19:ac:5f:74:b6:e4:b2:5b:82:9f:b8:81:a4:05:
ae:bb:52:a9:8f:4e:06:28:69:0c:bf:46:2b:33:a9:f9:13:f6:
8b:04:38:0b:fc:04:e8:10:02:8b:79:53:46:36:af:2f:dc:e4:
06:e6:18:b0:be:cf:e3:35:f1:a7:09:d4:f5:ea:c8:f2:7a:2f:
92:c9:58:1c:73:c0:75:30:3a:12:3a:b4:cc:61:54:f4:78:cf:
20:6b:9b:db:83:61:69:d8:9a:4e:a0:dd:09:a1:04:02:2e:60:
45:81:bb:17:02:3e:e9:90:fc:c0:14:84:56:66:38:13:8e:bb:
a5:aa:d8:d0:8f:dc:77:f3:c6:56:ac:76:42:69:7a:26:60:d2:
f1:8a:e4:39:78:c4:4e:81:83:1a:5d:3c:ee:58:91:24:06:bd:
7b:da:82:f2:e6:e9:28:fc:fe:82:41:02:3c:9f:ca:2d:86:b1:
f0:27:0f:4c:bd:55:c5:94:56:e1:fb:bc:af:5a:67:20:bc:3f:
5d:fb:ef:37:85:33:c5:0b:f8:f3:5b:bf:6d:49:4b:59:59:ff:
44:51:e0:dc:c9:97:a7:97:71:6e:1e:50:fc:b8:8d:35:d3:8a:
64:8a:51:86:b4:6a:09:f7:ed:82:ee:58:f6:d5:26:f7:d1:9c:
e1:92:a5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:48:42 2026 by rpki-client