Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
File: lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft (raw, json)
Hash identifier: cB1g+5uY19QmYcZJ1BC+2iqvQaHYNhRrSEatFWGzMUo=
Subject key identifier: 73:2E:BD:16:0F:C1:C7:87:E8:D9:C7:38:AA:63:2B:FB:3E:95:E3:77
Authority key identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
Certificate issuer: /CN=9735a94f31546d437b89720e844b2f12a5abf268
Certificate serial: 019D39780AACE272C2BE988572B00B6AE366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
Manifest number: 0DC2
Signing time: Sun 29 Mar 2026 12:01:01 +0000
Manifest this update: Sun 29 Mar 2026 12:01:01 +0000
Manifest next update: Mon 30 Mar 2026 12:01:01 +0000
Files and hashes: 1: D8jbeGvsCWlCtUKlWcmQzUoyjDA.roa (hash: hR+1WTEE4faE3X7SUL7mOqQ/qkK9Up9FfMVzqDGeaYA=)
2: lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl (hash: HDo5uG5nGZfgDBlwmOJyqPFKq4qb6zujdQz98YPHWWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:0a:ac:e2:72:c2:be:98:85:72:b0:0b:6a:e3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9735a94f31546d437b89720e844b2f12a5abf268
Validity
Not Before: Mar 29 12:01:01 2026 GMT
Not After : Mar 30 12:01:01 2026 GMT
Subject: CN=732ebd160fc1c787e8d9c738aa632bfb3e95e377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:48:a3:5d:b1:3c:27:29:17:10:26:84:3b:
58:49:ec:8b:98:83:cc:2f:8f:08:1d:2d:4d:ba:17:
1c:85:2c:00:92:4c:ab:2b:e2:51:3a:dc:ff:a0:ee:
5f:1e:a1:6e:27:61:b6:fc:65:f7:54:9b:5c:a2:0f:
85:0b:e3:ee:f8:f2:fc:8d:d0:a0:44:74:0b:dd:1c:
7c:34:55:d0:82:72:c6:52:7e:e2:84:f0:be:4a:16:
98:ee:21:36:6e:40:e7:34:19:34:b6:92:50:47:cf:
9d:0c:ae:20:34:d7:5e:6f:60:b1:b5:4a:2a:38:e6:
5a:e9:5e:74:13:c0:7c:1c:32:14:05:13:29:92:1b:
02:43:59:e9:0b:04:f3:1e:e9:f1:31:a5:07:57:d8:
33:72:37:44:14:91:48:42:29:6d:81:a1:bf:fa:b2:
6b:47:54:36:99:b8:d4:17:da:7c:55:43:44:a2:4d:
11:c3:ac:2a:44:22:b6:8e:78:e1:8a:2e:f3:9b:9d:
4c:bb:e3:df:42:60:22:af:a6:b0:03:8b:e5:1f:78:
af:a5:1d:dd:b9:ef:b2:50:02:e2:cd:94:56:f0:ea:
26:97:31:5a:71:85:8a:66:fa:53:7d:c9:8e:f5:71:
c2:ff:71:2a:4a:b6:03:3e:19:48:f1:8a:f1:aa:e6:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2E:BD:16:0F:C1:C7:87:E8:D9:C7:38:AA:63:2B:FB:3E:95:E3:77
X509v3 Authority Key Identifier:
keyid:97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:55:88:a5:0d:c9:54:96:19:0d:1b:bd:92:5c:ba:a8:d7:7d:
ff:a3:3a:c9:31:cf:0e:0b:8e:bf:63:4f:34:5b:90:ed:73:98:
fe:48:1d:37:bb:b1:ef:4a:e3:1f:72:ae:2a:3c:20:d1:f6:46:
22:9d:56:96:f1:76:72:02:a2:5c:5a:67:2b:a7:6b:f9:80:e6:
e8:74:42:d1:0c:cc:d6:3c:c5:2a:c2:37:1b:47:b7:1e:b3:5a:
97:e5:ec:ea:a8:8e:eb:b9:8e:c1:5e:17:85:02:39:76:95:d8:
b3:d0:bd:53:d3:48:0e:ac:81:f3:d7:47:da:b4:72:19:bd:52:
57:fa:ed:d3:86:e6:e0:e8:f5:c1:9f:fa:3e:22:e2:f4:73:a3:
5d:ab:71:53:06:87:95:f4:07:91:9c:b9:14:8f:97:24:72:be:
cf:fc:b5:2a:5a:fb:ea:35:38:91:0d:09:68:8a:cf:df:a7:c8:
3a:af:aa:88:bb:8f:0a:84:ba:62:73:c3:05:eb:b7:73:a5:9e:
f7:19:59:cf:44:bd:0b:b6:f7:48:fb:a0:b2:88:05:e8:01:3c:
c9:9b:ee:99:1c:57:af:cd:80:7a:76:a1:16:26:11:5d:c0:ae:
f4:02:90:05:cf:12:e3:00:1f:51:1f:b3:aa:3b:3a:83:68:78:
15:30:89:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:04 2026 by rpki-client