Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier: kRb2/sv54KOiNZE/Qr62KtdeEm21yZ0PtEmKBsLQ1Iw=
Subject key identifier: FF:46:3C:7F:5D:2A:D1:A0:C0:38:1C:7E:12:80:CF:38:EC:16:F3:B3
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 019D9BF546985BBC95E97EB9350A5B88BDE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 15:00:35 +0000
Manifest this update: Fri 17 Apr 2026 15:00:35 +0000
Manifest next update: Sat 18 Apr 2026 15:00:35 +0000
Files and hashes: 1: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: B4yUVSUwvfGUS8OuijPLQw4XjcIA6fNTKdJc3uPCOPI=)
2: cbu2nsq0_E-KnigNEJpP4D0mZdA.roa (hash: atZeFfSMWx6yJCaBl0p4VHQ5do/K238XneHi5TYWvrI=)
3: kAVnp8aXF-jNnIEpkFtrGOjA71Q.roa (hash: ZozqlRSOeS+zKJOBns48YstVdkSISYcGeUrQVUA0HJM=)
4: nUrWqoPlEcK0XKJOG-oMfsZtnp8.roa (hash: ybZD4RQkjzxlQtQy6MswWNgOU2zvBWHPKmFz1vKMzKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:46:98:5b:bc:95:e9:7e:b9:35:0a:5b:88:bd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: Apr 17 15:00:35 2026 GMT
Not After : Apr 18 15:00:35 2026 GMT
Subject: CN=ff463c7f5d2ad1a0c0381c7e1280cf38ec16f3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dd:82:78:5a:34:54:70:a8:92:9f:81:cf:24:
c7:97:ea:76:3c:10:6c:0e:33:2e:16:c9:ab:6c:f8:
aa:b5:e7:29:31:0d:5f:f9:64:e7:b3:e1:6c:a8:8d:
ce:45:94:83:00:58:5d:10:a7:02:a2:0b:26:24:ea:
c1:c1:bd:50:47:4e:44:97:60:ea:7c:fd:eb:e4:80:
4f:48:35:50:46:1d:36:52:94:e9:b7:66:40:9c:cb:
eb:f4:1d:d4:af:7b:c4:1b:96:c9:ce:ef:93:4e:59:
d4:f3:cb:8e:7b:d2:40:7b:77:01:9b:cc:ee:aa:c0:
a8:db:60:92:d7:22:42:97:5a:69:dc:76:33:00:b6:
12:37:12:a2:3a:79:a9:23:52:2d:79:1a:5f:6a:6c:
00:00:38:7a:9b:de:70:d0:e3:5d:99:15:7f:ea:43:
ce:38:fe:bb:6b:2e:0e:ba:36:5e:1b:b5:0f:93:55:
11:02:1b:c5:5f:7f:80:67:d3:6c:c0:a6:13:fb:74:
7c:5c:1d:9d:14:ae:9a:7a:9e:21:38:09:0c:27:49:
af:61:e5:37:a1:79:fa:8a:dc:89:1c:dc:20:7e:4f:
ed:65:3d:ac:f4:63:7a:6f:e3:ad:9b:78:e2:f5:48:
87:01:e6:af:cb:c7:ef:83:f8:02:27:38:fd:67:4a:
5a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:46:3C:7F:5D:2A:D1:A0:C0:38:1C:7E:12:80:CF:38:EC:16:F3:B3
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:43:96:4d:90:5f:b8:d3:92:e7:55:5c:dc:1a:14:e2:47:0e:
bf:6d:a6:72:f7:46:e5:b9:79:4a:cf:8c:e2:f1:4d:b7:24:c4:
ee:95:b4:f3:26:23:28:9b:cd:a6:30:fc:85:9b:f2:9e:7d:ca:
fd:08:ac:13:5a:20:69:c6:da:d2:f0:e4:12:d5:07:99:e4:9a:
b6:98:ae:41:fd:2a:be:60:86:03:7b:93:3c:31:93:d4:3a:f6:
d9:37:a1:7e:45:a9:70:f1:d1:0c:a0:69:79:bc:87:5b:cb:7c:
9d:f0:32:37:03:eb:8b:ab:f4:f6:97:c0:71:0e:5e:38:14:c2:
d8:6e:08:08:30:a0:76:38:70:c1:43:79:16:c4:a0:24:ec:40:
40:42:45:04:b6:ca:9b:df:05:60:34:a3:af:8a:b2:cf:bf:3a:
c5:34:2e:5c:c1:12:45:e4:00:dc:c7:12:4b:d2:74:f9:66:ba:
77:9d:14:c5:47:25:ca:2d:31:06:58:15:83:54:55:3b:84:06:
cc:31:cc:10:32:97:aa:81:b2:a7:1d:3b:1f:c4:d0:06:30:9a:
76:25:e8:16:75:71:05:77:01:a4:33:e5:3b:30:fe:4e:66:f9:
f8:95:61:4b:aa:1f:b9:8c:d4:97:ea:14:b2:20:8f:e4:39:a3:
16:36:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:57:48 2026 by rpki-client