Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier: 69viZoF+uxlnouU5OiK2f+D4//9jzqOD/XJqmmxDEX0=
Subject key identifier: 60:A8:62:77:65:07:E0:5F:2B:40:5C:95:2D:6B:F9:35:3C:18:FD:D9
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 019CBE84077E8568E5972386A1FCEC00FBB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number: 0EF8
Signing time: Thu 05 Mar 2026 15:00:49 +0000
Manifest this update: Thu 05 Mar 2026 15:00:49 +0000
Manifest next update: Fri 06 Mar 2026 15:00:49 +0000
Files and hashes: 1: C0AVe4iSzt1tLzO1z3J_8BFSSwQ.roa (hash: 1x0Uuntsxdx1mq0mpp7kC3SseRJDTb+Eb50/cVmhJPA=)
2: idAPicjfcAurqzPxNV2Y-GlWZVM.roa (hash: 9WnV/PIHV4CmrkZ1/Csc9lXw9Lt4fmaI0bw+OleKvs0=)
3: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: RW5dfp2MmYvlQenq4iL4YaqSKUO5gyNxqQNyzvPvO5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:84:07:7e:85:68:e5:97:23:86:a1:fc:ec:00:fb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Mar 5 15:00:49 2026 GMT
Not After : Mar 6 15:00:49 2026 GMT
Subject: CN=60a862776507e05f2b405c952d6bf9353c18fdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:10:8d:c8:72:c2:56:02:f1:f6:c8:fd:3d:
1b:b7:d1:ef:3a:85:1c:c3:16:4f:fe:96:c5:1e:75:
24:3e:06:81:90:0b:e1:7a:b0:1e:2a:27:1f:c8:c3:
12:3e:39:77:20:e5:05:14:aa:d9:24:9c:19:0c:4b:
02:11:aa:ad:ae:a3:16:8a:1d:1e:27:91:a8:73:de:
d2:e6:0f:ca:f5:5b:53:01:5a:9d:2b:ae:75:93:93:
27:df:a2:18:e0:ed:db:d5:b9:d4:78:26:29:a6:81:
2b:3c:6e:79:09:7b:47:46:49:c2:4a:3a:03:75:17:
4d:23:e0:8d:ea:13:2e:09:c8:ee:36:f9:70:29:41:
5b:f8:a4:d1:68:e3:d9:86:15:a5:d3:d3:c4:18:8d:
95:ea:b4:2a:c4:5e:b6:2b:85:fe:dd:68:8f:a0:e7:
77:af:dc:49:20:4e:e0:cb:e1:ec:1b:9c:f8:cc:ac:
3d:11:bf:22:15:6a:7d:59:4f:5d:e1:20:69:0f:57:
56:d8:3f:54:f0:29:18:aa:01:1b:e9:b0:da:f8:c4:
75:43:96:2a:18:a6:8d:25:fc:3f:fb:a1:71:df:ef:
1f:33:7c:42:c8:af:ce:00:a4:48:1c:cf:69:c7:8d:
3c:69:61:02:fc:5d:78:5d:64:10:9e:51:ec:0d:84:
74:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A8:62:77:65:07:E0:5F:2B:40:5C:95:2D:6B:F9:35:3C:18:FD:D9
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:dc:45:0d:f6:e0:b3:2a:ba:9f:6a:86:f3:77:fd:fc:fb:1f:
dc:b3:b5:f8:5e:f6:f8:dd:8b:de:c3:78:50:b0:a2:de:e7:33:
a6:be:aa:f8:7c:3f:f0:6e:b7:76:1c:ee:a5:a4:1f:2a:2b:c1:
e6:c0:0b:2f:da:00:8a:d7:7b:39:bd:53:13:67:38:63:61:2e:
2d:bd:22:9a:ad:3f:12:ef:96:e8:2c:b7:8b:15:8f:b8:b7:c0:
82:f0:5f:e6:e4:3b:ed:66:f1:fa:f2:65:90:bf:0d:b9:2d:4c:
af:2e:e4:fa:14:a7:92:a3:13:cc:2d:7a:af:9b:aa:a1:7e:75:
06:33:f7:bf:13:70:e9:28:a1:01:65:33:97:65:e0:14:30:1d:
4f:03:f1:d0:d7:6f:cc:01:db:e3:46:84:f8:3a:79:ca:38:ef:
1a:de:2f:a8:33:d6:05:1b:dd:e9:2a:8c:4d:87:78:9b:13:07:
f8:c2:8c:59:6f:bf:b8:ee:54:18:91:8c:66:1e:a6:f8:90:9c:
52:c4:e2:27:f2:2a:75:6f:15:8e:69:bd:5d:50:35:32:56:e8:
d4:6f:4f:a8:6f:50:4e:62:8e:a5:8c:c1:9c:a4:88:6b:5c:fa:
9b:70:62:fe:67:0f:0e:4a:4a:29:8a:a2:f0:b6:4d:78:3b:f6:
db:29:01:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:05:44 2026 by rpki-client