Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
File: L4FK3B1SCeCY8HitvIVrrYO3ScI.mft (raw, json)
Hash identifier: s5rYsgTie30fAAnu1negK8MR7L6vLoQQmlCr4I1Mlm8=
Subject key identifier: EF:85:9B:74:AC:C9:9A:E5:6F:E1:D0:CD:6D:58:80:34:91:FA:21:5C
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 019D38D3D54202733F411FB0167AF8E2F24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
Manifest number: 18CE
Signing time: Sun 29 Mar 2026 09:01:39 +0000
Manifest this update: Sun 29 Mar 2026 09:01:39 +0000
Manifest next update: Mon 30 Mar 2026 09:01:39 +0000
Files and hashes: 1: Fs9aAyK9lTsbVm0NOu0XxmRrYvM.roa (hash: RzyHKDUe729UgBjp7Kobbrat8Gaw2JQ/Zg4A7HvcVdI=)
2: L4FK3B1SCeCY8HitvIVrrYO3ScI.crl (hash: DZGBUxhzGquLr9zi0kNI8S0XE+e7TLokN0Ahv6xQUP0=)
3: MrkTSTOQnAaGRm2DjkE4wDAii6I.roa (hash: IemK3qnTPE/e8MsNSBvQ7f7MgzptN5jWR7/rlu58qzM=)
4: RPfAXv-f8uBkkH0WybryVHOTpQU.roa (hash: C6w//enAOUR/TI2OpJYps6HovP/3vBWM2Hbve1rPMiI=)
5: gF4iUNMjCX6YP857V9CNjLm-AIg.roa (hash: FhDwHm21Q6QTRo/sfldBISr1alr6N55dx1Ou14/lEJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d5:42:02:73:3f:41:1f:b0:16:7a:f8:e2:f2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Mar 29 09:01:39 2026 GMT
Not After : Mar 30 09:01:39 2026 GMT
Subject: CN=ef859b74acc99ae56fe1d0cd6d58803491fa215c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:8d:e7:b5:47:82:7a:55:4d:c7:88:52:52:
4e:ca:b7:ae:65:77:17:dd:45:4e:63:2f:da:d2:3e:
1c:2e:66:83:7e:ad:36:95:8b:d8:90:bf:c0:c4:db:
4b:67:10:67:a1:a8:19:fb:76:62:a3:a8:53:4f:f9:
cc:a2:9c:d3:1d:f2:f9:d6:0e:35:0e:38:61:32:c0:
e4:c9:e3:8a:77:2e:0c:5d:e8:2d:09:d2:32:18:35:
61:3c:71:73:6c:6e:95:69:b9:55:e6:d6:88:cb:c1:
c8:07:e3:29:8a:5f:d3:0e:c0:90:3e:83:43:df:43:
11:a2:01:a4:e2:fe:a5:b2:a7:11:cb:d5:53:fe:38:
4a:29:9a:ed:ef:be:7c:6c:0c:ed:b0:d5:1d:0f:75:
42:85:9d:5c:71:ae:77:32:07:19:bc:e5:71:fe:04:
3c:3e:e4:c8:db:3d:40:95:f2:ed:f5:5f:3e:b9:7d:
78:33:b2:63:35:f5:8f:5c:e6:d0:74:5c:b8:e3:c9:
dd:1b:57:fa:ec:f4:4a:35:bf:ec:01:d4:8b:a1:40:
2b:3a:09:4f:4d:90:d8:7d:4f:b4:ae:35:37:6b:ef:
e0:1b:ed:8e:1d:18:02:33:d1:c6:01:0a:36:08:2c:
e6:b6:44:a6:4c:f4:01:c2:c0:29:37:ed:af:80:b9:
14:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:85:9B:74:AC:C9:9A:E5:6F:E1:D0:CD:6D:58:80:34:91:FA:21:5C
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:76:56:3a:da:ad:b2:d3:a7:3b:bf:48:f5:2a:d6:7c:26:19:
94:f5:0e:8d:c2:c9:06:90:26:4e:57:41:72:1f:5d:9f:43:e7:
29:d7:45:87:69:1c:90:00:8a:7e:a4:53:a7:a3:2f:d6:26:d2:
72:dd:05:31:ac:2d:3e:d3:5a:4a:b9:65:14:4e:6b:4f:1a:e8:
7d:36:62:17:83:86:14:d0:03:80:d5:6b:e8:f9:3d:cf:9e:cb:
62:d5:b0:da:02:56:5f:8f:6f:ed:9e:e6:cd:de:2a:41:97:3a:
f4:4b:33:08:b8:5c:a8:39:68:a1:e0:bf:1f:84:d0:ef:6a:ac:
22:03:4c:ce:b5:ad:18:86:5d:2c:92:55:b4:31:5a:4b:9f:19:
46:06:39:b9:b2:de:34:6f:49:4e:b7:e3:eb:ee:96:c9:60:d5:
07:6b:14:18:96:6e:bb:06:90:7a:08:8c:e1:20:c9:4c:46:13:
8f:24:0a:a7:e3:51:df:c3:76:03:7a:04:53:7f:3e:33:23:e0:
45:24:0d:bb:0d:6b:45:27:56:c8:27:c6:56:cb:95:b2:59:d2:
68:55:95:97:2c:25:9f:4e:d7:b5:de:6c:d0:d9:0d:09:f6:06:
06:99:95:7d:c0:5e:76:a9:bd:8b:67:da:17:b2:b6:ad:c6:d0:
71:67:16:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:00 2026 by rpki-client