Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/lZ-XIanIo9qPwjfG5j5suEJKV7k.mft
File: lZ-XIanIo9qPwjfG5j5suEJKV7k.mft (raw, json)
Hash identifier: l+XUUrZiO6WFoDHIDSHkjpLT7lxF18KBbIoE+4nyQ3g=
Subject key identifier: C8:FF:21:89:E1:F2:1E:D2:A6:75:3B:E1:DC:F2:38:26:D3:35:68:C8
Authority key identifier: 95:9F:97:21:A9:C8:A3:DA:8F:C2:37:C6:E6:3E:6C:B8:42:4A:57:B9
Certificate issuer: /CN=959f9721a9c8a3da8fc237c6e63e6cb8424a57b9
Certificate serial: 01A164C5D417E70D2A2F34DC0A4604FB05B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ-XIanIo9qPwjfG5j5suEJKV7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/lZ-XIanIo9qPwjfG5j5suEJKV7k.mft
Manifest number: 88
Signing time: Thu 22 Oct 2026 18:00:48 +0000
Manifest this update: Thu 22 Oct 2026 18:00:48 +0000
Manifest next update: Fri 23 Oct 2026 18:00:48 +0000
Files and hashes: 1: lZ-XIanIo9qPwjfG5j5suEJKV7k.crl (hash: sWvdoZZrp/EXtcHR/xdRBTUVgJ3ieDcC92TvgOFcMvg=)
2: sy3L82X_k9pwFlctV8Qn2oAe67I.roa (hash: +J5tZGTBeOIKaWbei0v5OTAxSvX0Rhp7+cQe3w9eO48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/lZ-XIanIo9qPwjfG5j5suEJKV7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/lZ-XIanIo9qPwjfG5j5suEJKV7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ-XIanIo9qPwjfG5j5suEJKV7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:c5:d4:17:e7:0d:2a:2f:34:dc:0a:46:04:fb:05:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959f9721a9c8a3da8fc237c6e63e6cb8424a57b9
Validity
Not Before: Oct 22 18:00:48 2026 GMT
Not After : Oct 23 18:00:48 2026 GMT
Subject: CN=c8ff2189e1f21ed2a6753be1dcf23826d33568c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:9d:c4:d3:ac:df:bc:7d:11:00:58:8c:49:
36:fd:0b:9e:42:f5:02:bc:bf:95:7f:61:7c:b3:35:
c9:e6:53:09:67:c9:db:de:d3:c3:c3:c1:8e:51:9f:
2c:5e:b7:ea:2f:50:cf:bc:bd:cd:00:62:73:ea:28:
3e:75:9f:ee:f5:77:05:eb:2a:dc:16:46:31:1f:d8:
74:34:35:d3:e3:95:cd:a2:cf:b8:7a:99:29:23:0c:
40:ab:a9:3f:84:af:ed:6e:d1:75:de:62:31:76:35:
42:bb:7b:7d:2d:a9:3d:68:6e:af:77:0f:1b:a4:34:
a5:28:b3:5c:3e:c9:f2:f8:f0:63:23:67:6f:e5:e1:
26:56:5f:18:32:63:d4:bf:44:cb:82:53:77:88:80:
c7:a8:df:ee:c2:72:60:5d:7c:85:d7:c9:49:54:0b:
f6:bf:35:1c:30:f7:a9:43:c8:e1:95:e0:b0:4e:f5:
07:86:49:95:2c:2d:0c:e1:f5:35:dd:29:c2:11:a9:
23:79:2e:71:15:53:06:85:92:66:ee:fc:d7:35:e1:
d0:d2:f6:3d:3d:86:1d:8f:f7:c4:01:d8:da:0d:e9:
3c:77:b1:40:c4:1e:f0:4d:7c:d2:62:a3:60:33:ae:
00:e9:67:5f:9a:1c:69:57:08:d5:ed:c5:d5:e4:da:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FF:21:89:E1:F2:1E:D2:A6:75:3B:E1:DC:F2:38:26:D3:35:68:C8
X509v3 Authority Key Identifier:
keyid:95:9F:97:21:A9:C8:A3:DA:8F:C2:37:C6:E6:3E:6C:B8:42:4A:57:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ-XIanIo9qPwjfG5j5suEJKV7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/lZ-XIanIo9qPwjfG5j5suEJKV7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/lZ-XIanIo9qPwjfG5j5suEJKV7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:51:4d:ea:bb:20:53:3f:23:e1:46:52:54:cf:db:23:43:ea:
64:f0:12:d2:a3:32:ef:44:26:f7:fb:5d:8d:25:32:ff:de:08:
8c:86:98:85:e8:b0:8a:b5:80:90:9a:4d:ce:f8:2a:94:43:28:
d4:d9:6d:e1:e6:d4:32:61:24:63:60:73:b0:71:88:7c:0d:dd:
06:c3:9d:61:3b:f9:37:c6:10:07:f7:6b:ee:c2:f5:7a:75:2e:
ff:35:77:e6:62:e5:f1:b9:55:4a:05:28:22:9c:2b:74:1f:24:
da:58:50:9d:7f:6b:89:bd:1f:ee:23:72:ec:a4:bf:21:59:e4:
a8:2b:00:23:5a:05:1c:52:ce:e9:25:30:82:a0:20:95:22:40:
4c:61:96:96:40:74:cb:9b:8f:92:70:d5:b2:4a:d1:a2:40:4e:
0e:d6:e1:d3:d0:3a:77:ec:5d:1e:d3:70:d2:c3:54:d3:08:a0:
eb:57:e4:45:4e:63:3f:3d:12:80:e3:5f:de:c4:a2:76:0f:54:
bb:43:96:4d:0b:62:94:a4:ee:3f:e1:66:be:ac:12:fb:d8:38:
92:12:c0:d2:2f:b7:21:df:48:19:ae:e8:7e:8b:c2:b5:bd:ad:
8b:13:70:fe:ec:d1:3a:11:29:c4:4e:23:09:b1:30:6e:4c:07:
55:89:75:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:23:44 2026 by rpki-client