Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier: GcIeDIrW8NTwL+WL4mmREH3OkO+CnqhFu1RXrTmnedA=
Subject key identifier: F5:1E:D2:14:F6:F7:AD:B4:E5:FA:66:A9:48:12:5E:4A:95:A1:63:78
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 019D39781460526111595E62EB7798E6052D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 12:01:03 +0000
Manifest this update: Sun 29 Mar 2026 12:01:03 +0000
Manifest next update: Mon 30 Mar 2026 12:01:03 +0000
Files and hashes: 1: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: qjGM276Y7JbART7GSdFDXs/Hbcctuccqp8ZgMC4Dv0Q=)
2: cbu2nsq0_E-KnigNEJpP4D0mZdA.roa (hash: atZeFfSMWx6yJCaBl0p4VHQ5do/K238XneHi5TYWvrI=)
3: kAVnp8aXF-jNnIEpkFtrGOjA71Q.roa (hash: ZozqlRSOeS+zKJOBns48YstVdkSISYcGeUrQVUA0HJM=)
4: nUrWqoPlEcK0XKJOG-oMfsZtnp8.roa (hash: ybZD4RQkjzxlQtQy6MswWNgOU2zvBWHPKmFz1vKMzKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:14:60:52:61:11:59:5e:62:eb:77:98:e6:05:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: Mar 29 12:01:03 2026 GMT
Not After : Mar 30 12:01:03 2026 GMT
Subject: CN=f51ed214f6f7adb4e5fa66a948125e4a95a16378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:eb:4d:be:53:28:c3:c0:68:dd:e2:ad:87:
f9:ee:3e:64:f7:d5:78:32:67:8f:72:57:a8:cd:5a:
0b:3a:fa:e6:a6:c4:22:7d:f7:0a:1c:42:35:47:1b:
d1:f5:15:a8:84:9e:15:ac:d2:1a:1b:58:f8:50:f0:
f8:d3:96:8b:1e:ae:0a:79:2a:8f:fd:93:2a:5e:a4:
1c:74:b7:07:dd:07:28:0d:ef:78:02:a4:07:9a:c5:
94:78:3c:cc:f7:5a:4e:91:39:bb:a8:fa:5b:0f:6b:
52:f7:07:30:fa:4f:d4:da:bb:c5:57:45:68:65:a6:
00:d0:34:36:d7:0c:0f:59:bc:83:30:b0:99:e4:ee:
78:c3:16:b3:6e:57:1a:8e:4c:1e:4b:7e:56:b5:13:
40:e0:f5:64:58:69:23:33:2a:7a:66:dd:cc:06:20:
81:e4:08:87:f4:8a:d5:7b:98:fd:e8:63:15:9b:7f:
bb:fe:8e:d5:03:d6:d0:3c:0d:9e:03:d8:d8:22:62:
3c:aa:e7:63:0a:1b:ff:34:26:a3:02:4a:40:b7:43:
04:5e:59:40:a4:ca:51:f2:58:11:88:2a:3a:14:7b:
fc:f9:0d:36:e9:29:fd:1e:77:a0:4e:d3:ae:74:0b:
f2:8d:24:be:7d:e1:2a:5e:48:3f:12:14:5b:7b:8f:
50:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1E:D2:14:F6:F7:AD:B4:E5:FA:66:A9:48:12:5E:4A:95:A1:63:78
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d7:b0:4d:fb:41:08:fe:f5:2a:54:45:a6:06:72:dc:db:71:
fe:1f:fd:f3:44:0f:c8:d2:fb:20:9e:b9:65:bf:36:b5:82:fc:
66:16:3b:1e:d3:4d:58:66:17:fe:59:0a:62:f7:a6:24:f9:18:
6a:53:ab:75:90:50:de:72:63:a6:7c:8e:96:20:a4:8a:94:66:
e6:70:99:03:27:c6:62:f9:55:4e:8f:e1:32:9a:4e:b0:de:7c:
49:f2:c5:a8:06:3e:a2:6f:58:2f:54:55:11:06:87:8e:5b:ac:
d9:3c:93:1f:ca:b4:a3:52:1f:ec:cc:53:e4:5d:8b:8c:40:d2:
d4:d5:6f:8b:3c:7e:28:7c:86:5b:59:7f:fc:6d:fd:cd:7e:3e:
0f:7d:c0:22:b1:7c:29:36:4a:12:3e:41:3d:d1:6f:67:a4:31:
63:53:f2:d3:0b:f2:d4:e2:62:99:a6:a5:8b:bf:02:49:d1:61:
f9:6a:54:fb:3c:ec:9a:9d:28:fd:b2:22:ff:6b:11:7d:f6:47:
b7:b2:55:4b:5c:46:4e:a6:32:8e:19:0d:42:2a:98:8f:f4:7e:
b0:32:95:ff:2b:98:73:6f:e6:a8:74:e5:36:f9:bb:71:f1:06:
9b:e9:2f:dd:6f:6f:10:78:83:df:7c:40:d6:69:75:51:2f:d1:
8d:bb:36:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:13 2026 by rpki-client