Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier: nntNAIEQJ+LpHRNvmjjPGJMu0k8OvRCy4g65plmrr7Q=
Subject key identifier: 6D:C5:30:4A:FD:02:1A:B7:1E:83:A7:19:E6:83:68:71:EC:60:2C:EA
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 019DA830958D7A7F8141C8CED5F9412D8704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number: 0F71
Signing time: Mon 20 Apr 2026 00:00:49 +0000
Manifest this update: Mon 20 Apr 2026 00:00:49 +0000
Manifest next update: Tue 21 Apr 2026 00:00:49 +0000
Files and hashes: 1: C0AVe4iSzt1tLzO1z3J_8BFSSwQ.roa (hash: 1x0Uuntsxdx1mq0mpp7kC3SseRJDTb+Eb50/cVmhJPA=)
2: idAPicjfcAurqzPxNV2Y-GlWZVM.roa (hash: 9WnV/PIHV4CmrkZ1/Csc9lXw9Lt4fmaI0bw+OleKvs0=)
3: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: YB2/AnJ+1t6ETvDy2YXL1d9QFC27+vTi9G0rWInCOmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:30:95:8d:7a:7f:81:41:c8:ce:d5:f9:41:2d:87:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Apr 20 00:00:49 2026 GMT
Not After : Apr 21 00:00:49 2026 GMT
Subject: CN=6dc5304afd021ab71e83a719e6836871ec602cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:0e:83:73:a8:19:36:ed:57:1a:75:12:93:
a0:6c:57:1e:23:03:ec:d3:49:23:98:3c:be:84:65:
ed:20:d5:6d:95:89:96:b6:dc:51:fd:0b:31:53:95:
71:79:af:f0:50:c3:8b:b9:5b:25:8f:3d:10:8e:37:
78:7f:d5:32:cc:71:b9:5c:38:8d:e0:46:5f:4b:39:
49:f8:2d:6c:3f:96:b3:3a:1b:6a:39:6e:f3:21:5f:
01:b9:89:bf:28:6c:bb:41:bb:5a:6d:12:c2:8f:13:
72:c5:3c:05:f3:c0:8b:22:ae:54:7f:99:d9:35:80:
72:71:32:8e:63:22:18:5b:38:01:f8:73:58:b1:9a:
fb:5e:47:c4:70:e8:00:f3:18:83:21:0e:d2:c4:e6:
e3:6e:99:b7:a4:18:f4:13:14:f5:50:1a:47:aa:c7:
ea:fb:fa:7a:fe:04:2c:5f:c0:3a:a7:8a:69:c8:36:
19:fc:78:30:88:5a:31:e4:41:50:5c:9c:6a:06:5b:
62:d5:b4:75:73:67:1b:6c:6d:80:ec:57:a5:50:f5:
ec:5c:26:95:7a:a9:50:8f:7c:58:1b:1e:c2:d4:59:
e5:26:4d:35:63:b7:ec:e9:b4:29:b6:19:24:96:9c:
79:42:93:6b:66:29:f3:d5:9c:15:2a:b9:d7:b1:88:
eb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C5:30:4A:FD:02:1A:B7:1E:83:A7:19:E6:83:68:71:EC:60:2C:EA
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:06:d4:2a:a6:77:3c:37:4c:cb:84:76:ca:6b:93:30:6b:8d:
b7:43:17:ec:53:25:ae:56:ab:13:a8:64:ac:0d:15:10:0f:24:
55:85:52:58:54:24:e0:56:09:91:d5:4f:03:06:a2:4a:0c:7d:
82:ac:ca:1b:80:f8:59:06:b5:e1:af:5f:c9:19:d3:37:91:06:
75:0c:e6:46:bd:27:4b:bc:19:3a:c5:a1:57:f6:d7:7e:d6:ec:
7b:93:82:a3:cc:cb:75:cf:91:fe:34:da:6f:a1:c5:8a:4c:a0:
75:aa:21:dc:95:f7:cb:ac:49:14:ee:bd:07:b3:de:f9:29:d0:
4c:9a:ef:db:bc:e0:37:88:4c:c8:54:03:b9:19:f7:b5:2c:9a:
3b:be:90:01:78:45:6c:b4:9a:e1:c1:da:2a:92:78:26:c2:49:
2b:e3:1a:fc:3d:ab:77:6b:68:bf:fa:7f:70:fe:40:53:d6:6e:
ea:f7:49:d7:7e:bd:b8:2f:a6:d0:d3:dd:a0:8c:56:21:c1:35:
ee:3d:83:34:b4:dc:10:0e:8f:7e:17:e0:bb:92:da:17:84:49:
32:d5:61:d0:5c:d7:80:7a:b8:03:23:e8:c9:17:d2:6d:34:7c:
05:7d:c5:1c:6e:48:93:4e:0b:ae:03:e5:8c:1f:83:fe:59:27:
46:77:89:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:29:42 2026 by rpki-client