Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier: EiRVk4F/oyp1IEtDp6DCnMGbpLs9hnymzL2UEOe+GE4=
Subject key identifier: 4E:F0:E1:A2:ED:A5:8E:61:AB:72:75:46:8A:82:84:C2:61:D8:1A:BA
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 01A125AFD4B35959867BF2B15C953D207456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number: 1A9C
Signing time: Sat 10 Oct 2026 12:00:42 +0000
Manifest this update: Sat 10 Oct 2026 12:00:42 +0000
Manifest next update: Sun 11 Oct 2026 12:00:42 +0000
Files and hashes: 1: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: 55lEwT5Ud+WII/CE+H/51fdb5p0c8x1SOGlxsTGxyDY=)
2: cbu2nsq0_E-KnigNEJpP4D0mZdA.roa (hash: atZeFfSMWx6yJCaBl0p4VHQ5do/K238XneHi5TYWvrI=)
3: kAVnp8aXF-jNnIEpkFtrGOjA71Q.roa (hash: ZozqlRSOeS+zKJOBns48YstVdkSISYcGeUrQVUA0HJM=)
4: nUrWqoPlEcK0XKJOG-oMfsZtnp8.roa (hash: ybZD4RQkjzxlQtQy6MswWNgOU2zvBWHPKmFz1vKMzKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:af:d4:b3:59:59:86:7b:f2:b1:5c:95:3d:20:74:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: Oct 10 12:00:42 2026 GMT
Not After : Oct 11 12:00:42 2026 GMT
Subject: CN=4ef0e1a2eda58e61ab7275468a8284c261d81aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:4d:27:68:b9:e8:cf:9f:51:1d:63:2f:70:
e7:15:04:b9:2d:b8:bb:c5:cd:f3:1f:5c:04:16:07:
15:d2:76:04:bf:a0:4c:7e:d7:7a:c4:6b:0f:47:26:
7d:5c:35:1c:82:1f:a5:3b:6f:ba:37:ee:dc:64:f6:
7b:f7:b6:54:86:c2:b9:8c:6a:b9:cc:b8:b0:35:f1:
b3:c9:0e:46:00:78:f4:c5:27:5e:2f:bb:41:ec:7b:
7a:7a:8b:e0:47:e4:a9:00:43:70:db:19:eb:ad:3c:
c5:7b:af:b2:15:73:27:ff:a4:c9:ab:e7:76:43:39:
f3:70:b1:65:68:2a:f7:34:a5:dc:72:9e:b1:13:db:
0a:30:96:ee:64:d2:e5:2d:2e:7e:47:a4:1a:1f:fa:
f7:ab:6f:7b:84:0f:d0:1f:86:87:25:f8:a4:d1:78:
8b:db:8d:04:ae:40:78:23:cc:34:df:7b:a3:a7:c5:
67:7a:65:06:c0:8a:f5:60:5e:61:57:fe:dd:06:f3:
d3:dc:cb:c2:2a:19:d7:ed:17:93:71:c9:be:8c:ec:
e6:11:25:3a:4a:cd:df:04:db:67:03:92:f1:a6:de:
94:dc:9b:a5:9d:57:8c:3d:89:0f:d6:d1:d1:ce:1a:
55:1e:2d:4e:64:cc:28:d4:30:3a:25:e1:4a:8d:0c:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F0:E1:A2:ED:A5:8E:61:AB:72:75:46:8A:82:84:C2:61:D8:1A:BA
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e8:73:fc:d9:d6:c2:a7:ed:0a:79:38:6e:90:86:43:3d:3b:
0f:9d:76:14:06:06:e6:88:c8:d2:3b:a6:c3:80:44:dc:b2:2f:
2e:26:f1:af:33:03:7a:e6:60:47:f6:97:99:92:d2:3e:36:e8:
3e:12:d3:6c:60:1d:82:a6:f1:75:92:62:f4:77:a0:2a:cb:d0:
3f:eb:6e:96:bd:f1:30:c0:7d:9f:49:10:30:62:6c:db:f7:86:
59:0e:22:75:60:3a:e7:ce:5e:7c:a0:74:9d:1e:10:87:45:6c:
8e:85:a3:14:a8:fd:32:e1:cd:dc:24:be:f5:5b:77:06:39:79:
b3:f2:fc:43:26:f7:28:27:f4:3c:97:73:36:86:5d:60:e4:57:
60:61:a8:81:08:74:af:07:c8:15:1c:14:d4:c5:14:ea:0e:15:
79:5e:36:49:4a:3c:12:d6:bd:f7:b5:56:e2:30:d9:3f:2e:75:
37:4d:35:2e:a9:1e:6f:69:9a:85:ff:4f:46:e9:62:55:ca:ed:
90:a4:19:46:66:77:be:75:d6:a6:d1:30:f3:32:18:61:91:d9:
e0:af:5c:fa:ef:4d:19:33:aa:a6:5e:1d:78:af:22:d8:66:24:
ac:5a:1c:e4:b7:56:d3:c5:c6:f1:30:f9:d9:b6:3d:9d:a9:49:
ed:36:62:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElr9SzWVmGe/KxXJU9IHRWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkOWUzMWM5MDI5ZWU0NGJkNjgxYjUxNTMzMDMzNWM2YTFj
ZmRlZWUwHhcNMjYxMDEwMTIwMDQyWhcNMjYxMDExMTIwMDQyWjAzMTEwLwYDVQQD
Eyg0ZWYwZTFhMmVkYTU4ZTYxYWI3Mjc1NDY4YTgyODRjMjYxZDgxYWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb1NJ2i56M+fUR1jL3DnFQS5Lbi7
xc3zH1wEFgcV0nYEv6BMftd6xGsPRyZ9XDUcgh+lO2+6N+7cZPZ797ZUhsK5jGq5
zLiwNfGzyQ5GAHj0xSdeL7tB7Ht6eovgR+SpAENw2xnrrTzFe6+yFXMn/6TJq+d2
QznzcLFlaCr3NKXccp6xE9sKMJbuZNLlLS5+R6QaH/r3q297hA/QH4aHJfik0XiL
240ErkB4I8w033ujp8VnemUGwIr1YF5hV/7dBvPT3MvCKhnX7ReTccm+jOzmESU6
Ss3fBNtnA5Lxpt6U3JulnVeMPYkP1tHRzhpVHi1OZMwo1DA6JeFKjQyMKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7w4aLtpY5hq3J1RoqChMJh2Bq6MB8GA1UdIwQY
MBaAFC2eMckCnuRL1oG1FTMDNcahz97uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMt
MDhkYTY2NTJhODY3LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMtMDhkYTY2NTJhODY3
LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuhz/NnW
wqftCnk4bpCGQz07D512FAYG5ojI0jumw4BE3LIvLibxrzMDeuZgR/aXmZLSPjbo
PhLTbGAdgqbxdZJi9HegKsvQP+tulr3xMMB9n0kQMGJs2/eGWQ4idWA6585efKB0
nR4Qh0VsjoWjFKj9MuHN3CS+9Vt3Bjl5s/L8Qyb3KCf0PJdzNoZdYORXYGGogQh0
rwfIFRwU1MUU6g4VeV42SUo8Eta997VW4jDZPy51N001Lqkeb2mahf9PRuliVcrt
kKQZRmZ3vnXWptEw8zIYYZHZ4K9c+u9NGTOqpl4deK8i2GYkrFoc5LdW08XG8TD5
2bY9nalJ7TZi6w==
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:19:16 2026 by rpki-client