Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
File: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft (raw, json)
Hash identifier: bGCIcz3UYF3z1AMlYt/xzjzeOg7Q4YOOQw6pyo32QXs=
Subject key identifier: 7E:AC:D7:63:08:CA:75:6C:9F:CC:A3:E9:D4:1B:97:D0:3D:A5:B9:A3
Authority key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
Certificate issuer: /CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Certificate serial: 019CAC479746E9339A7959648EA65EE03F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
Manifest number: 0F80
Signing time: Mon 02 Mar 2026 02:01:38 +0000
Manifest this update: Mon 02 Mar 2026 02:01:38 +0000
Manifest next update: Tue 03 Mar 2026 02:01:38 +0000
Files and hashes: 1: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl (hash: 0oehEbjk6R89JqP/GPWqjJcrwM5j7iz7VTSSB8QU4ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:97:46:e9:33:9a:79:59:64:8e:a6:5e:e0:3f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Validity
Not Before: Mar 2 02:01:38 2026 GMT
Not After : Mar 3 02:01:38 2026 GMT
Subject: CN=7eacd76308ca756c9fcca3e9d41b97d03da5b9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:b8:ba:ed:90:93:49:d5:be:fc:eb:8f:a2:
4e:18:a6:65:3d:32:45:e9:b0:8d:49:5b:42:79:b4:
b6:d8:e7:50:b5:03:97:c6:40:ec:21:e8:3c:0f:11:
fc:10:d4:48:8e:4f:e5:81:8b:c8:c9:af:45:44:df:
25:5f:47:5f:0c:a6:2b:91:53:65:77:9a:fc:b1:85:
e9:50:71:84:d4:b2:1e:ba:b9:e3:1b:8a:1d:c1:39:
bd:c4:65:5a:80:e6:21:c9:9c:a3:a9:c9:22:a6:08:
4d:4c:7c:44:80:7e:ce:83:fc:94:dc:7b:4f:91:6e:
72:b3:84:6e:db:76:3d:61:27:82:54:2f:89:9a:c1:
62:d9:12:2d:f2:b9:a2:de:f0:6e:d1:15:ad:7b:2f:
23:69:1a:82:ca:de:d9:df:51:94:a8:d0:dd:65:e0:
d4:af:90:89:8b:ee:ac:23:a9:b1:a9:50:c8:96:a4:
2b:3b:7f:c7:5b:8c:32:b5:79:b7:57:ae:63:42:d6:
3a:82:8b:b0:cc:7a:42:78:da:35:43:79:72:a9:b2:
45:fd:9d:4c:b1:38:88:e8:35:58:a6:de:d2:2d:d3:
7e:7f:1b:47:68:3c:11:d2:5c:bf:c0:df:d3:5f:d2:
c6:7a:4c:1d:15:c9:e5:af:d4:60:5b:c2:c6:53:9f:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AC:D7:63:08:CA:75:6C:9F:CC:A3:E9:D4:1B:97:D0:3D:A5:B9:A3
X509v3 Authority Key Identifier:
keyid:2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e8:52:11:72:9d:c3:00:e5:f1:3f:11:32:75:87:47:53:29:
8a:6b:bd:05:0f:17:0d:41:e6:73:c8:e8:a4:18:1c:8e:7a:ae:
f5:77:c1:6d:7e:07:bc:d1:4e:64:e0:4d:06:05:4e:b8:d5:27:
5d:e5:7f:89:51:1c:64:58:d0:38:15:b9:61:a4:b4:67:89:c3:
26:08:5a:2d:f4:81:27:be:08:d5:99:d5:9a:ec:74:b5:4f:cd:
67:09:1e:61:4a:4d:1e:2e:7e:4f:67:15:3c:15:7b:da:06:82:
57:01:89:61:a4:f9:76:cb:34:c7:51:c4:5c:01:bc:9e:1c:1a:
03:2f:a1:6b:78:a5:19:56:5e:54:7e:c6:fa:50:73:7a:6f:1c:
2e:b3:88:5f:18:7a:70:35:33:f0:93:39:70:7b:ab:d8:2f:47:
42:41:6c:8c:70:9e:ce:27:34:c1:9e:18:d9:5b:29:a3:8b:fb:
c0:57:a1:be:bf:fb:a6:c7:3d:8a:1c:d6:57:63:9b:a9:cb:83:
19:94:e0:af:2a:1a:80:11:6e:b5:5d:85:dd:50:2c:43:55:04:
a1:59:a2:46:c0:77:a4:52:1e:a3:0d:60:5c:15:54:94:14:b0:
e8:10:57:fe:f1:12:e9:aa:97:7f:ab:b4:9a:49:2c:29:bf:44:
15:2d:39:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR5dG6TOaeVlkjqZe4D9LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOGY5OWU4OGRhMDQ2ZGYzMTA0OWQ5N2RkOTEyYWU2NTBk
NTZkNGUwHhcNMjYwMzAyMDIwMTM4WhcNMjYwMzAzMDIwMTM4WjAzMTEwLwYDVQQD
Eyg3ZWFjZDc2MzA4Y2E3NTZjOWZjY2EzZTlkNDFiOTdkMDNkYTViOWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHW4uu2Qk0nVvvzrj6JOGKZlPTJF
6bCNSVtCebS22OdQtQOXxkDsIeg8DxH8ENRIjk/lgYvIya9FRN8lX0dfDKYrkVNl
d5r8sYXpUHGE1LIeurnjG4odwTm9xGVagOYhyZyjqckipghNTHxEgH7Og/yU3HtP
kW5ys4Ru23Y9YSeCVC+JmsFi2RIt8rmi3vBu0RWtey8jaRqCyt7Z31GUqNDdZeDU
r5CJi+6sI6mxqVDIlqQrO3/HW4wytXm3V65jQtY6gouwzHpCeNo1Q3lyqbJF/Z1M
sTiI6DVYpt7SLdN+fxtHaDwR0ly/wN/TX9LGekwdFcnlr9RgW8LGU59kDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6s12MIynVsn8yj6dQbl9A9pbmjMB8GA1UdIwQY
MBaAFC+PmeiNoEbfMQSdl92RKuZQ1W1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80NDY3ZTgtOWI5NS00MDUwLWI2Mzkt
MTJkNTJmMWU1NGRiLzEvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80NDY3ZTgtOWI5NS00MDUwLWI2MzktMTJkNTJmMWU1NGRi
LzEvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+hSEXKd
wwDl8T8RMnWHR1Mpimu9BQ8XDUHmc8jopBgcjnqu9XfBbX4HvNFOZOBNBgVOuNUn
XeV/iVEcZFjQOBW5YaS0Z4nDJghaLfSBJ74I1ZnVmux0tU/NZwkeYUpNHi5+T2cV
PBV72gaCVwGJYaT5dss0x1HEXAG8nhwaAy+ha3ilGVZeVH7G+lBzem8cLrOIXxh6
cDUz8JM5cHur2C9HQkFsjHCezic0wZ4Y2Vspo4v7wFehvr/7psc9ihzWV2ObqcuD
GZTgryoagBFutV2F3VAsQ1UEoVmiRsB3pFIeow1gXBVUlBSw6BBX/vES6aqXf6u0
mkksKb9EFS057Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:19 2026 by rpki-client