Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File: L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier: BHJ2Bmjev7g5Y4fHaREhoSPkEqJ3otnnRmaAQtcwUy8=
Subject key identifier: 0D:E2:2A:D1:F2:C5:47:CF:14:8A:2F:A2:7E:69:9C:17:3E:E0:78:B0
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 019DA378074D4A0D6E208075653BC896D316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number: 1905
Signing time: Sun 19 Apr 2026 02:00:45 +0000
Manifest this update: Sun 19 Apr 2026 02:00:45 +0000
Manifest next update: Mon 20 Apr 2026 02:00:45 +0000
Files and hashes: 1: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: G7PmeeQbw1SYzdE8Q6S/FVr54iLhzBgwE37QFIFwG7A=)
2: N4cB8WWtysbWqDi87bGAQQ2rt4E.roa (hash: S3j7rc4gR5B77q9DRMpITCq3BO39bGjWQciU5Aajs0Y=)
3: yLX7MXtcSVBwd2_KDm2Re8tJ7vY.roa (hash: Cbm0xXBnBJRo7Kuam5pcsKSxkk/B3qg2TLPWZ0j/ajs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:07:4d:4a:0d:6e:20:80:75:65:3b:c8:96:d3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Apr 19 02:00:45 2026 GMT
Not After : Apr 20 02:00:45 2026 GMT
Subject: CN=0de22ad1f2c547cf148a2fa27e699c173ee078b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b7:92:14:e9:62:8c:00:b8:4d:7a:29:17:20:
b3:d0:6c:3b:8f:d7:6d:38:61:35:ca:df:f2:f3:99:
67:e1:8f:cc:d3:68:26:c7:a4:1f:cc:91:7c:03:bb:
87:6b:ad:e5:75:8a:3a:81:8f:cc:df:91:b9:cc:5a:
7a:fc:6c:f9:88:de:53:6c:26:51:d9:f2:40:9e:89:
5b:02:1a:7d:80:59:22:45:10:2e:f7:c3:24:38:a8:
32:57:c8:93:db:77:30:21:ef:9f:b2:7e:e7:06:66:
ac:bd:89:d4:37:c3:19:a0:b4:c6:7d:10:41:e6:0f:
c8:85:a7:e3:67:8d:a9:ed:b0:ea:d7:9b:6f:ad:27:
9a:cd:fd:3c:2a:79:24:e2:d1:94:12:6a:56:f3:9a:
bf:ca:4c:81:8d:be:28:7e:06:56:3d:6d:0c:c1:a9:
26:2d:73:1d:95:60:de:87:79:10:3c:bf:a2:dc:7f:
36:80:36:ae:dc:1e:8c:d0:10:a0:e8:15:d9:98:08:
dc:a9:14:44:d2:b7:f6:bf:5b:7a:50:bb:61:71:a2:
14:52:3b:12:e3:4a:90:35:85:46:7b:bc:02:08:fe:
10:82:69:14:3f:1c:63:43:51:58:46:e1:3a:0d:25:
5c:2c:82:bd:62:0c:df:c6:4c:9e:fd:57:61:c8:20:
e4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E2:2A:D1:F2:C5:47:CF:14:8A:2F:A2:7E:69:9C:17:3E:E0:78:B0
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:98:80:dc:9f:0c:95:df:89:7a:0f:e2:f9:14:c6:5c:db:85:
ad:0a:eb:d6:20:06:28:f5:82:ba:d4:a1:0f:d8:01:5b:1c:f0:
b7:89:b2:5a:05:c7:f2:ce:a9:bd:05:b4:12:f6:a5:52:92:14:
2b:3e:14:9e:38:5d:22:67:ad:f0:e1:d2:71:88:cd:d5:95:0b:
fc:a1:d4:8b:fe:5a:b0:0d:3f:3f:4c:23:c7:38:8f:d5:6e:de:
12:07:38:51:05:e2:89:4f:5f:19:c6:1c:d6:33:e8:64:f0:6a:
1e:8e:e1:d3:09:54:06:16:9b:fb:ee:0b:6a:2b:06:98:f4:a1:
8d:58:dd:3f:46:29:2f:c0:fc:70:d3:4a:de:de:60:89:37:0a:
ad:33:2f:09:a9:94:d8:f3:1a:45:52:54:28:8f:c7:12:32:77:
cd:96:81:d4:1f:f5:bf:c7:35:bc:c7:be:b9:cc:0a:90:f0:cb:
55:4c:cd:65:44:5a:c8:99:34:3b:00:13:2d:da:39:42:d3:48:
f0:f5:8c:7b:c5:1c:9e:89:8b:e1:76:8f:04:86:7a:7d:93:cd:
26:50:b1:36:41:2a:c5:45:64:7f:75:50:61:3a:7a:2e:cd:9a:
46:5b:fd:5b:bd:30:66:f3:ca:6b:76:05:13:1a:ed:1f:5b:d0:
f7:a1:d7:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeAdNSg1uIIB1ZTvIltMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODY3NTQ1NzU5NGQ3ZTc0MGFhZWVmMmU3ZDdlZmQwMjIz
OWM2MTcwHhcNMjYwNDE5MDIwMDQ1WhcNMjYwNDIwMDIwMDQ1WjAzMTEwLwYDVQQD
EygwZGUyMmFkMWYyYzU0N2NmMTQ4YTJmYTI3ZTY5OWMxNzNlZTA3OGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5beSFOlijAC4TXopFyCz0Gw7j9dt
OGE1yt/y85ln4Y/M02gmx6QfzJF8A7uHa63ldYo6gY/M35G5zFp6/Gz5iN5TbCZR
2fJAnolbAhp9gFkiRRAu98MkOKgyV8iT23cwIe+fsn7nBmasvYnUN8MZoLTGfRBB
5g/IhafjZ42p7bDq15tvrSeazf08Knkk4tGUEmpW85q/ykyBjb4ofgZWPW0Mwakm
LXMdlWDeh3kQPL+i3H82gDau3B6M0BCg6BXZmAjcqRRE0rf2v1t6ULthcaIUUjsS
40qQNYVGe7wCCP4QgmkUPxxjQ1FYRuE6DSVcLIK9Ygzfxkye/VdhyCDkmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3iKtHyxUfPFIovon5pnBc+4HiwMB8GA1UdIwQY
MBaAFC+GdUV1lNfnQKru8ufX79AiOcYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYt
MTAzMWFlMWViMDMyLzEvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYtMTAzMWFlMWViMDMy
LzEvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwZiA3J8M
ld+Jeg/i+RTGXNuFrQrr1iAGKPWCutShD9gBWxzwt4myWgXH8s6pvQW0EvalUpIU
Kz4UnjhdImet8OHScYjN1ZUL/KHUi/5asA0/P0wjxziP1W7eEgc4UQXiiU9fGcYc
1jPoZPBqHo7h0wlUBhab++4LaisGmPShjVjdP0YpL8D8cNNK3t5giTcKrTMvCamU
2PMaRVJUKI/HEjJ3zZaB1B/1v8c1vMe+ucwKkPDLVUzNZURayJk0OwATLdo5QtNI
8PWMe8UcnomL4XaPBIZ6fZPNJlCxNkEqxUVkf3VQYTp6Ls2aRlv9W70wZvPKa3YF
ExrtH1vQ96HXhA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:39 2026 by rpki-client