Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
File: LAzrgevOhZ9Qko6O0-HwqFERUts.mft (raw, json)
Hash identifier: b1K7nXHMoXxOFo/OYblFC8kTpZv5q3gjk9MHjxeS+Hc=
Subject key identifier: BA:C1:0B:37:AC:58:34:5A:6D:5B:F1:4B:DF:CA:8A:6B:46:6B:D7:86
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 019FCC01BE5E696357CFF3DB6CBB38BE9A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
Manifest number: 0DCE
Signing time: Tue 04 Aug 2026 09:01:33 +0000
Manifest this update: Tue 04 Aug 2026 09:01:33 +0000
Manifest next update: Wed 05 Aug 2026 09:01:33 +0000
Files and hashes: 1: 4xcAwvHt__8M4q7q6_P8GmcGdJ0.roa (hash: 4N+MVFoHn+t4XX6dy0VLE63oifYd03KKG5mUbwfZupw=)
2: LAzrgevOhZ9Qko6O0-HwqFERUts.crl (hash: 6bHduAaK1YAN3FEGqG3QRCBGflqqGviTTs/U0MKVrtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:01:be:5e:69:63:57:cf:f3:db:6c:bb:38:be:9a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: Aug 4 09:01:33 2026 GMT
Not After : Aug 5 09:01:33 2026 GMT
Subject: CN=bac10b37ac58345a6d5bf14bdfca8a6b466bd786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:dd:5d:33:70:7b:72:fe:4a:ad:d5:68:18:
1e:10:98:00:0d:a6:d6:81:50:0b:83:2a:f9:69:73:
4a:e5:6e:84:37:37:49:3d:35:f9:3e:af:2b:80:e7:
1c:1a:40:eb:f2:9b:24:7a:e7:b6:52:8a:58:a6:11:
2d:7d:45:71:73:18:6b:df:c4:02:a2:93:89:8a:01:
13:fe:6e:71:ae:e3:ad:b0:7a:09:dc:56:83:21:aa:
11:1c:64:49:ec:6c:57:76:e3:0f:1c:2f:5b:75:14:
82:dc:98:1d:e5:24:88:9d:ab:51:ac:85:b1:ef:6f:
85:f8:b7:9e:48:9b:8f:b3:d8:7f:55:c4:f7:68:59:
66:7a:b6:90:f0:62:1c:28:f9:1e:fc:14:3e:b8:ab:
f3:aa:24:ca:e0:04:3e:70:a1:a9:3d:0a:ce:f7:cd:
ec:18:e3:8d:31:2f:36:61:b6:37:6a:ae:7b:be:3e:
e4:54:b3:99:ae:d2:9e:e0:a2:61:7a:63:a4:13:12:
01:96:1c:bd:b0:a1:1b:6f:90:de:81:fc:84:fa:05:
e9:68:8d:41:56:e7:18:3c:31:f9:0b:4b:e3:5e:97:
8f:ef:20:c1:1b:4a:f2:f3:12:1d:4f:0d:89:63:5f:
92:f1:c0:e1:b8:59:06:47:82:5f:96:d0:cf:40:d3:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C1:0B:37:AC:58:34:5A:6D:5B:F1:4B:DF:CA:8A:6B:46:6B:D7:86
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b5:b0:e5:d7:7e:2f:5b:92:e9:66:1e:b3:18:3d:6e:30:ac:
34:e7:57:1a:36:71:73:35:e6:c5:bd:39:95:8e:69:66:5c:a0:
bc:2b:9b:62:0a:79:ff:8f:52:35:5e:22:80:76:6d:d2:ae:3d:
98:3b:07:cf:b1:60:ba:99:b4:6e:f2:fd:91:6e:67:6b:dd:6a:
b3:cc:a3:bd:af:15:46:16:52:e1:f2:60:01:5b:63:ed:ab:00:
87:1d:ff:b2:94:fe:cb:73:6f:98:56:a3:c1:38:4b:52:72:93:
d1:f8:7d:18:e3:54:f0:f4:e0:38:ad:4f:a1:53:20:14:d7:55:
65:77:3e:20:c4:bc:2a:d2:07:45:32:63:8f:98:c7:79:b4:e0:
70:c1:b9:5b:b4:2d:05:41:4c:4b:68:ed:52:a2:b6:77:f6:ae:
79:b0:9d:40:a3:27:58:0b:74:b5:4d:1e:6b:ba:47:78:49:ce:
0c:78:32:2e:54:24:d2:93:a3:e8:2b:9e:96:14:1b:14:ce:2f:
d4:12:9d:8d:c9:40:f0:50:6e:c9:a8:f7:08:3d:fa:47:9d:71:
39:2d:9e:ef:0f:59:38:06:b8:ad:30:03:6d:15:6c:9d:65:40:
e6:0d:90:90:29:0a:e7:66:0d:00:5d:d9:a3:58:fc:94:10:31:
11:78:dd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 14:00:52 2026 by rpki-client