Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier: QbDBKY8Zl/2OKJsIzpu5BqfWJHTZHA4id9IZVEKOwRE=
Subject key identifier: CD:3F:96:63:60:8E:EC:38:CD:AB:E6:D3:4A:1E:B1:31:B1:5A:8B:A6
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 019F19B136CB1E50648BEC86D03074B0FDC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number: 1032
Signing time: Tue 30 Jun 2026 18:01:12 +0000
Manifest this update: Tue 30 Jun 2026 18:01:12 +0000
Manifest next update: Wed 01 Jul 2026 18:01:12 +0000
Files and hashes: 1: C0AVe4iSzt1tLzO1z3J_8BFSSwQ.roa (hash: 1x0Uuntsxdx1mq0mpp7kC3SseRJDTb+Eb50/cVmhJPA=)
2: KzNcXU8khdJ-4K2lsgPpphY3Yk8.roa (hash: RMrEUtAVveqzCRImZquFrYnaV+fD0aLrh30j7yV4Smo=)
3: itRgULwAbwVfFqgG9Kx01p2QKgY.roa (hash: GVdHMBdMKKywqVWD+wbqJLZMEEEZjb1V4iiL5vClFfE=)
4: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: +iuZgEQxKVCMXr3eYIPkd1KOO1BSPlgUzKkrev+IjfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:36:cb:1e:50:64:8b:ec:86:d0:30:74:b0:fd:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Jun 30 18:01:12 2026 GMT
Not After : Jul 1 18:01:12 2026 GMT
Subject: CN=cd3f9663608eec38cdabe6d34a1eb131b15a8ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:61:f8:60:3d:98:86:e0:88:61:b5:da:6b:
89:f0:f0:97:d5:d5:b0:af:b2:fc:7c:da:31:8e:7c:
ba:6a:0a:45:bc:e6:a5:f7:64:db:41:f5:10:cc:77:
31:67:6a:60:dc:21:cd:fa:4e:83:84:ab:32:56:1a:
af:23:e5:ef:b1:00:51:89:06:64:c5:35:15:51:90:
7c:dd:60:36:65:a4:df:1a:e5:c8:31:c8:2f:1b:8e:
5c:27:8f:24:5b:fd:ed:31:9b:60:ed:fc:46:67:57:
a8:92:d2:01:f0:fb:72:94:dd:7e:40:c9:96:14:21:
35:8b:b2:a4:f9:b7:dd:18:4f:cc:d5:d2:ea:35:22:
c1:2c:ee:02:1e:a9:c3:72:c6:39:37:d2:db:6b:ed:
47:27:d3:30:60:dd:bf:e5:49:1a:3c:c6:1c:93:23:
9d:52:4a:51:5e:42:8c:83:34:4f:56:f2:44:01:43:
18:20:7e:f4:c1:38:d7:8a:80:16:eb:06:44:18:93:
55:27:06:e1:eb:4a:7e:15:bc:11:90:5d:48:54:c1:
5b:fa:5b:86:66:05:b5:1a:77:d0:44:21:91:54:5d:
b5:87:50:2f:04:93:0e:b1:3a:50:b0:c9:cd:d4:6b:
a3:f1:d4:e0:44:ab:8f:1e:fe:0e:e2:e6:71:e7:56:
09:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3F:96:63:60:8E:EC:38:CD:AB:E6:D3:4A:1E:B1:31:B1:5A:8B:A6
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:36:d4:58:48:89:a8:3d:fc:a3:68:fc:38:7a:15:ff:99:dd:
c9:2a:98:71:da:04:3b:45:5f:91:87:d6:37:93:19:01:98:59:
8c:d9:06:bb:7b:e0:a4:43:f2:82:29:3b:ad:9e:e0:86:5a:88:
3c:44:2b:21:46:33:d1:2a:6b:6c:01:7b:37:10:c9:13:96:c7:
cb:ae:62:82:1c:07:03:58:6f:30:6d:a3:0e:3a:5a:0d:84:96:
f8:12:d0:29:d5:54:c8:27:95:f3:1e:2d:1d:f9:1b:01:c0:b5:
16:35:bd:89:f3:42:b9:dc:78:40:7c:1e:03:55:c3:82:0c:03:
ac:0c:6b:a3:cc:7b:53:ce:3d:64:de:d1:8f:6d:d5:d8:2c:35:
a9:f2:cd:a5:b7:87:11:af:4c:cd:e3:51:24:88:56:ea:23:5c:
fc:ac:bf:f9:10:84:50:42:4e:02:52:1b:e4:2e:aa:67:18:16:
57:34:0b:f5:c1:f2:89:fc:51:44:e0:21:53:35:22:67:e5:11:
e8:7a:c9:e5:b7:f3:25:36:63:79:87:90:45:98:b7:0c:b4:37:
e6:dd:8f:f5:bd:98:52:37:c9:4f:26:d3:b1:c0:cb:45:3c:d2:
b8:53:51:35:ed:73:f3:ca:b1:3c:a5:fc:87:c0:41:84:93:ec:
da:43:08:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:19:27 2026 by rpki-client