Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
File: L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json)
Hash identifier: UFKcZLUFI77u+99vDbYBZ7qrc0G4I93ibfjclH02/SM=
Subject key identifier: D8:A9:B4:AA:3B:68:63:5F:9A:D5:96:C0:AE:94:8C:08:62:64:74:06
Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
Certificate issuer: /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Certificate serial: 01A0C557B967AAAD6791321D27CE4EEAAF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 19:00:55 +0000
Manifest this update: Mon 21 Sep 2026 19:00:55 +0000
Manifest next update: Tue 22 Sep 2026 19:00:55 +0000
Files and hashes: 1: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: GWFlVU3BcCZBQd6bFNzeBSBv6dmqovXSJn94e7QT5uE=)
2: rQp0KtrZ2vEnGo7a2SDmUAvFVx4.roa (hash: uy4FLHEMk8dBagqU7F42mpSaD+FcR8r9kkARIXcPG1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:b9:67:aa:ad:67:91:32:1d:27:ce:4e:ea:af:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Validity
Not Before: Sep 21 19:00:55 2026 GMT
Not After : Sep 22 19:00:55 2026 GMT
Subject: CN=d8a9b4aa3b68635f9ad596c0ae948c0862647406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:06:d9:0d:c5:90:87:90:9d:af:4c:42:19:
59:e2:c8:18:55:37:e3:af:f1:18:51:43:89:77:b1:
ee:d8:df:e1:de:5b:d6:15:d0:d2:1e:6f:80:3c:e7:
a9:09:e3:45:67:ec:31:67:00:05:e6:08:1d:96:8a:
08:a2:46:73:48:d5:16:2e:27:b0:9a:48:42:76:ad:
c0:19:d5:f5:2c:cb:a0:9e:f0:a6:ef:dc:67:91:d2:
96:89:36:ca:8c:4d:d3:d5:53:bf:97:dc:db:23:68:
b6:d4:e1:cf:b4:3b:9a:2c:88:1e:17:e3:7c:f8:6e:
4c:52:05:a9:c2:c7:15:fb:83:90:56:1e:8c:c9:0f:
c4:df:54:57:6c:a6:50:ec:a3:a7:3b:62:73:fd:b3:
c4:a6:d9:87:7b:ec:15:47:c3:41:ad:ea:fd:47:59:
6c:60:e7:ed:54:b3:30:5e:0c:0c:ac:4a:a8:a5:05:
e2:66:73:06:8f:f2:32:e8:8e:4e:d4:2f:ea:2c:65:
03:31:31:b0:cf:03:b8:ac:a7:24:bd:8e:c5:bd:8d:
6e:08:20:49:71:ae:20:9d:02:e6:a0:6d:32:69:b4:
7a:16:e3:20:df:af:db:33:81:ee:69:8f:36:16:fd:
02:fc:2f:be:9a:c4:3a:83:ef:ed:14:30:9d:97:64:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A9:B4:AA:3B:68:63:5F:9A:D5:96:C0:AE:94:8C:08:62:64:74:06
X509v3 Authority Key Identifier:
keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:10:49:5b:c2:b5:89:d9:59:78:33:34:06:86:dc:1b:49:06:
e5:95:38:a9:5a:91:cd:87:93:34:0c:7c:e2:f4:ae:ea:91:59:
45:4c:4f:3a:19:3b:02:67:4c:3f:15:21:0c:b3:a8:fd:59:c3:
4f:bd:1c:88:18:aa:47:a6:57:4c:7c:d1:e2:28:c2:73:2b:55:
0d:1e:18:a5:52:80:09:dc:8f:10:ad:31:fd:59:68:58:bf:c5:
6d:56:61:86:fb:0f:c7:a8:94:7c:a4:fb:96:be:39:a0:ca:fe:
4b:06:38:05:85:82:be:79:7d:99:6b:91:55:d6:5e:2c:47:cd:
3e:a3:35:7c:94:f5:22:49:de:68:48:db:e4:2b:32:d2:d2:9e:
76:46:06:f7:3a:5f:05:42:c4:82:8b:4b:41:20:95:4f:94:48:
ec:26:b8:41:fd:b0:ba:b3:4a:8e:cd:95:7d:09:71:54:cb:62:
40:00:e8:76:ae:b3:8e:f3:a3:0f:13:9f:74:ce:a8:37:ff:de:
40:26:0a:2f:ad:b4:5f:04:ea:82:c1:d0:32:62:50:34:79:ac:
73:76:08:6b:99:df:16:fc:76:59:24:62:0f:84:43:d2:ad:22:
9d:23:e6:e7:9d:3b:79:80:4f:1a:c1:4a:8d:bf:5f:61:a2:69:
03:ba:29:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:43:53 2026 by rpki-client