Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File: L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier: swh84vq8XHhKKHVe/5Y0mSa6ZUfBIIFhNctKYg2YdY4=
Subject key identifier: E8:41:FA:45:7D:7A:67:EC:9F:44:CF:5B:04:61:F5:05:A8:98:47:16
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 019D27E054F340F3760F97E031E55454ED0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number: 18A7
Signing time: Thu 26 Mar 2026 02:01:46 +0000
Manifest this update: Thu 26 Mar 2026 02:01:46 +0000
Manifest next update: Fri 27 Mar 2026 02:01:46 +0000
Files and hashes: 1: 8jWlz2m9nCdJLhol3WggXkpKwJ0.roa (hash: 10a8KHPkSWoPLzvv6hdEYed7WTrDaMTcRydUqLRuJGw=)
2: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: J0aSxG8mEqrLq3VIfeQW3C7unKVjXOwyq9niznNgFVo=)
3: N4cB8WWtysbWqDi87bGAQQ2rt4E.roa (hash: S3j7rc4gR5B77q9DRMpITCq3BO39bGjWQciU5Aajs0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:54:f3:40:f3:76:0f:97:e0:31:e5:54:54:ed:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Mar 26 02:01:46 2026 GMT
Not After : Mar 27 02:01:46 2026 GMT
Subject: CN=e841fa457d7a67ec9f44cf5b0461f505a8984716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:cd:bd:db:d7:2c:c6:48:20:4d:13:1a:63:
dc:80:99:d9:bb:ff:09:ce:cd:6a:fb:bf:05:e9:c1:
d6:91:7b:99:5e:25:07:5c:6e:86:ef:de:3a:1b:fe:
af:f5:6e:b3:a1:85:de:2e:36:fb:ca:34:d6:43:9e:
8d:15:75:6b:43:88:81:d1:ce:44:71:52:28:58:0a:
d6:9b:b7:59:f5:8a:00:ef:12:2f:c3:02:0d:6d:79:
a3:0f:28:18:06:b1:0c:5e:59:4f:92:8b:e6:06:6c:
74:5d:4e:28:b8:52:2a:82:02:3c:45:41:09:cd:71:
e0:67:59:92:11:01:1a:f7:f9:eb:7a:40:9a:32:80:
8f:09:7f:6d:88:9b:4d:c1:a8:dd:69:78:58:e5:3f:
db:b1:a3:86:24:61:24:0b:f9:bd:9f:0a:4d:7d:b1:
c0:81:fd:22:fb:a6:7f:bc:0c:98:ce:d1:96:d8:89:
f2:a2:4e:8e:37:b8:e3:01:2d:31:0e:6e:80:e0:13:
c8:75:31:a4:a6:f0:0f:4d:78:d7:70:94:d2:6e:0e:
f6:f1:50:e8:e7:f0:48:ac:3c:ed:21:dc:9f:ed:63:
51:dc:21:54:5d:85:d7:2e:a7:09:5f:47:6e:83:55:
1a:a4:a3:98:73:ae:8b:55:43:c2:92:cc:22:eb:cb:
8c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:41:FA:45:7D:7A:67:EC:9F:44:CF:5B:04:61:F5:05:A8:98:47:16
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c6:90:77:49:52:ee:00:0f:d8:a5:16:54:71:95:ad:0a:e1:
67:12:28:a4:3f:17:a8:aa:61:88:11:b5:fb:01:52:19:61:55:
3c:5c:15:d9:d8:38:df:11:60:19:df:be:d2:f7:6e:f9:6b:6d:
a6:48:cf:84:19:05:ea:e5:19:f6:d9:f2:53:54:a4:d5:0b:3d:
ed:7b:f4:18:6a:aa:cb:6a:e6:16:9f:e9:25:cc:7b:20:52:e6:
93:d2:3d:46:87:41:2d:a4:95:62:4f:60:46:f1:b4:2c:6a:4d:
ad:8e:45:fc:63:49:2f:2a:3f:28:b4:15:2d:d5:48:51:fb:82:
32:da:d8:13:c5:8e:bb:f9:95:09:34:9e:d6:6b:e4:ae:63:44:
ec:09:e4:e9:f5:96:2f:9f:7b:83:20:85:98:9a:bb:a3:85:bc:
06:c6:59:98:a9:95:06:ff:61:49:12:b3:a9:1c:1e:26:96:88:
0e:32:f4:94:24:b8:c7:2b:b6:fd:b5:2e:b4:0a:b9:58:41:ef:
b1:57:08:88:0f:7a:f9:dd:80:e9:a7:3c:5f:c9:ce:2e:3c:10:
f4:d8:ff:66:d7:f0:02:54:9c:62:ed:d1:7c:33:b9:f5:3a:23:
7a:8c:d0:c0:d1:ac:ca:46:8e:e7:52:09:53:fe:6c:e9:32:7d:
d2:59:e8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:04 2026 by rpki-client