Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.mft
File: lzUQXwm80g9MpHGS2HEgULOCGgU.mft (raw, json)
Hash identifier: 9UNFOAxrpPoNG6ry3IKmhJhdY89uee5RzCkdLRCMCz4=
Subject key identifier: C8:99:8A:EB:CE:E7:3B:82:64:01:16:6E:81:3D:71:68:0E:4E:EA:23
Authority key identifier: 97:35:10:5F:09:BC:D2:0F:4C:A4:71:92:D8:71:20:50:B3:82:1A:05
Certificate issuer: /CN=9735105f09bcd20f4ca47192d8712050b3821a05
Certificate serial: 01A03F3BBCF336705AB518B9D8A0EE1F76BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzUQXwm80g9MpHGS2HEgULOCGgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 18:01:14 +0000
Manifest this update: Wed 26 Aug 2026 18:01:14 +0000
Manifest next update: Thu 27 Aug 2026 18:01:14 +0000
Files and hashes: 1: lzUQXwm80g9MpHGS2HEgULOCGgU.crl (hash: Si50YKna/FDQxwP8uKSWLYe7CahUcjEzF0ZCYz3+fLo=)
2: olMM-bZayk15NVNMQRnr5L5ha3E.roa (hash: BGtUHPufR6/y3womVBoB/y7s8kOSrfbGJGbIgB+B20o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzUQXwm80g9MpHGS2HEgULOCGgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:bc:f3:36:70:5a:b5:18:b9:d8:a0:ee:1f:76:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9735105f09bcd20f4ca47192d8712050b3821a05
Validity
Not Before: Aug 26 18:01:14 2026 GMT
Not After : Aug 27 18:01:14 2026 GMT
Subject: CN=c8998aebcee73b826401166e813d71680e4eea23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:92:ff:28:9a:e4:b2:6b:b9:a8:a1:02:95:
52:51:8d:ae:40:52:eb:18:ee:f1:c3:f4:f4:89:22:
10:8d:3a:b7:a9:92:3b:d0:c3:98:df:a2:cd:fd:c3:
da:b8:5e:1a:b7:48:20:d6:65:bf:85:c2:18:b8:e9:
e8:22:35:99:89:39:a6:1c:50:0a:49:84:6c:cf:24:
7e:7f:35:9d:6d:8c:e3:60:da:08:f2:57:87:ca:73:
cb:4d:97:13:1f:c3:1b:0f:83:ee:b2:4d:0b:aa:1d:
75:ee:4c:f1:25:9f:fa:0a:63:30:cc:3e:e8:7f:7e:
15:fd:37:9a:89:cf:c0:ed:01:97:12:27:8b:c2:d6:
b1:7c:ae:0c:90:78:10:43:29:dd:25:07:5c:e8:fb:
6b:09:cc:07:cc:22:26:7a:29:b7:5f:5b:9b:01:5b:
7f:ce:a6:53:48:f4:e9:6b:1c:f5:28:2c:23:dc:c7:
cb:bf:ee:62:30:85:6b:49:f1:8e:fd:34:2a:00:d1:
27:03:56:43:2d:48:a6:21:ef:41:a1:d3:25:44:fa:
50:99:f5:92:3a:12:57:86:f7:a8:fa:e2:6c:da:8b:
86:94:75:1f:9f:0f:5b:23:69:2a:59:3d:b1:d0:af:
41:bc:de:ff:c3:ad:30:dc:a9:c3:e0:ef:11:48:7a:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:99:8A:EB:CE:E7:3B:82:64:01:16:6E:81:3D:71:68:0E:4E:EA:23
X509v3 Authority Key Identifier:
keyid:97:35:10:5F:09:BC:D2:0F:4C:A4:71:92:D8:71:20:50:B3:82:1A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzUQXwm80g9MpHGS2HEgULOCGgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5e:b5:3e:e5:42:83:90:17:cf:3e:38:24:77:77:70:02:d4:
87:45:17:51:a7:24:9b:05:59:6c:d7:ce:bb:a1:a0:c1:47:58:
66:5b:64:8a:9d:39:fc:f2:59:2c:22:e0:70:59:ba:c5:46:f9:
0f:ad:b7:d9:dd:1b:59:5c:90:5e:35:44:ca:d3:7a:94:3c:83:
1c:16:62:af:ff:a2:44:a8:ce:ad:5e:53:20:37:77:2b:27:56:
51:33:72:a5:f1:82:3e:13:01:b9:3c:6f:81:88:09:50:5a:48:
7e:6c:ea:95:12:aa:0c:bb:1d:b8:70:ff:ab:69:9a:4b:13:12:
d3:12:1b:16:2b:a0:4d:ce:ac:12:37:eb:ad:ff:82:0e:81:19:
b1:4f:db:d2:9e:24:e6:77:35:68:49:bb:2c:4e:16:f9:7d:28:
d1:c7:dd:46:2a:46:7f:e5:ad:a8:92:14:dc:30:a9:f0:5d:e3:
77:6b:c0:38:e5:e8:ea:a1:63:28:b1:20:83:20:8a:39:f2:c8:
a6:db:2b:07:49:ad:e1:b7:11:90:db:54:b0:b2:0f:23:b7:d9:
f2:c0:6f:4e:8c:be:d9:36:a7:5a:45:8a:af:02:c4:29:26:c0:
60:41:3a:97:1c:40:82:cb:75:bd:43:bc:b2:16:68:ed:4a:16:
b5:eb:51:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:02:33 2026 by rpki-client