Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier: ay0mNPpc3OApjRJ6RfjfRjGSkykNJoVAZm4TZyYaAOM=
Subject key identifier: 22:46:19:08:70:9C:AD:A2:90:65:FD:33:37:44:7F:7D:65:65:83:77
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 019F93FFD3280A662F4ADA8F7052FB9BD0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 12:00:44 +0000
Manifest this update: Fri 24 Jul 2026 12:00:44 +0000
Manifest next update: Sat 25 Jul 2026 12:00:44 +0000
Files and hashes: 1: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: 5DV2Z//MREeFeDRaZaRLvHw4r0BpfWK8gFqfDvIHKHY=)
2: cbu2nsq0_E-KnigNEJpP4D0mZdA.roa (hash: atZeFfSMWx6yJCaBl0p4VHQ5do/K238XneHi5TYWvrI=)
3: kAVnp8aXF-jNnIEpkFtrGOjA71Q.roa (hash: ZozqlRSOeS+zKJOBns48YstVdkSISYcGeUrQVUA0HJM=)
4: nUrWqoPlEcK0XKJOG-oMfsZtnp8.roa (hash: ybZD4RQkjzxlQtQy6MswWNgOU2zvBWHPKmFz1vKMzKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:d3:28:0a:66:2f:4a:da:8f:70:52:fb:9b:d0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: Jul 24 12:00:44 2026 GMT
Not After : Jul 25 12:00:44 2026 GMT
Subject: CN=22461908709cada29065fd3337447f7d65658377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:48:98:ad:57:4d:c6:8b:53:23:d6:2c:f1:
89:be:df:98:aa:c5:dc:45:b7:cc:cd:f7:fb:97:98:
f1:eb:9c:6e:64:37:ea:56:20:e6:df:89:3e:27:60:
eb:7a:66:24:8c:9e:d7:17:be:3e:12:87:96:94:d9:
70:10:9c:86:1c:12:95:17:56:f4:07:82:c7:d0:c3:
0e:b5:8a:25:bc:9a:58:30:20:ec:71:27:35:0c:47:
8e:8f:21:a7:7f:84:79:8c:60:4a:a8:3c:cb:90:c4:
b4:38:c1:8a:a6:5b:b2:b5:5e:3c:5b:a0:dc:cf:52:
55:bc:20:60:0a:06:d1:2a:0f:19:b0:ea:b8:2b:43:
33:00:08:b3:29:06:5b:bf:66:eb:7c:22:af:99:ba:
26:0b:e5:af:96:44:13:03:12:2c:24:5f:a7:44:24:
b3:bf:c6:42:f8:b8:77:8d:35:75:69:a2:bc:a7:d5:
50:b4:10:ac:30:c0:bb:3d:75:25:d7:14:14:eb:6a:
7a:7f:ce:98:09:d6:5e:c6:85:4e:cf:38:ad:19:f0:
2b:72:00:70:65:3a:0c:af:1f:ac:3c:fd:46:3a:c6:
98:6e:1b:b6:00:c8:a9:f2:3a:25:af:87:2a:21:58:
69:74:be:5e:b8:8a:61:7c:05:41:78:10:4b:ce:f4:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:46:19:08:70:9C:AD:A2:90:65:FD:33:37:44:7F:7D:65:65:83:77
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0b:72:a1:a0:83:f1:93:65:98:3e:b5:8f:e9:52:74:74:d9:
d6:9f:c9:b3:60:84:1c:28:a6:af:18:77:6f:b8:17:4f:db:83:
27:74:7a:da:d5:7c:44:70:40:02:36:50:7f:73:b4:ff:a5:fc:
f7:b8:16:09:7d:c2:1a:45:42:5e:e8:de:09:a3:cf:4e:25:0b:
bd:2b:0e:7f:ad:a3:47:32:12:63:ad:8c:fb:dc:3c:50:8e:f6:
3f:ba:31:eb:5b:06:97:17:25:2d:e0:e7:c9:20:6b:20:f6:06:
90:89:0a:aa:03:f3:b6:ee:0b:41:e1:eb:69:71:71:ab:06:49:
3b:ca:77:70:8a:ed:4a:8d:98:29:11:80:5d:53:0d:60:14:6d:
c8:07:a8:fb:f6:ed:7a:d9:06:b4:f1:f9:12:79:0e:fd:7a:04:
82:85:4f:aa:ad:44:8d:9d:4e:47:f1:66:78:93:56:5d:02:9d:
0c:e5:2e:f2:ab:f9:7c:bb:c4:8d:3d:34:0a:8c:24:0e:40:61:
44:94:75:02:a7:5c:dc:f5:e4:8c:77:c3:d7:59:30:7c:46:12:
35:a3:82:67:36:42:1e:6d:dd:d0:25:6c:6a:66:16:22:ac:19:
9d:d7:07:19:04:28:a7:ec:42:17:02:a9:35:ac:2a:21:be:4c:
45:5b:79:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:17:22 2026 by rpki-client