Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File: L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier: bxnJ14XwafNM1CBmooFYJ0O9bwgZlpLEtUShPZaUtsI=
Subject key identifier: 66:3C:D1:70:76:52:75:26:EB:52:FF:BB:CB:9F:E5:F1:1A:BD:A5:EB
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 019CAEA3C4A4513A3F236A1E762EC11DDC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number: 1866
Signing time: Mon 02 Mar 2026 13:01:34 +0000
Manifest this update: Mon 02 Mar 2026 13:01:34 +0000
Manifest next update: Tue 03 Mar 2026 13:01:34 +0000
Files and hashes: 1: 0N1ybgxxtNhvCwLcIqKzP6B5Bdc.roa (hash: as7k9qaZ/282WKH3mpIqj9cBm6rSsZBjpJcgWfn8pO4=)
2: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: c9hrCGEbabtaLDkuXI3ONoq1OBu8pkrBz/5kmwnuNsI=)
3: N4cB8WWtysbWqDi87bGAQQ2rt4E.roa (hash: S3j7rc4gR5B77q9DRMpITCq3BO39bGjWQciU5Aajs0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:c4:a4:51:3a:3f:23:6a:1e:76:2e:c1:1d:dc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Mar 2 13:01:34 2026 GMT
Not After : Mar 3 13:01:34 2026 GMT
Subject: CN=663cd17076527526eb52ffbbcb9fe5f11abda5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:80:5b:f4:81:16:cd:c8:0e:ad:1c:11:fa:0a:
5c:05:7d:37:20:86:95:08:bd:3d:d8:cb:91:94:77:
3f:ec:07:70:3a:5e:4a:b9:0d:e0:11:80:fe:36:dc:
b6:2e:79:2a:58:a4:fb:40:52:43:1b:cb:c7:a7:0a:
06:f6:10:fa:51:fa:e3:65:e8:93:88:06:a5:63:c2:
a7:48:71:0f:bb:b8:8a:b8:aa:f4:28:9a:bc:bd:a6:
07:30:9d:c2:36:ff:33:43:3c:89:0d:e3:9f:e5:60:
67:6a:50:eb:6a:5e:7e:81:9c:a3:b5:41:a6:d3:40:
6f:ce:2c:48:e3:0b:fb:d4:88:b7:64:fb:25:97:1e:
3d:53:21:e2:59:59:ec:10:63:73:a9:ee:28:0b:13:
aa:d9:78:03:98:82:64:49:d9:41:65:74:4c:43:ce:
af:19:0e:e6:71:b5:87:03:60:4b:d6:01:5f:71:71:
f5:c5:c1:1a:01:ac:f8:51:ff:f6:62:a9:83:ab:72:
82:de:54:c3:df:b6:92:f1:c5:23:ae:2d:64:b9:4e:
e1:58:40:8b:53:65:9e:93:a7:23:e5:9c:1c:34:56:
3f:29:85:c3:cb:26:ba:0d:c4:bb:49:07:21:08:a5:
b9:bc:f9:9c:a7:04:a2:84:29:1e:14:a7:20:3a:63:
9c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3C:D1:70:76:52:75:26:EB:52:FF:BB:CB:9F:E5:F1:1A:BD:A5:EB
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4c:61:91:b1:c8:06:78:07:0d:73:1a:3e:be:9d:c2:97:38:
ae:83:30:a6:64:69:ec:67:75:69:34:ef:7b:f0:ca:3c:fb:9b:
69:9b:5b:9a:9b:8e:82:1e:a0:e9:1b:18:3f:8b:ef:c0:15:2e:
9d:09:10:4b:69:34:9c:a2:82:de:1c:6b:7a:ca:e8:70:e1:b9:
a8:a3:28:25:48:48:e1:3c:24:55:23:1b:0a:2e:17:a1:9f:fb:
ef:ed:a9:3d:06:a7:3f:55:3f:ba:28:ce:ed:07:14:d3:f2:ca:
83:21:d6:c6:ba:ab:2f:4b:cf:e1:b4:0b:38:fa:6c:84:c1:c9:
d2:e6:2c:5d:cd:e0:ca:13:e1:fe:c2:82:50:1e:83:5b:eb:eb:
4a:b7:d5:2c:ad:1c:7e:86:38:30:c8:ee:7e:8a:a0:bd:21:bb:
3d:d6:4a:d1:db:23:b8:45:12:98:b6:ad:7d:11:0c:7c:e6:f0:
c7:c3:a1:45:7a:6d:82:c0:50:44:af:94:ef:d6:6d:a3:84:bf:
a3:93:f7:10:92:04:e1:5d:04:ff:61:09:9e:1c:5d:54:5f:87:
ac:e8:03:6d:42:a7:ef:30:8d:56:9f:b9:37:aa:d5:a7:4f:ae:
dd:cb:a9:40:ac:e5:db:59:b7:4e:0c:3e:7a:55:08:51:0f:20:
86:24:ba:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:24:15 2026 by rpki-client