Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File: L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier: YCH5C9028HNaWWz7H3MRv2Xa+uO9f/zrwxwEvAuUEgs=
Subject key identifier: 30:F4:38:FC:BE:F5:DC:71:46:5D:E8:B5:F8:CA:C6:6B:55:26:77:EF
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 01A0C3D6E097EC70325A15E66DD4A1B98B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number: 1AB4
Signing time: Mon 21 Sep 2026 12:00:34 +0000
Manifest this update: Mon 21 Sep 2026 12:00:34 +0000
Manifest next update: Tue 22 Sep 2026 12:00:34 +0000
Files and hashes: 1: 1trGtYwQIfgKe-NMvZ_3L-OEiwI.asa (hash: cyg4byY89k9M+dKyRxrNqSKtUSke7l4RnAZku93H+zw=)
2: 2BKAXtln8KzReY8_THzqrmmiyM4.asa (hash: Sc3aPkbPjVsQ6j/oD90t2utIy322EBG1ZVdIGT6gJ+c=)
3: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: /XtBmmIufQD+uljHien5325a89KwRXeA1b7qMT7G1Fc=)
4: N4cB8WWtysbWqDi87bGAQQ2rt4E.roa (hash: S3j7rc4gR5B77q9DRMpITCq3BO39bGjWQciU5Aajs0Y=)
5: vgZTkNH9EhrtEt7Ls7ZQVtiF_EA.roa (hash: 2+LYx0b1ohhezJYmEr08X78XCAC8VVPktKsrgYtWVpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:e0:97:ec:70:32:5a:15:e6:6d:d4:a1:b9:8b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Sep 21 12:00:34 2026 GMT
Not After : Sep 22 12:00:34 2026 GMT
Subject: CN=30f438fcbef5dc71465de8b5f8cac66b552677ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:c2:54:18:1a:bf:d4:c5:d1:63:0f:24:a6:
2a:d5:f8:8e:37:1a:8e:47:14:b9:0b:93:b0:9e:69:
d6:06:2b:15:be:db:f4:eb:96:58:58:87:5a:07:87:
a6:a6:d6:ce:a5:f8:c0:0e:03:f8:78:6f:67:c3:e1:
06:40:7f:6b:dc:73:a1:0b:3f:7b:9a:7c:81:bb:9b:
95:7e:ac:b4:94:2a:23:37:48:58:12:54:ca:a7:34:
35:96:f2:8f:45:98:5e:dd:4a:20:d2:f5:c9:3b:bd:
ee:ad:18:02:7c:55:aa:ab:c3:65:57:b5:ea:3b:7b:
54:58:fc:f0:e6:49:e6:d7:a4:b0:6c:69:14:19:d6:
5a:d0:b5:1f:38:a3:21:3c:84:0e:d2:8e:3b:9d:b4:
31:78:f9:81:e4:1e:6f:b8:e1:82:0c:fc:0a:f0:ed:
71:b1:b4:9b:9b:94:07:fb:8d:42:30:e3:92:5f:d7:
20:e5:58:bc:44:44:ce:c1:dc:e0:ea:1c:39:62:93:
34:a1:af:e5:a1:db:d5:46:35:51:2c:fd:57:4f:8d:
99:8c:65:d6:fd:97:2f:55:52:cb:14:ea:a0:2e:04:
7e:47:d8:86:18:14:1a:ac:07:07:68:0b:61:0e:d2:
de:a7:6b:ed:fc:df:df:0d:3d:7e:be:35:6b:6c:5e:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F4:38:FC:BE:F5:DC:71:46:5D:E8:B5:F8:CA:C6:6B:55:26:77:EF
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f4:1b:b4:a1:cf:97:cf:87:3a:40:2a:fb:26:05:76:13:67:
bb:db:cd:c4:bc:d3:f9:5e:05:b7:e7:e4:e1:18:66:9b:54:ca:
7b:a4:52:41:65:01:d7:ac:52:ac:fd:1b:ea:07:67:fc:d9:2d:
b0:54:cd:cc:7b:8d:8b:3c:af:e8:6b:3b:ee:64:2f:e9:cd:b2:
bf:a1:f2:0e:a6:f0:ec:ed:30:9f:51:20:12:2e:a7:5c:32:9b:
b1:bf:48:eb:46:e4:1a:19:c9:3c:02:7c:43:ed:d4:8f:f0:29:
e7:93:ea:4a:a0:0f:4d:11:8a:c7:4b:22:8f:88:78:08:db:b7:
5d:a4:a3:5b:bd:f5:17:ee:6c:48:96:74:38:42:22:ea:18:57:
04:c1:1a:12:a5:45:66:a2:83:8d:82:c1:d1:99:34:11:5b:c8:
de:21:77:ef:2a:59:6e:04:4e:af:8d:e3:d7:8b:06:c5:8b:71:
8f:66:95:ee:3f:25:c0:46:08:c1:b9:66:fa:28:1d:96:b1:60:
be:a2:3d:67:d8:08:8e:ab:71:a6:0f:1f:99:d8:60:33:58:90:
0b:3c:9c:a7:c4:af:e3:bf:0c:88:e3:a5:e8:6a:fe:d1:1c:05:
d7:51:33:dd:e4:2a:a9:72:2e:05:25:33:31:f7:7b:e9:e7:ad:
18:43:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:59:35 2026 by rpki-client