Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier: iIbYgv0ydHR3vhavGZpfQEpZUslFkuVTaBTiTtQ5iiw=
Subject key identifier: F3:C7:46:FB:D2:D7:1A:1B:53:AF:BD:D8:26:41:8A:21:DC:3E:64:A7
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 01A18751E6181E3A7778C81BDE531D846C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number: 1ACF
Signing time: Thu 29 Oct 2026 11:00:53 +0000
Manifest this update: Thu 29 Oct 2026 11:00:53 +0000
Manifest next update: Fri 30 Oct 2026 11:00:53 +0000
Files and hashes: 1: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: VucMWh8kb81OLcqS2kDgpaCWvESk9iTCk2ut3dRu+Bc=)
2: cbu2nsq0_E-KnigNEJpP4D0mZdA.roa (hash: atZeFfSMWx6yJCaBl0p4VHQ5do/K238XneHi5TYWvrI=)
3: nUrWqoPlEcK0XKJOG-oMfsZtnp8.roa (hash: ybZD4RQkjzxlQtQy6MswWNgOU2zvBWHPKmFz1vKMzKg=)
4: wy8Km1Wff0xJUVnA0qG374Dvwrs.roa (hash: ktY2qr2xD7URKWNRuG9rSyVvwqPfuZtsGiF7PcUC8SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:51:e6:18:1e:3a:77:78:c8:1b:de:53:1d:84:6c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: Oct 29 11:00:53 2026 GMT
Not After : Oct 30 11:00:53 2026 GMT
Subject: CN=f3c746fbd2d71a1b53afbdd826418a21dc3e64a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d1:27:6a:82:3b:64:bb:6f:45:c3:ae:c8:dc:
37:f1:f3:01:78:2e:30:ff:a3:b9:65:a5:95:26:bb:
69:37:80:bc:68:8b:70:b1:79:34:23:be:39:31:b4:
66:8c:ce:dd:53:12:70:66:36:28:1e:68:74:73:87:
96:e0:1c:f7:c6:91:6e:b9:b3:1f:24:ac:4b:c0:ed:
2a:6f:8e:9c:61:10:be:d9:63:46:58:c3:e5:1d:ec:
6c:9b:9d:7f:e7:a4:64:ef:92:fa:77:8b:4b:e7:df:
fa:b9:fe:c2:7b:b5:8e:b3:bb:ec:c5:5e:88:66:08:
d3:9d:f7:da:73:2f:ab:15:99:eb:74:a9:ec:52:d3:
fa:48:d6:37:eb:a9:d8:eb:50:18:df:8b:af:f4:09:
49:8b:7a:84:1d:e4:b9:7e:49:28:bc:94:69:61:ea:
17:a8:ba:c6:aa:c1:e3:7d:8d:fd:38:b6:e5:16:b1:
74:81:f4:9e:e2:53:42:a8:f1:6c:3c:1d:1f:1a:37:
8a:0b:2e:e6:e5:91:ab:f3:e5:61:7c:4a:e5:c9:33:
65:07:0a:7f:14:17:23:5c:db:d3:3b:b5:fb:0b:45:
42:aa:00:da:5b:b6:06:66:a9:b4:24:25:07:47:62:
23:c8:90:62:e9:7a:8c:a0:6e:bb:fd:25:2b:32:10:
bc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C7:46:FB:D2:D7:1A:1B:53:AF:BD:D8:26:41:8A:21:DC:3E:64:A7
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:53:fb:a7:94:49:2e:a7:f7:4b:a7:0e:d8:ce:89:ca:38:c2:
ce:e9:ac:8c:b4:b8:15:57:8b:78:38:6c:4a:f9:03:d2:af:d1:
08:05:1d:50:a7:3e:8e:55:aa:c3:06:63:27:fb:6a:ea:8e:37:
34:ee:a2:e9:bf:82:75:2c:27:07:57:10:dd:a1:8b:5d:02:f4:
cf:5e:bc:bd:fd:90:f8:97:ba:2d:9e:02:3a:5c:e0:b4:ba:be:
93:3b:ff:07:36:60:2c:a9:6e:97:22:3a:1e:a6:53:ff:a7:a2:
4c:90:cf:77:4d:eb:2f:da:c9:df:a7:95:4f:c9:bf:e9:87:80:
65:37:06:a3:0a:b5:b5:5d:06:e2:f2:2f:a5:39:75:63:99:5a:
b3:a0:ed:1a:52:c2:ab:9a:3d:ea:3f:af:eb:67:aa:ef:fc:5d:
58:78:8d:bc:bc:69:29:d5:24:ba:76:fe:57:0d:11:3a:0b:a4:
ca:6e:68:a3:c7:c0:17:80:f3:af:c7:7e:22:f7:90:89:1e:b1:
14:24:90:b2:61:d0:fe:34:14:4d:57:57:90:d3:e8:dd:76:1b:
4b:0e:dc:fd:de:46:11:4b:be:55:28:d6:2a:f4:51:63:2a:2a:
c1:97:f9:a4:88:3c:df:b2:cf:b6:07:31:f0:e1:c4:3d:ae:3e:
44:f3:71:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 19:45:47 2026 by rpki-client