Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
File: LZrhAubK20caMKDIWTPgOQvy-co.mft (raw, json)
Hash identifier: kXcHWM7wyX5FfxxtkSJj7GNCxOKpKOvkoo+TdGNdIqk=
Subject key identifier: C7:AC:D0:A3:E5:47:42:3A:DA:71:F7:DB:B7:CA:0A:D2:4F:1B:6C:E2
Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
Certificate issuer: /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Certificate serial: 019DD019B748AD6ACB5022211C97E318693C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
Manifest number: 0ECC
Signing time: Mon 27 Apr 2026 18:00:39 +0000
Manifest this update: Mon 27 Apr 2026 18:00:39 +0000
Manifest next update: Tue 28 Apr 2026 18:00:39 +0000
Files and hashes: 1: LZrhAubK20caMKDIWTPgOQvy-co.crl (hash: ytS2sdVV/qt1oagbSDeqB7VZU1vfbDf1C5k0pHLp4TQ=)
2: y2taGqw2UEDAKG5TCLDBWFLjqEw.roa (hash: tK8h1c2C7RZoKF8ADN3Dd1e3mCsCEmC4/YVEGzes/WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:b7:48:ad:6a:cb:50:22:21:1c:97:e3:18:69:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Validity
Not Before: Apr 27 18:00:39 2026 GMT
Not After : Apr 28 18:00:39 2026 GMT
Subject: CN=c7acd0a3e547423ada71f7dbb7ca0ad24f1b6ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e0:b3:b6:65:77:f2:c3:46:44:5b:db:02:b1:
d0:11:b5:2d:90:d0:8c:05:4e:b8:b2:76:72:20:4d:
68:9a:3f:16:02:da:f8:ec:1f:01:d3:bb:9b:46:14:
ec:0e:f4:4a:1d:aa:55:dc:3c:3b:1d:9e:bd:1b:09:
a8:dd:65:61:66:1b:52:8f:9f:d8:2d:21:46:e7:72:
46:15:96:9e:46:97:19:a7:72:de:26:be:8c:11:ae:
89:1d:25:61:0d:04:85:30:ca:97:a6:00:a9:d3:94:
04:0f:e2:e2:d6:59:33:c0:85:44:49:84:5b:1f:e5:
7d:95:35:41:ed:27:a6:f7:cd:1f:32:8f:50:4b:98:
5b:2f:6e:d0:fe:ae:f1:e3:ee:09:19:48:60:9c:d3:
b9:07:e3:53:0b:be:21:16:4e:57:a0:a9:10:16:90:
f4:16:4f:e5:89:a3:23:a5:8d:4f:61:9d:bf:0d:20:
d7:f3:61:ad:a0:4c:39:37:d3:25:96:0a:0e:e2:18:
85:4e:c9:4f:2b:cc:55:8b:a2:4a:34:5a:2a:e0:57:
71:34:8d:b3:40:cb:b1:a0:91:01:fc:d0:20:91:f3:
01:50:d0:b5:89:6a:23:2f:58:34:d5:d6:4c:6b:ea:
7e:97:62:67:43:b6:70:a0:df:c4:ed:a9:e2:55:e2:
c3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AC:D0:A3:E5:47:42:3A:DA:71:F7:DB:B7:CA:0A:D2:4F:1B:6C:E2
X509v3 Authority Key Identifier:
keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8e:be:c5:a9:75:9e:37:61:6d:73:25:b3:86:00:3a:22:2f:
64:a9:f0:20:48:6d:1a:bb:0a:4a:e1:36:f8:13:4f:49:66:20:
fd:86:03:af:1a:86:17:e8:10:fc:23:6f:ed:be:9a:e3:c9:8c:
f0:06:ba:3e:59:7e:36:78:8e:19:00:61:74:cf:57:63:c0:ff:
32:2d:21:ca:26:e7:d5:dd:39:15:d6:99:6e:a3:6d:18:34:52:
6f:82:30:43:e2:fc:f9:38:c2:0b:58:d3:c3:38:1a:29:b3:7c:
ee:b1:fc:15:bf:91:2f:d6:1c:35:0f:2e:ce:16:32:9e:09:83:
8a:9f:2c:f9:d4:74:12:58:b8:51:39:1e:95:a8:50:1c:d1:85:
24:7f:8e:d9:40:81:14:93:37:c8:7b:a5:ba:99:b3:2a:08:3f:
93:af:e9:4f:c9:31:e5:74:4f:8f:62:53:88:91:f2:df:a7:a4:
a0:d2:0e:29:75:92:d9:2d:fd:f3:0a:7d:e6:4b:86:2e:e7:d3:
94:aa:63:ac:00:e7:83:39:2e:2f:54:7e:d3:4c:6c:03:66:24:
aa:80:ae:6e:3b:19:bb:eb:56:c6:7a:3a:64:9f:ad:b4:fd:c8:
8e:40:90:a4:5b:aa:66:ee:e8:64:ce:05:72:57:28:de:c3:ec:
e1:9c:34:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:46:31 2026 by rpki-client