Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
File: L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json)
Hash identifier: Q1puM8hfJQoCwL9AtCpQulHODFOO17kA/3RA6SPg8Tc=
Subject key identifier: 89:90:1A:E6:78:60:AF:C9:9F:2B:7A:7B:DD:45:03:1D:24:F6:E6:11
Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
Certificate issuer: /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Certificate serial: 019D265EDE900FD4F28EBA732CAB0BF6A450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 19:00:44 +0000
Manifest this update: Wed 25 Mar 2026 19:00:44 +0000
Manifest next update: Thu 26 Mar 2026 19:00:44 +0000
Files and hashes: 1: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: me0QaqvQYQPw5uV37c3bfhNBgBDBW7pNgw28OduU70A=)
2: rQp0KtrZ2vEnGo7a2SDmUAvFVx4.roa (hash: uy4FLHEMk8dBagqU7F42mpSaD+FcR8r9kkARIXcPG1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:de:90:0f:d4:f2:8e:ba:73:2c:ab:0b:f6:a4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Validity
Not Before: Mar 25 19:00:44 2026 GMT
Not After : Mar 26 19:00:44 2026 GMT
Subject: CN=89901ae67860afc99f2b7a7bdd45031d24f6e611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:74:b0:a5:fc:2b:e8:25:a8:13:42:6d:2a:4e:
78:ef:f9:4d:00:c2:d7:17:be:84:3a:f6:89:bd:3b:
cc:da:2d:20:2a:7a:09:98:ed:43:71:a3:4c:46:01:
f8:13:1e:5d:ec:31:a3:6d:d1:ed:27:12:68:58:b2:
6b:b4:08:db:60:67:23:81:52:6b:1b:c9:c2:91:6c:
18:7c:48:1d:23:53:cd:df:ce:29:58:a8:7e:9c:95:
3d:46:5b:dc:19:19:67:31:28:58:78:2b:ea:58:31:
e3:5f:b3:b0:cb:20:96:8e:98:3e:28:28:b5:63:18:
b3:a0:0b:15:e7:59:47:df:a2:94:4f:20:8e:98:b5:
17:a9:fc:9e:7e:a1:fd:0d:7b:be:dd:27:61:65:21:
96:3a:83:06:f6:88:8a:11:8a:ec:71:8d:6c:41:a3:
13:27:f6:b2:ce:2b:4b:ea:74:d7:11:75:c5:21:70:
9c:12:fc:96:ba:59:d5:03:20:7c:e6:ae:2f:f8:a0:
99:61:8c:93:36:61:46:9d:f8:1d:8e:a9:2a:d0:a0:
c8:78:69:e6:39:65:f8:14:28:c3:9d:d2:c7:5c:19:
4e:87:54:54:4d:16:8c:c2:da:67:fb:aa:2a:49:fb:
b8:b7:fa:b7:1c:ce:d8:f4:7c:50:29:58:0c:38:6b:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:90:1A:E6:78:60:AF:C9:9F:2B:7A:7B:DD:45:03:1D:24:F6:E6:11
X509v3 Authority Key Identifier:
keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:53:68:2e:16:59:13:50:6f:84:d3:7d:e1:3c:11:fc:5b:d9:
c2:72:ec:6b:90:0b:8f:77:42:e9:b9:da:be:e9:aa:52:f7:86:
51:59:08:89:64:d9:06:17:11:85:b1:af:3d:0e:3d:35:6f:8a:
3c:5c:67:5c:90:0b:65:6e:7d:f8:5c:61:7c:32:b4:fb:cf:4d:
25:f5:f7:c2:dd:c1:b3:2a:23:84:8f:ee:7e:21:cb:50:c3:2c:
59:fe:94:db:b9:88:35:f5:4f:37:98:af:23:68:a2:44:e3:f9:
40:0a:b0:25:50:e9:ad:82:08:a4:d0:68:32:d0:79:97:6a:bb:
30:74:36:b5:06:14:31:67:6f:b6:88:40:ab:14:ec:9c:37:6c:
e5:a9:83:32:4e:c9:84:c4:0a:77:a6:67:f8:4f:c2:b4:e2:2d:
c9:73:c1:ae:cd:a3:00:19:f9:ba:50:18:bb:6d:8c:18:a7:ab:
ff:fe:90:ce:ac:61:2d:9c:4b:55:b8:9f:7c:59:0d:79:aa:2a:
e5:1d:4e:cb:c9:e1:04:59:23:df:7e:29:aa:6c:8f:ef:74:38:
fa:2e:40:40:ed:0f:42:07:c8:44:56:c5:b5:f6:dc:d9:19:7d:
74:f0:68:af:3e:9f:69:23:d6:17:52:67:02:2a:36:cc:32:68:
52:47:45:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:34 2026 by rpki-client