
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
File: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft (raw, json)
Hash identifier: FvYJwqMv1WwQ/z1d4psfBB2hPLS2gcdSimCgvbA95WE=
Subject key identifier: C9:53:A1:BC:53:E0:99:86:45:62:E4:6C:5D:00:BB:6B:FE:D5:74:21
Authority key identifier: BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E
Certificate issuer: /CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
Certificate serial: 019D371B9915C0D983B35C68B2374B28F660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 01:00:48 +0000
Manifest this update: Sun 29 Mar 2026 01:00:48 +0000
Manifest next update: Mon 30 Mar 2026 01:00:48 +0000
Files and hashes: 1: HkESZav4s-gaBhayorEKTs_dvWY.roa (hash: 4pdtiZ94ktcZKGQXEiN4JbBohEK0TkGQ1CIQ5Piq3Ns=)
2: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl (hash: IkZX5ppc0y230SxYC8l7UHrPThsXBQkpEGHm+hLbgM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:99:15:c0:d9:83:b3:5c:68:b2:37:4b:28:f6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
Validity
Not Before: Mar 29 01:00:48 2026 GMT
Not After : Mar 30 01:00:48 2026 GMT
Subject: CN=c953a1bc53e099864562e46c5d00bb6bfed57421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:04:c5:b2:ca:24:24:32:f8:cb:39:7f:f0:
36:25:04:82:28:9e:b7:4a:ca:f2:d5:a4:96:99:13:
9b:34:18:d1:60:dc:fc:31:ec:04:e0:f4:43:00:c8:
44:30:22:23:03:c8:06:ff:8e:65:da:5f:5d:68:fa:
e1:42:73:50:4a:19:7d:54:0c:4a:bd:4b:62:ba:f7:
34:d3:6b:38:6b:2f:9f:63:9a:39:8f:b7:a0:4e:86:
d0:71:6b:5f:c7:c8:47:8c:54:f1:31:c0:60:25:7d:
97:c7:0b:82:ff:41:3f:15:49:a1:90:63:69:4e:50:
f9:9c:fb:1f:5b:ee:90:5a:cb:e6:80:03:50:1c:7d:
d8:f7:5f:1f:d4:d5:43:41:1e:45:dc:25:38:10:f4:
6d:f9:6c:50:51:f3:b6:16:c2:98:d9:04:ab:cc:4a:
70:c3:9d:a7:3a:db:72:27:12:e8:77:7b:6c:59:3a:
cd:12:80:60:12:4e:a1:74:59:6a:fe:07:c3:b1:12:
98:c4:2f:5e:c1:13:7a:65:df:9f:c7:75:6c:e3:c2:
16:75:c1:ab:98:48:0f:a6:da:65:d1:ab:e2:d5:1c:
d7:72:26:60:64:cf:72:ff:68:c6:01:88:e2:c2:71:
7b:29:9c:4c:12:e3:1f:7d:86:b7:48:8a:61:55:3b:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:53:A1:BC:53:E0:99:86:45:62:E4:6C:5D:00:BB:6B:FE:D5:74:21
X509v3 Authority Key Identifier:
keyid:BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9f:52:db:98:e9:13:99:5b:24:80:ef:ab:fb:18:4a:4f:1f:
c8:34:ea:35:78:67:61:cf:27:22:6b:5f:d6:a3:b2:1b:07:c8:
3b:e5:54:f1:7c:2f:b8:f4:63:e7:83:4c:6f:9b:80:44:a2:e0:
aa:14:01:6b:c3:2c:19:72:2a:52:f8:e2:03:86:5f:17:de:6a:
4e:f0:98:79:67:dd:c4:fd:44:9a:4b:1a:93:e7:f7:a1:a4:7d:
69:a9:13:9c:8b:be:11:a8:fb:5d:f4:4e:08:ac:e2:96:cd:2b:
fc:80:9a:1d:1e:ae:db:05:7e:83:55:59:6b:83:02:94:e1:93:
bc:e3:5c:48:93:d8:7c:4c:73:68:9b:de:3d:cb:c5:f6:07:49:
04:1e:f2:72:3e:10:88:d1:6c:86:36:9d:9a:8a:3b:8e:a6:a8:
f5:0d:6d:01:e1:a2:2e:7b:0c:6e:fc:a2:90:1d:50:60:69:75:
34:01:00:b6:9c:c4:50:b6:4d:35:54:2a:78:51:e4:b1:b4:5a:
a4:64:17:17:c8:3e:dd:5d:0c:fb:41:96:e7:82:81:ef:1a:a7:
77:db:11:41:c9:7f:27:33:7c:2d:76:0b:ad:c4:d8:6d:dc:de:
f4:ce:84:41:3a:81:03:d7:eb:05:81:1f:44:39:77:30:66:a3:
66:7f:43:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:31 2026 by rpki-client