Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
File: 3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json)
Hash identifier: 9vS0QaETRgn/hqayifpFr6OVTaCQIjM+Jlb0ysg7jmc=
Subject key identifier: 68:BD:61:E2:6B:FD:A8:A3:3F:4D:77:A0:E6:F9:A7:82:1A:1E:1B:F6
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial: 019CF986EB16FD34918DFF4B2320ACE95206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
Manifest number: 1883
Signing time: Tue 17 Mar 2026 02:01:34 +0000
Manifest this update: Tue 17 Mar 2026 02:01:34 +0000
Manifest next update: Wed 18 Mar 2026 02:01:34 +0000
Files and hashes: 1: 2W3yWm1HMzPskIDqOBKTk5NLDnk.roa (hash: zkzysD/L4UIm9OcLl6P6Mv4weJO+FXhHhd0t2XLROjI=)
2: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: cY/SAvyWzivt2hnPBdEk6H27F+ndmzzFN4yzfXpyIsI=)
3: K3l-f-R4fzp0JNI40Ow_kAwQElE.roa (hash: lzT7cfBjG064YjxJ7JvC+eelDCQdNhykEA7ZwxG3cvA=)
4: PKWl5L-Kf_6-uLjkK3IrLmDHIJ8.roa (hash: a8KnYbin0YfzPy81a2Ft5OJRitrpc3uTgAStWm8odkA=)
5: WVGS-uOqCUSz2p_N5CL2Cz4z-K0.roa (hash: IB5UKLk0ZZT7DbiIeOg9ZlXwRRXDT147MF0fykJ8TKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f9:86:eb:16:fd:34:91:8d:ff:4b:23:20:ac:e9:52:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Validity
Not Before: Mar 17 02:01:34 2026 GMT
Not After : Mar 18 02:01:34 2026 GMT
Subject: CN=68bd61e26bfda8a33f4d77a0e6f9a7821a1e1bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:90:36:1b:ad:63:1d:20:30:0d:7b:74:f8:
2d:68:c8:5f:8c:b0:6b:84:72:85:ae:5e:da:9d:c5:
32:4d:14:ae:72:f5:4a:b7:68:0f:40:7f:43:5c:4c:
03:da:da:cb:13:0a:76:ea:3a:4b:f5:79:e7:22:61:
76:48:3a:0c:65:86:2b:34:ba:1c:71:ec:66:93:a9:
e2:04:d2:7a:2c:4f:ea:10:ac:99:c0:aa:db:cb:b4:
6f:e8:27:4f:05:92:49:c8:27:d7:fc:f8:03:fd:f8:
2e:bf:a2:e9:2b:4f:ec:16:cb:17:ad:d6:14:f3:f3:
f9:48:97:46:5b:fa:32:8e:f6:fc:57:1b:6b:c3:8a:
a2:2c:8f:10:8f:b5:14:1a:9e:74:29:97:b8:4c:bb:
31:9e:54:7e:c7:a4:c4:37:bc:5d:4e:06:0a:02:b4:
a7:15:5b:db:89:65:a6:aa:63:61:7f:9c:d7:86:6a:
7c:a7:ea:f8:0b:7f:dd:62:bb:56:b1:b7:29:81:56:
25:08:4c:8f:a3:91:d7:a3:42:0a:dc:08:65:4d:92:
54:85:7f:07:52:56:86:c8:fa:7b:f0:80:2d:6c:f2:
81:8c:1a:1a:ec:d2:02:2e:d2:b8:17:c0:37:f3:dc:
2d:0c:28:1d:6b:bd:a5:b8:cb:99:91:56:8c:b0:9e:
e2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BD:61:E2:6B:FD:A8:A3:3F:4D:77:A0:E6:F9:A7:82:1A:1E:1B:F6
X509v3 Authority Key Identifier:
keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b7:9c:fd:d6:fc:c8:e6:74:4d:d5:63:f2:05:72:9d:a4:12:
2a:3d:ed:f5:f7:a5:71:e2:a7:b4:c4:54:08:ee:f5:eb:1b:cc:
5f:97:11:b2:cf:bd:82:2a:8a:0c:c4:19:9a:35:75:a3:a0:46:
10:2a:f2:72:96:3d:eb:e0:50:61:01:46:2b:d4:e4:9b:5c:b0:
b5:33:d8:6a:a5:72:92:5e:6f:ed:14:23:e3:8c:54:88:be:b0:
4e:1d:ef:e2:f1:ee:fd:42:95:2b:ed:3a:7c:a1:7e:03:7d:27:
a6:7c:89:76:f0:28:a8:c8:04:69:9c:c6:95:43:e6:e7:09:7f:
d0:8a:d3:26:55:65:c4:f6:e2:c2:1d:26:45:de:fe:a0:95:1d:
96:93:9b:fd:7e:8a:f9:3b:ce:ae:e6:71:47:38:2a:5d:5d:94:
92:41:f3:f1:b2:05:fc:fd:17:eb:98:7b:a2:de:88:d4:f8:30:
c1:6d:39:6c:62:70:ce:96:68:7c:34:0b:4f:aa:47:80:97:86:
47:7d:5e:80:28:e5:bd:0f:73:56:80:5a:58:dd:9e:ea:4f:ab:
7b:ad:a7:b2:d7:9d:19:48:e4:e3:c8:c1:93:7f:53:57:37:61:
77:70:c1:ea:fd:e8:20:30:0f:e0:a3:35:46:e5:27:58:46:2e:
fb:ea:e7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 12:20:48 2026 by rpki-client