Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
File: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft (raw, json)
Hash identifier: 3ZbL49StzwwJRPqYEtX1YKGTodPHOSlaJliKSdIhbcI=
Subject key identifier: 61:DA:6E:26:F4:59:E8:56:4D:9B:5E:8E:A1:59:B3:D8:AD:0A:D4:EA
Authority key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
Certificate issuer: /CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Certificate serial: 019D9DAD28834BFE48C63E9B6636323458B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
Manifest number: 0FFD
Signing time: Fri 17 Apr 2026 23:01:04 +0000
Manifest this update: Fri 17 Apr 2026 23:01:04 +0000
Manifest next update: Sat 18 Apr 2026 23:01:04 +0000
Files and hashes: 1: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl (hash: 6IFKEctBttf5B/7Tounjix6UIIWvUItHzFhzJnee2zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:28:83:4b:fe:48:c6:3e:9b:66:36:32:34:58:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Validity
Not Before: Apr 17 23:01:04 2026 GMT
Not After : Apr 18 23:01:04 2026 GMT
Subject: CN=61da6e26f459e8564d9b5e8ea159b3d8ad0ad4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e8:8b:33:e8:7f:14:87:9f:e0:35:7e:2d:ac:
84:1e:3f:6c:2d:85:bc:72:1d:fe:a2:30:e5:7c:8c:
29:0a:d0:ed:d8:e0:cf:4f:d6:31:10:e2:5c:66:c3:
9c:70:fb:b5:c8:3a:ce:e7:6f:32:ff:d3:01:c4:75:
a9:80:d2:35:02:bd:78:53:9e:ee:f7:21:40:73:76:
02:c3:37:98:f8:10:ef:e8:8c:18:ae:d8:4e:55:30:
d1:07:7a:10:1b:b0:90:7a:6a:72:99:9e:f5:6f:c1:
22:44:b6:bb:62:a5:fc:61:b0:df:d1:02:31:dc:f7:
ca:93:16:cb:fb:d1:32:7f:0f:29:19:36:5d:6b:9a:
58:92:57:e1:c3:ef:59:4b:2b:9a:e4:0a:ea:1d:52:
f9:37:81:29:35:bb:8b:89:55:09:22:5f:4f:20:91:
40:04:ce:c0:28:a5:75:7d:f8:d5:7f:68:98:99:6d:
4e:17:5a:72:94:12:f4:2e:62:71:cd:3a:2e:d4:56:
ab:f5:5b:4e:04:d3:55:2a:08:1f:79:fd:9a:30:44:
df:f4:65:09:b6:ee:7f:17:50:99:3e:7a:03:a2:b4:
e7:f9:e3:b1:27:7c:25:88:55:c8:03:9d:de:0f:f0:
3c:79:53:e0:cb:17:51:a1:70:c7:93:8b:9f:e9:ac:
84:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DA:6E:26:F4:59:E8:56:4D:9B:5E:8E:A1:59:B3:D8:AD:0A:D4:EA
X509v3 Authority Key Identifier:
keyid:2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d2:01:00:d2:66:12:34:a8:5e:f6:a6:59:8b:d4:c0:93:36:
7d:bc:12:5a:53:2e:40:83:e1:e8:3a:bb:c4:72:8b:95:81:e4:
58:52:33:e9:df:69:9e:96:b2:67:c4:71:73:f8:a6:5d:b2:e1:
90:1f:e2:8d:e7:8e:9e:59:33:36:1e:6d:d8:61:54:06:4d:65:
e0:25:1d:77:68:59:65:03:a0:4f:99:30:e0:a3:9a:47:06:08:
e7:bc:77:29:df:f6:7b:6a:37:09:9a:ad:5c:19:48:a4:38:0f:
f2:80:b2:80:71:d6:50:56:df:7c:80:b2:7a:21:f2:64:fc:19:
61:b7:9d:89:ee:54:4c:9b:f8:d1:b7:02:fd:9a:fa:1c:f3:2b:
21:70:bb:da:9c:17:17:8d:48:b8:5b:07:3d:2d:81:9f:08:f2:
83:06:24:62:8a:70:02:94:39:a9:5b:18:50:aa:73:09:e8:41:
0d:99:2f:3c:ad:b3:52:3f:14:1c:72:95:8d:d8:f7:3b:8a:37:
fa:1a:68:1b:d2:cf:c2:49:85:6b:23:11:9e:d0:3a:c3:42:b8:
db:46:29:36:d2:6c:e5:d2:95:02:f8:dc:77:a7:29:55:72:ab:
14:71:ab:42:25:a9:52:b0:f9:f4:2d:9d:64:55:f7:96:bc:33:
14:b5:c5:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2drSiDS/5Ixj6bZjYyNFiwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOGY5OWU4OGRhMDQ2ZGYzMTA0OWQ5N2RkOTEyYWU2NTBk
NTZkNGUwHhcNMjYwNDE3MjMwMTA0WhcNMjYwNDE4MjMwMTA0WjAzMTEwLwYDVQQD
Eyg2MWRhNmUyNmY0NTllODU2NGQ5YjVlOGVhMTU5YjNkOGFkMGFkNGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OiLM+h/FIef4DV+LayEHj9sLYW8
ch3+ojDlfIwpCtDt2ODPT9YxEOJcZsOccPu1yDrO528y/9MBxHWpgNI1Ar14U57u
9yFAc3YCwzeY+BDv6IwYrthOVTDRB3oQG7CQempymZ71b8EiRLa7YqX8YbDf0QIx
3PfKkxbL+9Eyfw8pGTZda5pYklfhw+9ZSyua5ArqHVL5N4EpNbuLiVUJIl9PIJFA
BM7AKKV1ffjVf2iYmW1OF1pylBL0LmJxzTou1Far9VtOBNNVKggfef2aMETf9GUJ
tu5/F1CZPnoDorTn+eOxJ3wliFXIA53eD/A8eVPgyxdRoXDHk4uf6ayE8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHabib0WehWTZtejqFZs9itCtTqMB8GA1UdIwQY
MBaAFC+PmeiNoEbfMQSdl92RKuZQ1W1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80NDY3ZTgtOWI5NS00MDUwLWI2Mzkt
MTJkNTJmMWU1NGRiLzEvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80NDY3ZTgtOWI5NS00MDUwLWI2MzktMTJkNTJmMWU1NGRi
LzEvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdIBANJm
EjSoXvamWYvUwJM2fbwSWlMuQIPh6Dq7xHKLlYHkWFIz6d9pnpayZ8Rxc/imXbLh
kB/ijeeOnlkzNh5t2GFUBk1l4CUdd2hZZQOgT5kw4KOaRwYI57x3Kd/2e2o3CZqt
XBlIpDgP8oCygHHWUFbffICyeiHyZPwZYbedie5UTJv40bcC/Zr6HPMrIXC72pwX
F41IuFsHPS2BnwjygwYkYopwApQ5qVsYUKpzCehBDZkvPK2zUj8UHHKVjdj3O4o3
+hpoG9LPwkmFayMRntA6w0K420YpNtJs5dKVAvjcd6cpVXKrFHGrQiWpUrD59C2d
ZFX3lrwzFLXFLw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:05:14 2026 by rpki-client