Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier: KOwx48enjZepyOM4zx5XHWjfUEnHpjLaZ7FPt9l9fhU=
Subject key identifier: 19:3E:78:D8:71:EE:E8:0C:42:3A:F5:13:5E:EF:24:04:49:A5:E4:CF
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 01A08D1FA2CFCAF5B801D5664407DAAFDAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 21:00:55 +0000
Manifest this update: Thu 10 Sep 2026 21:00:55 +0000
Manifest next update: Fri 11 Sep 2026 21:00:55 +0000
Files and hashes: 1: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: Xb/hsu0cQxgdXz3VMmFhZT3YPz3rSXLS6EP0V8rqFIY=)
2: cbu2nsq0_E-KnigNEJpP4D0mZdA.roa (hash: atZeFfSMWx6yJCaBl0p4VHQ5do/K238XneHi5TYWvrI=)
3: kAVnp8aXF-jNnIEpkFtrGOjA71Q.roa (hash: ZozqlRSOeS+zKJOBns48YstVdkSISYcGeUrQVUA0HJM=)
4: nUrWqoPlEcK0XKJOG-oMfsZtnp8.roa (hash: ybZD4RQkjzxlQtQy6MswWNgOU2zvBWHPKmFz1vKMzKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:a2:cf:ca:f5:b8:01:d5:66:44:07:da:af:da:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: Sep 10 21:00:55 2026 GMT
Not After : Sep 11 21:00:55 2026 GMT
Subject: CN=193e78d871eee80c423af5135eef240449a5e4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:9f:a8:c0:e0:a9:d3:41:55:f3:09:6b:e0:
c0:92:6c:06:c0:f1:c9:0b:de:d6:5b:e5:b5:2f:cc:
0f:14:ec:e1:d4:40:ee:7b:45:4e:5c:b3:f9:dc:1e:
01:4c:02:19:9e:5d:15:e0:b8:41:6c:11:2e:71:7c:
eb:5f:8f:0a:d2:49:52:77:58:a6:ce:64:8b:bc:f6:
98:47:9e:d8:22:82:38:84:9e:2b:cc:d4:30:52:47:
cc:c9:71:b9:2f:64:96:87:9a:f4:1f:ae:a5:0b:d5:
5f:36:bc:fc:4f:f6:1b:06:b5:79:2e:eb:81:65:87:
8d:0d:dc:41:09:0e:dd:d7:b9:77:1f:77:66:22:57:
52:8f:b7:c1:12:9c:6f:c3:de:cd:ae:80:c0:fb:84:
51:b8:c0:93:6b:7a:bc:74:f0:b7:3b:66:70:0b:89:
56:6a:80:f8:27:d0:71:59:4f:47:fc:be:01:97:d4:
e4:3b:c0:a6:0e:a6:89:72:a9:d1:90:a5:0d:ab:20:
ef:a4:c8:17:94:66:41:d5:71:58:e6:e5:ed:97:03:
79:66:d2:10:48:58:19:f2:79:3b:d8:71:f1:4c:28:
0b:e7:f4:a0:83:39:65:87:49:ca:10:76:e1:54:76:
51:60:20:0e:12:94:57:5e:d2:a6:4a:78:92:95:55:
67:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3E:78:D8:71:EE:E8:0C:42:3A:F5:13:5E:EF:24:04:49:A5:E4:CF
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:01:95:71:a1:0b:79:50:00:6b:3f:b3:01:e7:9a:f0:a1:9b:
c0:62:41:9e:df:38:a3:82:75:dc:c5:d3:03:87:98:19:5f:85:
fd:21:1d:ae:91:d7:01:42:ff:85:23:06:fb:0b:ba:7a:ba:9b:
bf:df:97:37:d6:41:c6:2b:b1:be:b4:9d:76:82:bc:76:84:9d:
a8:45:3b:47:88:45:ac:ec:9f:7b:88:a2:30:68:3c:47:a3:87:
48:17:f1:e4:80:99:5a:2a:c3:35:05:6a:51:e2:97:3a:7f:67:
fa:30:9c:1f:af:2c:e3:1d:af:35:3c:2e:27:02:5f:48:10:a0:
1b:ab:7d:df:2e:b0:db:2b:73:92:ee:7d:a6:ae:77:f6:bb:f9:
21:31:71:cb:af:d0:9e:c9:97:08:85:3c:f1:e4:08:c6:f0:5c:
d2:7d:e8:21:32:77:6b:aa:8e:39:ea:d3:8a:50:45:74:7f:5c:
fc:31:8b:a0:7b:ae:d8:86:14:57:ad:32:8a:b3:d2:72:2a:2a:
4f:e1:79:aa:9c:5e:20:c4:4f:53:78:4b:93:6b:6e:a4:7c:da:
0e:48:f8:72:f0:16:7d:d2:cc:c3:c6:2a:1f:b6:ca:7e:1a:5b:
05:ec:12:79:f8:a8:5c:ed:4f:d2:67:5b:d6:77:23:55:09:4b:
ab:a1:e8:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNH6LPyvW4AdVmRAfar9qkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkOWUzMWM5MDI5ZWU0NGJkNjgxYjUxNTMzMDMzNWM2YTFj
ZmRlZWUwHhcNMjYwOTEwMjEwMDU1WhcNMjYwOTExMjEwMDU1WjAzMTEwLwYDVQQD
EygxOTNlNzhkODcxZWVlODBjNDIzYWY1MTM1ZWVmMjQwNDQ5YTVlNGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykufqMDgqdNBVfMJa+DAkmwGwPHJ
C97WW+W1L8wPFOzh1EDue0VOXLP53B4BTAIZnl0V4LhBbBEucXzrX48K0klSd1im
zmSLvPaYR57YIoI4hJ4rzNQwUkfMyXG5L2SWh5r0H66lC9VfNrz8T/YbBrV5LuuB
ZYeNDdxBCQ7d17l3H3dmIldSj7fBEpxvw97NroDA+4RRuMCTa3q8dPC3O2ZwC4lW
aoD4J9BxWU9H/L4Bl9TkO8CmDqaJcqnRkKUNqyDvpMgXlGZB1XFY5uXtlwN5ZtIQ
SFgZ8nk72HHxTCgL5/Sggzllh0nKEHbhVHZRYCAOEpRXXtKmSniSlVVnZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBk+eNhx7ugMQjr1E17vJARJpeTPMB8GA1UdIwQY
MBaAFC2eMckCnuRL1oG1FTMDNcahz97uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMt
MDhkYTY2NTJhODY3LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMtMDhkYTY2NTJhODY3
LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQGVcaEL
eVAAaz+zAeea8KGbwGJBnt84o4J13MXTA4eYGV+F/SEdrpHXAUL/hSMG+wu6erqb
v9+XN9ZBxiuxvrSddoK8doSdqEU7R4hFrOyfe4iiMGg8R6OHSBfx5ICZWirDNQVq
UeKXOn9n+jCcH68s4x2vNTwuJwJfSBCgG6t93y6w2ytzku59pq539rv5ITFxy6/Q
nsmXCIU88eQIxvBc0n3oITJ3a6qOOerTilBFdH9c/DGLoHuu2IYUV60yirPScioq
T+F5qpxeIMRPU3hLk2tupHzaDkj4cvAWfdLMw8YqH7bKfhpbBewSefioXO1P0mdb
1ncjVQlLq6HoBA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 08:01:16 2026 by rpki-client