Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier: iciLxYtHWsI0AVFlfowA7UT8uNy20QkChwDwamGRobA=
Subject key identifier: 60:05:3D:F7:D2:BB:24:42:A6:BD:84:83:AD:BF:80:16:0F:50:B4:FA
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 01A129C40D92027C79D31F392CFBA89D2085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number: 1147
Signing time: Sun 11 Oct 2026 07:01:16 +0000
Manifest this update: Sun 11 Oct 2026 07:01:16 +0000
Manifest next update: Mon 12 Oct 2026 07:01:16 +0000
Files and hashes: 1: C463m9ZyZEk3eM2l-6N_RbriHU4.roa (hash: 7UxqANlJ4UF+XXfc6ygm/hisOtlOicfBVxWeVwS1Pqk=)
2: cfmv_tc0fZVJXvMbEzxp3huvJQA.roa (hash: 5exQ8N+3HVkALP9EFbCrgal+azdpyvlnwuRFMo6QR2M=)
3: itRgULwAbwVfFqgG9Kx01p2QKgY.roa (hash: GVdHMBdMKKywqVWD+wbqJLZMEEEZjb1V4iiL5vClFfE=)
4: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: iBMKJjQt15O4QqM3hBrXHsCmgCPqbfd49G3fBBDWQD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:c4:0d:92:02:7c:79:d3:1f:39:2c:fb:a8:9d:20:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Oct 11 07:01:16 2026 GMT
Not After : Oct 12 07:01:16 2026 GMT
Subject: CN=60053df7d2bb2442a6bd8483adbf80160f50b4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1a:0e:4b:ad:6a:b8:4a:82:8b:9a:e1:3b:74:
6e:f6:5c:d0:f7:0c:42:34:90:71:8e:79:2f:a8:ec:
f8:65:33:07:67:a5:7b:64:d8:87:8f:af:91:ea:ce:
3b:81:a0:67:13:37:af:c5:ca:ef:a2:1e:e7:30:f7:
73:b0:39:7f:e4:01:83:61:37:c6:33:31:74:c3:48:
ec:e9:9d:45:af:49:31:16:ff:7c:cf:07:98:f6:4c:
24:ba:a5:42:98:36:4d:0c:f4:42:01:4c:04:b6:45:
53:27:32:c6:7f:c5:2b:76:9d:b1:15:00:2e:7a:49:
7f:65:b5:f5:6d:db:db:8e:2c:47:ce:06:b2:cf:53:
18:63:fd:9f:d2:9a:51:6f:8b:6d:5a:db:e8:06:d1:
3e:82:be:8b:ba:2e:1d:ed:2a:04:90:42:d4:b7:c2:
30:00:c1:f1:67:42:b8:d1:2e:af:18:74:4b:1f:d4:
dc:2e:50:4e:bc:f5:b6:71:1b:0a:08:9a:c8:65:b3:
48:78:7a:a6:df:6c:92:9e:1e:40:cf:a9:b3:77:88:
7e:39:08:fe:a4:d4:e6:a2:a0:83:2b:20:8e:c0:8a:
e4:8d:10:af:ed:c3:08:82:44:14:91:00:fc:bc:f6:
54:74:4a:a5:a4:d6:2a:6b:5b:ac:4e:b5:fa:2d:a1:
a8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:05:3D:F7:D2:BB:24:42:A6:BD:84:83:AD:BF:80:16:0F:50:B4:FA
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:93:6b:47:e0:4d:7b:2a:ee:19:50:96:5e:5d:ba:ff:38:51:
e4:35:90:00:92:73:8d:71:9c:33:c3:8a:0d:7c:7c:76:9a:4e:
87:a0:e1:c7:9e:d4:f4:c9:46:c6:9d:0d:15:41:e2:18:de:cf:
78:29:8d:14:e3:dd:72:19:97:65:26:16:b2:51:ba:9f:e3:bb:
80:cc:2f:d4:af:96:0b:8a:f1:e6:d7:90:c8:ee:51:84:16:61:
81:2f:91:b0:ae:d2:76:e7:96:1f:6b:20:6d:61:d0:af:04:d8:
82:06:5a:ba:03:c6:50:a2:88:77:d8:cd:53:dc:45:c6:23:24:
db:60:0e:50:a1:07:2f:05:36:c2:cf:e4:6f:9d:84:fe:76:54:
df:2a:3f:6f:07:4a:ec:5b:6c:41:b2:5b:e0:18:5d:7b:ae:9b:
78:6e:27:71:b9:c1:04:9c:68:37:fd:dd:91:34:ba:5d:fb:56:
51:41:ee:8b:55:f0:b3:99:e8:ad:10:b5:99:0d:27:29:0a:67:
24:ab:a0:63:ad:e2:98:a9:23:f4:53:d4:25:c7:e7:b9:d0:cb:
66:e3:94:c5:b2:e9:e1:7c:83:b8:33:02:0f:fa:f5:51:75:a7:
40:2a:48:39:e6:aa:57:65:b3:94:af:a0:2e:4b:23:c4:7f:46:
9e:95:d4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:51:48 2026 by rpki-client