Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
File: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft (raw, json)
Hash identifier: cDKwmMjUeYguEgCLIR+Ll1NHLU7HFpdSL/T9TbR+Y70=
Subject key identifier: 26:3B:09:BE:A8:89:1A:B1:85:DF:A4:AB:13:03:25:6F:5A:C3:EA:A7
Authority key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
Certificate issuer: /CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Certificate serial: 019D29CEADDA4640005C0926D2A1D49AB0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
Manifest number: 0FC1
Signing time: Thu 26 Mar 2026 11:01:43 +0000
Manifest this update: Thu 26 Mar 2026 11:01:43 +0000
Manifest next update: Fri 27 Mar 2026 11:01:43 +0000
Files and hashes: 1: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl (hash: jkq4aafYP1jNA589kirxRm0ZuA69MNDC8Mn7e8CSP0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:ad:da:46:40:00:5c:09:26:d2:a1:d4:9a:b0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Validity
Not Before: Mar 26 11:01:43 2026 GMT
Not After : Mar 27 11:01:43 2026 GMT
Subject: CN=263b09bea8891ab185dfa4ab1303256f5ac3eaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:be:56:b1:db:bf:61:55:ab:c7:91:10:9b:95:
f8:8f:fe:2c:13:cd:51:54:77:75:2b:85:05:bf:d3:
49:d8:b9:0a:84:89:ed:e0:db:8e:a4:f4:48:c9:1b:
77:6b:9e:95:0f:e4:4d:a6:66:9b:52:d9:ae:16:26:
e4:b8:e6:8e:25:43:c8:bc:ae:c0:7b:3f:d5:ae:36:
69:d4:a5:a9:5e:59:1b:f3:6f:52:1c:c0:86:5f:a3:
88:b9:1a:4b:1e:b5:b7:8a:c5:bb:99:70:dc:80:cc:
46:49:7a:1f:1f:08:32:83:2a:9f:0b:13:d6:7a:b8:
2f:f6:bf:81:b3:26:fb:b8:61:8a:6c:40:83:77:1e:
d7:b1:e9:5b:df:96:af:09:10:dc:15:26:68:74:0b:
69:a1:dc:aa:0a:8c:dc:7e:88:12:ec:99:30:76:d5:
19:5e:1f:a2:cb:86:76:28:e1:cc:ff:3c:84:a9:75:
b9:2a:07:eb:43:85:50:3b:88:e8:e5:5e:0f:f2:69:
c9:a7:69:d3:8e:87:19:95:ca:e4:fb:ef:07:89:e4:
bd:ca:08:f5:0b:68:0e:b5:33:47:d2:34:c8:d4:23:
49:6e:c6:ef:04:fd:4c:e0:18:d8:6b:2f:8f:7e:8e:
15:bc:14:09:2f:e8:28:70:c3:8f:9a:e6:3c:37:ee:
e9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3B:09:BE:A8:89:1A:B1:85:DF:A4:AB:13:03:25:6F:5A:C3:EA:A7
X509v3 Authority Key Identifier:
keyid:2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:71:3c:54:9c:45:a2:16:d0:97:9d:e8:b6:0b:67:f4:f4:1f:
56:8b:75:49:d7:99:1a:6c:e9:2e:77:fe:91:84:d6:e1:0c:6e:
18:4d:4c:7d:da:4d:c0:45:65:b0:ed:1b:43:ca:8b:38:8f:e7:
7b:16:80:0b:cb:ca:8d:90:6d:df:15:fe:28:9c:3a:01:c1:10:
5d:8f:5d:cf:a2:4c:a4:6a:5a:4c:bd:7d:c6:13:d8:0f:bc:ef:
7c:d7:d1:36:8e:b6:0b:76:0c:98:2d:46:42:60:1f:aa:d2:4a:
1d:9c:33:3a:41:e5:25:f6:02:d8:37:c3:e8:4d:61:45:a2:f3:
97:aa:0f:53:ca:13:d5:45:9c:06:10:2f:2a:2a:ee:61:a6:c5:
ff:0c:3c:c0:e9:c2:14:46:78:96:27:87:32:d4:df:ca:17:43:
44:95:b7:ee:fd:59:c6:d9:21:d3:8e:45:0d:1e:79:21:aa:3d:
64:5f:a6:17:f6:cc:9b:17:cf:a4:2a:1b:e4:50:42:48:7a:cd:
ff:9b:9e:be:3b:fa:24:54:35:36:ec:e5:98:b3:3f:15:73:a3:
8e:da:eb:c9:35:f8:3d:fb:83:42:6e:23:dd:9b:45:c1:6b:5f:
4b:4b:15:21:a8:27:97:da:2f:54:ae:15:e6:36:a2:f4:ac:3d:
9e:8d:0e:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzq3aRkAAXAkm0qHUmrC6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOGY5OWU4OGRhMDQ2ZGYzMTA0OWQ5N2RkOTEyYWU2NTBk
NTZkNGUwHhcNMjYwMzI2MTEwMTQzWhcNMjYwMzI3MTEwMTQzWjAzMTEwLwYDVQQD
EygyNjNiMDliZWE4ODkxYWIxODVkZmE0YWIxMzAzMjU2ZjVhYzNlYWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA475Wsdu/YVWrx5EQm5X4j/4sE81R
VHd1K4UFv9NJ2LkKhInt4NuOpPRIyRt3a56VD+RNpmabUtmuFibkuOaOJUPIvK7A
ez/VrjZp1KWpXlkb829SHMCGX6OIuRpLHrW3isW7mXDcgMxGSXofHwgygyqfCxPW
ergv9r+Bsyb7uGGKbECDdx7Xselb35avCRDcFSZodAtpodyqCozcfogS7JkwdtUZ
Xh+iy4Z2KOHM/zyEqXW5KgfrQ4VQO4jo5V4P8mnJp2nTjocZlcrk++8HieS9ygj1
C2gOtTNH0jTI1CNJbsbvBP1M4BjYay+Pfo4VvBQJL+gocMOPmuY8N+7p9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCY7Cb6oiRqxhd+kqxMDJW9aw+qnMB8GA1UdIwQY
MBaAFC+PmeiNoEbfMQSdl92RKuZQ1W1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80NDY3ZTgtOWI5NS00MDUwLWI2Mzkt
MTJkNTJmMWU1NGRiLzEvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80NDY3ZTgtOWI5NS00MDUwLWI2MzktMTJkNTJmMWU1NGRi
LzEvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnE8VJxF
ohbQl53otgtn9PQfVot1SdeZGmzpLnf+kYTW4QxuGE1MfdpNwEVlsO0bQ8qLOI/n
exaAC8vKjZBt3xX+KJw6AcEQXY9dz6JMpGpaTL19xhPYD7zvfNfRNo62C3YMmC1G
QmAfqtJKHZwzOkHlJfYC2DfD6E1hRaLzl6oPU8oT1UWcBhAvKiruYabF/ww8wOnC
FEZ4lieHMtTfyhdDRJW37v1Zxtkh045FDR55Iao9ZF+mF/bMmxfPpCob5FBCSHrN
/5uevjv6JFQ1NuzlmLM/FXOjjtrryTX4PfuDQm4j3ZtFwWtfS0sVIagnl9ovVK4V
5jai9Kw9no0OWg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:41:34 2026 by rpki-client