Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.mft
File: lzUQXwm80g9MpHGS2HEgULOCGgU.mft (raw, json)
Hash identifier: DTWCz275yVI6NHgb6INsyWLYa3knLNHPfXcCSXQYRJI=
Subject key identifier: 68:C9:C6:6A:56:38:F4:7E:13:53:19:05:14:35:36:5E:9F:72:D3:A5
Authority key identifier: 97:35:10:5F:09:BC:D2:0F:4C:A4:71:92:D8:71:20:50:B3:82:1A:05
Certificate issuer: /CN=9735105f09bcd20f4ca47192d8712050b3821a05
Certificate serial: 01A12CC5C42938F4F6D82F343AD37EB37EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzUQXwm80g9MpHGS2HEgULOCGgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.mft
Manifest number: 0115
Signing time: Sun 11 Oct 2026 21:02:00 +0000
Manifest this update: Sun 11 Oct 2026 21:02:00 +0000
Manifest next update: Mon 12 Oct 2026 21:02:00 +0000
Files and hashes: 1: lzUQXwm80g9MpHGS2HEgULOCGgU.crl (hash: CF4BfnAiXUJkf43nDjQtR3QxVV6TjlVcmT40Pe2jnoY=)
2: olMM-bZayk15NVNMQRnr5L5ha3E.roa (hash: BGtUHPufR6/y3womVBoB/y7s8kOSrfbGJGbIgB+B20o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzUQXwm80g9MpHGS2HEgULOCGgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 21:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:c5:c4:29:38:f4:f6:d8:2f:34:3a:d3:7e:b3:7e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9735105f09bcd20f4ca47192d8712050b3821a05
Validity
Not Before: Oct 11 21:02:00 2026 GMT
Not After : Oct 12 21:02:00 2026 GMT
Subject: CN=68c9c66a5638f47e135319051435365e9f72d3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:ef:97:ae:95:7b:85:d6:bf:39:62:fa:34:
76:3e:b4:9c:24:3e:05:da:c3:4d:e6:bd:5d:26:4c:
32:44:d8:4e:83:e1:c0:7e:53:6d:7c:a9:f0:68:3f:
24:a7:8a:31:b5:3f:d3:f4:02:3e:f1:9d:64:7f:df:
5d:ea:6a:63:af:5c:c4:7b:61:dd:d7:9e:ef:44:80:
55:97:fa:fc:2f:bb:04:98:7e:ea:80:8a:03:a7:89:
e4:e7:52:58:5c:1b:4a:a0:a3:e9:cb:04:4c:a6:dd:
4a:43:07:66:ac:5f:4d:0e:94:78:90:c5:c2:2c:0a:
e3:00:dc:22:c2:a5:64:0e:52:1c:a6:50:0f:a1:45:
3e:0a:76:9e:4f:6d:51:fe:6c:43:3a:e3:fc:bb:db:
20:cf:d9:9b:da:f1:2e:e2:5f:e7:81:96:7b:85:a3:
ab:89:81:2c:50:9d:0a:74:96:bb:66:3d:bc:b9:7d:
9c:55:fd:a2:fb:b1:ef:1d:d7:53:a9:78:58:1e:31:
99:d3:aa:d6:74:33:6c:19:67:d2:2d:70:d8:ec:80:
9a:bd:19:b5:87:f3:e0:9c:17:60:ea:2b:ea:ec:b9:
e2:9f:aa:91:80:81:d6:91:1a:9f:16:ad:fb:6c:2b:
28:b8:1c:66:f2:b7:40:13:99:e1:51:33:8c:e2:ae:
8e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C9:C6:6A:56:38:F4:7E:13:53:19:05:14:35:36:5E:9F:72:D3:A5
X509v3 Authority Key Identifier:
keyid:97:35:10:5F:09:BC:D2:0F:4C:A4:71:92:D8:71:20:50:B3:82:1A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzUQXwm80g9MpHGS2HEgULOCGgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:59:6a:8a:79:3c:5e:ab:53:d2:c4:67:e3:7f:21:8d:20:12:
cd:5f:e9:06:8a:4a:b3:c5:3b:f5:d5:82:92:6c:56:ea:3f:5d:
86:ef:74:3b:ee:12:5f:74:8a:c4:19:4b:ac:6a:83:17:c0:e3:
10:ad:1a:a1:65:27:5b:1d:6c:a0:28:94:00:d2:9a:d8:2c:bd:
7a:96:e1:65:d0:cb:e2:29:eb:74:e4:f5:80:20:17:dd:4e:e1:
81:30:7c:71:b7:8e:5e:52:f8:43:a5:25:2b:03:70:50:1b:2d:
32:92:90:b1:99:6a:5a:f2:85:ba:03:27:a0:3f:aa:ce:91:4e:
5b:e3:15:cc:1e:7f:61:48:d4:44:77:bb:d9:cd:7c:7c:08:80:
e0:ed:3a:a3:cf:26:0a:2e:f9:fe:fa:39:cb:76:6f:c0:e1:9e:
eb:8a:d2:ed:de:25:ba:10:c2:59:60:59:b3:a0:a6:a7:ea:4c:
60:d4:87:c0:54:e6:34:ca:d0:a8:a0:20:4e:8c:7b:9c:30:ff:
86:a2:1c:62:7d:f5:00:69:61:9c:a1:84:64:8c:ff:f8:f6:57:
54:4d:d9:83:a6:04:f9:cb:5d:a3:a8:3f:54:11:a6:47:f9:7f:
59:51:e5:e8:7e:3b:2a:26:58:a1:f1:fd:c7:08:0d:53:0f:d2:
c3:7a:e5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:27:04 2026 by rpki-client