Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
File: LZrhAubK20caMKDIWTPgOQvy-co.mft (raw, json)
Hash identifier: xnwKrCkrO1IcuG7QF/u2XDcDdcjSe+eI833WTAH/XyE=
Subject key identifier: 1C:97:B8:B2:94:5F:2B:FF:DC:41:67:BE:68:83:2B:10:EB:34:85:44
Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
Certificate issuer: /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Certificate serial: 01A0894312DCFFFD429E26F285E5995E8282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
Manifest number: 1035
Signing time: Thu 10 Sep 2026 03:01:09 +0000
Manifest this update: Thu 10 Sep 2026 03:01:09 +0000
Manifest next update: Fri 11 Sep 2026 03:01:09 +0000
Files and hashes: 1: LZrhAubK20caMKDIWTPgOQvy-co.crl (hash: qLozlqu8sHolAivykfzx95vOsTyUM5+ww0ZlCLsXag8=)
2: y2taGqw2UEDAKG5TCLDBWFLjqEw.roa (hash: tK8h1c2C7RZoKF8ADN3Dd1e3mCsCEmC4/YVEGzes/WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:43:12:dc:ff:fd:42:9e:26:f2:85:e5:99:5e:82:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Validity
Not Before: Sep 10 03:01:09 2026 GMT
Not After : Sep 11 03:01:09 2026 GMT
Subject: CN=1c97b8b2945f2bffdc4167be68832b10eb348544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9a:44:19:71:24:05:8a:32:c3:13:c4:59:11:
75:df:43:83:2c:fa:cf:27:84:93:61:ca:b4:a2:77:
5e:c8:a9:5a:41:4d:a1:88:f7:22:cd:b7:77:8e:e0:
a8:ca:4b:20:22:f9:35:4f:32:4a:f2:a1:dc:9e:7b:
0d:e0:c9:1c:d3:12:ba:86:36:80:d1:89:d9:c6:d2:
5f:f1:e3:fb:92:8c:56:6f:8a:b5:4f:95:50:59:f9:
16:f6:52:1f:74:ac:2b:1a:3d:a2:53:9b:f9:2f:ce:
30:8a:cc:d4:3c:9b:e4:0f:24:7c:47:ba:92:89:87:
f3:5c:10:76:f9:94:36:c4:d3:20:d7:8c:6a:a2:5f:
ea:79:18:b9:16:79:38:64:96:04:56:66:ac:34:67:
12:de:77:70:45:5f:ce:81:8c:88:7e:ab:52:92:c3:
a5:db:43:54:a3:2a:e3:c2:62:9f:c0:85:d4:8b:54:
f0:44:e9:aa:35:e6:ce:57:ad:f9:54:25:5b:80:ab:
b4:ac:08:ae:07:84:23:8f:c4:68:dd:ec:88:18:ef:
78:f6:b9:b2:40:7d:28:38:20:8f:b9:93:52:22:bd:
15:0b:e5:cb:97:1e:17:7e:c2:70:e9:45:99:21:2b:
94:94:77:1a:0e:a8:25:dd:80:e0:54:f5:b3:f8:5e:
f1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:97:B8:B2:94:5F:2B:FF:DC:41:67:BE:68:83:2B:10:EB:34:85:44
X509v3 Authority Key Identifier:
keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:67:21:b1:d4:e0:79:75:00:76:0f:d5:ab:1e:af:1f:17:a7:
af:e6:78:00:98:80:c8:1f:ff:08:5a:a1:48:e1:7e:4b:86:d9:
15:ed:53:ac:a1:bd:39:f5:32:f6:bc:00:d3:c8:04:19:d4:ff:
5a:53:01:f2:34:af:37:dc:96:93:1d:b1:72:79:d9:a2:c3:72:
cb:40:60:61:3e:5a:55:e4:1a:c5:6a:85:14:53:2d:7f:4f:13:
d7:d3:09:c9:72:68:83:4b:b4:a9:1d:76:85:ad:33:95:8c:1e:
a0:81:8f:08:22:e5:2c:8e:18:28:40:f7:1e:88:15:9a:26:a5:
73:0e:0c:6d:2f:8f:b2:5f:2d:6f:35:7e:bf:e2:3a:90:cc:f0:
8a:40:28:f1:6e:f6:1c:3f:18:ec:11:c2:a2:8c:b0:4c:1b:15:
a5:4f:39:c8:56:6d:9a:26:45:f8:7e:a0:2d:50:a7:19:e2:11:
2e:f3:a4:5c:e9:ec:42:72:ba:f0:a4:f5:a5:f7:ee:14:5e:43:
50:89:0c:10:10:1b:72:38:3d:56:aa:96:42:10:a1:2d:5e:75:
04:73:cc:8e:9f:3a:71:76:ca:52:fd:18:d3:d4:b5:02:9b:5b:
25:fe:11:72:08:da:41:35:5f:cb:9b:f3:21:68:4d:97:d4:7b:
64:99:56:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:07:39 2026 by rpki-client