Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
File: l4TMfBsz0nl3_M2zSzzClKKkCIw.mft (raw, json)
Hash identifier: 6LiDSx5+V7ve4ygaBJjy4i0vtGturH+25ZNpLdaIoZM=
Subject key identifier: 2F:EF:BD:1F:3E:49:63:B5:59:99:30:A5:00:1A:98:1C:E3:E7:7D:76
Authority key identifier: 97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
Certificate issuer: /CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Certificate serial: 019D9998E989A96F6D317E904A691963AFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
Manifest number: 0875
Signing time: Fri 17 Apr 2026 04:00:28 +0000
Manifest this update: Fri 17 Apr 2026 04:00:28 +0000
Manifest next update: Sat 18 Apr 2026 04:00:28 +0000
Files and hashes: 1: YDZJA4xJRSLLS_3caqEhOJ_3z1M.roa (hash: v2F9ZSNvDEOEkn09bpTuxmjtHiwOPIKq7B7AJM2GesM=)
2: l4TMfBsz0nl3_M2zSzzClKKkCIw.crl (hash: i/3xB+0h/j0K9YgJlItTDdyQQc+ngrtSuCEFjyxiR6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:e9:89:a9:6f:6d:31:7e:90:4a:69:19:63:af:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Validity
Not Before: Apr 17 04:00:28 2026 GMT
Not After : Apr 18 04:00:28 2026 GMT
Subject: CN=2fefbd1f3e4963b5599930a5001a981ce3e77d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:e9:8d:59:dd:5d:50:3f:8a:5b:f2:13:9e:
a6:39:6b:96:60:7a:8b:d9:bc:8b:56:a0:92:4f:53:
84:61:45:92:4d:fa:9a:4d:cc:8f:1d:49:ca:3a:b8:
3e:ba:2a:79:4d:2f:a1:06:bf:15:69:c3:47:c2:1d:
8e:70:3f:eb:dd:6e:4a:be:33:e8:af:99:20:16:88:
87:c8:8e:7d:e9:71:82:dd:53:1f:17:7e:dc:d9:de:
a8:a9:d3:c2:c1:cb:6d:29:c1:19:be:97:71:58:33:
8c:7b:47:1e:5c:27:4a:6a:39:df:07:34:49:ec:b3:
b4:8c:1a:36:5c:7b:95:15:9a:17:fa:84:51:16:29:
49:8d:c5:03:82:94:45:ad:c0:a9:7f:66:b2:c4:33:
ec:92:f6:c5:c1:1d:28:32:76:0e:3b:3c:94:1b:5d:
54:cb:ab:53:9c:20:a5:36:54:b4:54:44:e6:8e:ce:
42:a4:c4:dc:bd:14:47:60:e3:b1:04:ad:1a:89:d2:
22:78:73:f6:9f:08:c3:dd:30:81:b9:84:03:5f:64:
63:97:67:93:b8:df:99:41:e6:9b:8c:4f:0c:58:c3:
8a:c9:b4:61:cb:02:1c:64:5b:1b:f1:05:0a:bf:ca:
5c:33:24:06:22:de:f4:31:83:27:d6:51:9b:af:6f:
d9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EF:BD:1F:3E:49:63:B5:59:99:30:A5:00:1A:98:1C:E3:E7:7D:76
X509v3 Authority Key Identifier:
keyid:97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7f:de:ce:84:d6:3c:bc:c4:5f:6a:a9:5b:3f:12:8d:11:e4:
b4:72:94:47:b4:50:9b:eb:18:0a:5e:e7:98:4b:63:27:91:59:
a1:75:e3:ce:5f:ad:e7:6d:3c:0a:30:cb:b2:ea:f4:02:46:8b:
c6:9f:4c:f2:d5:29:4b:7c:4e:38:2e:e0:2c:83:03:cf:0b:85:
f8:42:40:f2:62:a5:5a:fa:1f:fb:6c:2f:a2:9e:61:bf:d4:a2:
b9:10:f4:76:9e:e7:b0:74:f4:29:e7:d5:d4:39:53:c3:7d:86:
ea:e3:d8:e3:dd:e6:eb:5c:de:88:59:06:bf:74:5f:79:03:08:
6a:be:03:37:ca:e0:9e:f0:8c:8c:a8:1f:53:fc:92:fc:5f:66:
ee:8c:a9:4d:5a:94:7e:7f:ce:d9:5c:e2:89:a2:fb:5d:3b:8d:
6a:c8:46:23:22:d5:88:26:54:1b:29:b7:b5:b4:2d:c3:15:b9:
f5:35:79:ae:6c:79:d5:e3:c7:3a:af:5d:f2:78:18:dd:64:6d:
f9:3a:f3:16:4a:fb:d8:ba:7b:48:9c:3e:04:4e:b5:72:53:96:
86:c3:b4:92:af:d5:29:f1:4f:58:79:45:49:2e:58:97:a0:ec:
5e:36:a2:c6:6d:bd:1c:07:cc:58:e5:51:bd:1b:44:90:09:7b:
36:f9:f2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:25 2026 by rpki-client