Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File: L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier: bP+i7xQzWzJI9kFy4KHGEbNowTXEzGOUtGijLTKJXZo=
Subject key identifier: 6C:09:96:68:8E:93:DA:E8:7B:87:EA:9C:4C:72:64:0B:33:60:8A:1B
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 019FA9ABEA22ABB8A61E500331EB6A87527C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number: 1A20
Signing time: Tue 28 Jul 2026 17:00:43 +0000
Manifest this update: Tue 28 Jul 2026 17:00:43 +0000
Manifest next update: Wed 29 Jul 2026 17:00:43 +0000
Files and hashes: 1: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: T3ch/Vajevcsm/mn163mcOff41rVnjQhLP/EYCG2lds=)
2: N4cB8WWtysbWqDi87bGAQQ2rt4E.roa (hash: S3j7rc4gR5B77q9DRMpITCq3BO39bGjWQciU5Aajs0Y=)
3: wyTYzuUqrQiNPXEeWo4c58RNirU.roa (hash: xHPn1Owi3HFJRBFbv5G0KIz4Nyk1yyuajyWSPCXb4c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:ea:22:ab:b8:a6:1e:50:03:31:eb:6a:87:52:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Jul 28 17:00:43 2026 GMT
Not After : Jul 29 17:00:43 2026 GMT
Subject: CN=6c0996688e93dae87b87ea9c4c72640b33608a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:8d:cc:44:eb:91:6e:c6:d6:31:56:76:d5:
a9:ad:06:db:ef:5a:ac:8f:0f:d6:24:f1:a0:0c:1e:
16:f4:a2:f8:cc:b5:c5:89:19:8f:26:b7:75:c1:43:
d4:1d:77:ae:36:6a:b0:aa:31:4d:59:08:a8:39:a8:
af:64:72:38:84:0e:96:eb:82:ba:d8:da:82:b1:ac:
bd:de:4b:cc:3c:b3:99:1b:f5:59:4f:23:3f:f9:9d:
82:29:56:36:2f:d2:52:42:ba:e8:39:16:6b:ee:b5:
c8:5e:98:27:50:9f:8a:db:af:4e:7c:76:82:21:01:
66:6a:93:58:42:f1:89:52:92:6d:cb:e8:95:9a:18:
1e:3c:c3:2f:22:c3:fa:11:3e:30:d4:69:c5:75:93:
fd:37:98:d6:da:d7:6b:2e:1b:ef:d6:dd:0b:93:73:
58:ad:67:e9:d0:84:f2:f3:ad:6e:58:26:32:86:69:
bc:1c:4c:d0:aa:4c:89:fd:79:a1:b3:94:05:fe:6b:
c8:3d:9a:6c:00:2f:0f:d4:f8:61:95:f4:8b:16:60:
a1:4e:63:af:49:11:76:8f:a0:90:db:7f:2c:a5:2f:
b8:4f:26:da:c6:a3:70:77:1a:04:e4:2d:ec:d8:30:
55:f5:f7:24:16:77:91:17:ca:1c:02:e9:d0:26:e9:
13:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:09:96:68:8E:93:DA:E8:7B:87:EA:9C:4C:72:64:0B:33:60:8A:1B
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:29:50:05:2e:b4:b4:b9:3b:14:76:f5:ab:45:cc:d8:7d:aa:
28:da:52:5b:28:df:4a:fb:22:8b:4b:e3:0d:86:b0:0c:68:a6:
51:bf:db:0b:f9:bc:6d:4c:07:eb:84:9a:38:bb:c3:9a:d1:8e:
99:a5:d6:d5:5c:0c:36:6d:6a:ae:15:cc:d1:47:50:97:4d:b3:
ec:34:4e:ae:a8:e5:2f:ae:f7:ec:61:ba:b1:02:e6:34:63:ca:
c9:c5:86:38:39:6b:89:08:46:49:12:ce:85:b6:aa:7d:7e:65:
da:02:c5:14:35:5e:36:0c:42:a8:78:4a:62:6e:79:b4:de:e2:
e6:18:3a:87:e8:b4:d5:84:38:85:b2:23:0e:0a:9f:02:a5:a3:
7f:4d:f6:55:af:f8:99:d5:fb:76:44:1d:0c:9a:e1:95:02:28:
aa:67:51:3a:95:d6:0e:67:53:c6:e4:91:f2:e7:5c:34:ce:5f:
4c:ad:fa:7e:e6:39:32:a8:bc:7d:a7:3e:69:9a:fa:7b:86:09:
f5:3f:6b:e6:77:5b:50:d2:f6:5f:7f:10:fe:33:d4:6d:99:92:
fa:9d:0f:90:0b:01:8e:b2:2f:ee:c1:44:c2:8d:b6:da:a9:08:
ba:d0:33:fd:44:0e:b4:1c:8e:2e:fe:98:3b:86:00:ba:c7:93:
2b:cd:2e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:26 2026 by rpki-client