Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File: L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier: sC/X4kavA3p6hUagSFyZc5kxNed8JzzurvstBc7U3xo=
Subject key identifier: CE:F1:30:35:E1:97:66:E5:A2:C1:F9:67:70:A8:6B:78:16:0D:A2:2C
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 019CAAC6BAEEB97A5182D07C46EA25DFB3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number: 1864
Signing time: Sun 01 Mar 2026 19:01:16 +0000
Manifest this update: Sun 01 Mar 2026 19:01:16 +0000
Manifest next update: Mon 02 Mar 2026 19:01:16 +0000
Files and hashes: 1: 0N1ybgxxtNhvCwLcIqKzP6B5Bdc.roa (hash: as7k9qaZ/282WKH3mpIqj9cBm6rSsZBjpJcgWfn8pO4=)
2: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: WicQBvrwCel51HoYY+acmeLNs0nHaY01EX+jXpIhjbw=)
3: N4cB8WWtysbWqDi87bGAQQ2rt4E.roa (hash: S3j7rc4gR5B77q9DRMpITCq3BO39bGjWQciU5Aajs0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ba:ee:b9:7a:51:82:d0:7c:46:ea:25:df:b3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Mar 1 19:01:16 2026 GMT
Not After : Mar 2 19:01:16 2026 GMT
Subject: CN=cef13035e19766e5a2c1f96770a86b78160da22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:82:2a:38:8b:c2:e0:0c:dc:88:16:81:94:
6d:53:a3:6f:8f:16:e0:e5:e7:55:f8:8c:1d:88:fa:
27:a8:c8:32:99:9a:1e:8a:97:49:17:51:12:cd:7e:
59:1e:f6:c8:ce:5f:11:f8:4e:03:90:9c:df:2e:7c:
c2:00:a7:ec:10:73:e1:8f:f2:64:93:de:e3:1f:ff:
b2:e3:d4:6d:ed:6b:27:10:06:f9:7c:5b:02:0b:12:
cd:8d:b5:b9:5b:a0:80:09:51:88:6b:4a:37:ff:9a:
92:ee:18:74:86:1f:80:d6:f8:83:df:41:48:04:0e:
1a:94:89:85:2b:e0:7e:fc:4b:14:0e:4c:3c:4a:12:
7f:12:ef:dd:e8:52:aa:4f:6b:20:fb:58:d9:0e:fb:
9d:e4:ed:bc:5a:ee:f5:72:f0:e9:f8:00:b3:76:b9:
39:b0:d8:f3:66:7c:9a:78:fa:5b:c4:e8:6f:63:bd:
e4:4d:1c:14:59:50:5f:a1:68:fd:99:2c:ad:14:3e:
10:de:ac:23:7f:56:33:53:0e:e8:a1:09:1e:0c:b0:
c8:ec:4e:cc:6b:a1:98:66:60:29:53:3a:ef:72:35:
0b:c3:4c:c4:4a:9c:e5:57:92:db:02:8c:6f:5d:de:
ff:d4:58:aa:5d:86:d3:a1:d2:a5:8c:b2:a7:c2:9a:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F1:30:35:E1:97:66:E5:A2:C1:F9:67:70:A8:6B:78:16:0D:A2:2C
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:72:75:84:22:7c:be:a7:9b:a3:36:6c:13:cf:21:d0:e1:81:
16:e6:a3:63:17:00:02:c7:9d:00:0c:38:bd:c7:1e:0a:43:71:
5b:0e:60:a5:5b:3d:ae:e2:2e:32:0f:5a:d8:0e:e1:98:f0:9e:
ec:f7:a9:70:de:c7:f0:bb:05:d7:de:f1:d8:b9:c4:11:78:52:
05:ac:d4:84:40:2a:aa:56:c4:f4:62:3c:84:73:9e:cb:46:9f:
3d:c4:35:a5:65:a9:4c:3d:98:9b:a6:20:1c:e6:d7:5e:45:d0:
74:74:17:8d:52:62:e7:07:21:b1:08:fe:ab:a3:56:aa:77:19:
1d:ad:e3:1f:b2:87:76:54:2c:6d:c8:b8:a8:05:f8:a3:85:33:
50:02:34:9c:e5:73:01:d6:ad:6d:1f:6c:d4:8f:f5:2d:d1:65:
d9:ae:51:0a:fe:37:f4:ba:ad:fc:54:cb:b5:fc:e1:63:86:7a:
c0:dd:1e:4e:ca:aa:a5:ca:d3:7f:aa:44:7c:0d:10:87:c5:49:
33:38:7d:3f:23:34:b8:41:16:80:38:a2:b8:4f:de:7d:c5:c9:
9e:19:70:20:de:fd:cb:0c:50:36:8f:a9:89:50:49:7b:14:b1:
d3:a0:54:5e:a7:d1:21:a1:63:bc:ba:94:2f:76:1f:3d:be:4c:
7f:26:05:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:14 2026 by rpki-client