Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.mft
File: 4LZ1Qbjn3z1WRJH-pVjOyynpcIM.mft (raw, json)
Hash identifier: InBdOcWCPJ4JTfffFjSiz4+/FWUXLP5VArAwEdcU+iA=
Subject key identifier: 63:0E:CE:85:E8:A5:BD:FB:DD:2F:AD:23:AA:9C:6D:03:A1:4A:82:12
Authority key identifier: E0:B6:75:41:B8:E7:DF:3D:56:44:91:FE:A5:58:CE:CB:29:E9:70:83
Certificate issuer: /CN=e0b67541b8e7df3d564491fea558cecb29e97083
Certificate serial: 01A0D34A5DEAD471EBBF750D1452779C51C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.mft
Manifest number: 2A
Signing time: Thu 24 Sep 2026 12:01:01 +0000
Manifest this update: Thu 24 Sep 2026 12:01:01 +0000
Manifest next update: Fri 25 Sep 2026 12:01:01 +0000
Files and hashes: 1: 4LZ1Qbjn3z1WRJH-pVjOyynpcIM.crl (hash: mxVbgb8uruI3FuC07ab7XPLTvVhRIEZk7zcBD7OFTGQ=)
2: raStXVKdcpmZECk_0amdM6iFBkM.roa (hash: OkzRGccuAo2/o3w00touVdIm5lxj1wpjHOWmBqY715M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:5d:ea:d4:71:eb:bf:75:0d:14:52:77:9c:51:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b67541b8e7df3d564491fea558cecb29e97083
Validity
Not Before: Sep 24 12:01:01 2026 GMT
Not After : Sep 25 12:01:01 2026 GMT
Subject: CN=630ece85e8a5bdfbdd2fad23aa9c6d03a14a8212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:fa:fb:3c:d0:26:e3:d4:d7:95:ed:36:b1:
be:dc:05:ce:2f:b0:5a:96:62:ad:a7:27:61:db:3f:
a2:c1:92:c5:16:e1:7c:65:84:86:a7:da:cb:77:de:
88:88:e1:e3:e0:04:4d:8b:fb:c1:6c:15:a2:8f:62:
6a:e7:d0:c8:eb:c0:f4:5a:6c:2b:db:af:fa:16:d2:
a8:f2:ea:43:ed:e9:ec:40:a8:6e:9e:5b:fb:bc:6e:
60:86:84:e8:6d:00:53:89:2b:04:1c:b1:63:24:22:
63:81:66:e8:1b:54:5f:51:ff:90:07:de:6a:67:36:
f6:dd:d6:72:20:57:3a:b3:d0:08:58:03:6a:e9:5c:
d4:6a:20:f2:79:8b:f8:db:f0:2c:de:1b:42:09:e0:
42:a0:eb:81:91:1a:de:07:a5:62:0b:90:d0:8b:f1:
cf:8b:18:23:bb:d3:a2:27:b6:ee:14:82:8a:d0:df:
b7:16:e3:a4:36:b6:d2:a8:87:bd:d8:58:c6:f4:e7:
b1:f2:f8:e8:6a:74:42:6b:eb:82:82:95:20:28:58:
fa:04:9a:4a:d6:c7:14:82:6f:f2:56:ab:e4:a0:e7:
36:a2:eb:77:ed:97:a7:d4:0b:77:53:57:92:3b:18:
e5:9d:ad:5b:79:d8:11:8d:fa:e4:9f:d9:82:ac:77:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0E:CE:85:E8:A5:BD:FB:DD:2F:AD:23:AA:9C:6D:03:A1:4A:82:12
X509v3 Authority Key Identifier:
keyid:E0:B6:75:41:B8:E7:DF:3D:56:44:91:FE:A5:58:CE:CB:29:E9:70:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:26:55:d0:fd:fd:d7:d5:f7:7e:e9:79:b9:00:08:55:e8:a9:
25:6d:c4:6c:a9:a8:82:ca:f2:b7:c1:14:a4:ae:be:92:49:aa:
a1:49:92:c8:9a:73:9b:00:d3:6e:de:89:67:a2:e4:e7:16:3a:
33:b9:09:be:19:3b:21:7e:e6:9d:0a:e9:29:f9:01:10:97:87:
0f:09:ac:77:71:b8:41:a1:b7:0f:8f:0e:7d:8f:bb:d7:7f:23:
36:75:ad:da:b3:8e:0b:df:7b:2a:0d:f3:3e:d4:5c:fa:ac:6a:
c4:16:30:dd:a9:8d:7a:d3:0c:27:82:88:29:bf:1c:59:ce:85:
13:52:69:58:76:f4:cd:d5:d9:22:ab:51:2b:fd:a2:c4:5c:ce:
8c:73:29:fc:8f:73:69:ef:94:05:df:88:2d:0a:58:cf:e6:00:
e4:bb:05:38:5e:75:f5:25:7e:cd:28:04:34:ba:0c:66:1e:cf:
76:29:38:78:8a:8c:b4:a0:3a:56:25:f7:49:70:83:7c:5c:23:
cb:88:f0:af:d3:8d:aa:55:b4:6b:1b:e4:e6:37:56:ab:1d:43:
81:85:23:c1:15:87:61:7d:ee:02:1b:d1:61:21:57:66:8b:55:
17:f3:8f:c9:c1:e3:14:02:45:ee:27:57:d2:1a:21:fe:06:89:
b5:c9:7d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:01:40 2026 by rpki-client