Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.mft
File: L4IFe98YT8Q6GjsF492Z_-KgvmA.mft (raw, json)
Hash identifier: bAFeykMQ9G0OFkyvmHEoGmvWn+0XzUNylGlSpH43bJg=
Subject key identifier: BB:6A:43:76:2D:90:E4:DE:7D:DD:D4:26:B5:A4:8A:C1:26:8D:5B:DE
Authority key identifier: 2F:82:05:7B:DF:18:4F:C4:3A:1A:3B:05:E3:DD:99:FF:E2:A0:BE:60
Certificate issuer: /CN=2f82057bdf184fc43a1a3b05e3dd99ffe2a0be60
Certificate serial: 019D39AF07ED8BFDB55F94689FEAA16140D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4IFe98YT8Q6GjsF492Z_-KgvmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.mft
Manifest number: 0218
Signing time: Sun 29 Mar 2026 13:01:05 +0000
Manifest this update: Sun 29 Mar 2026 13:01:05 +0000
Manifest next update: Mon 30 Mar 2026 13:01:05 +0000
Files and hashes: 1: L4IFe98YT8Q6GjsF492Z_-KgvmA.crl (hash: Ij57CYHVg1a+bByvYsQzaGbvHhcNejYQQYqLMYpmJmw=)
2: lpMg2ko0-iJVtSPr6ulyNogeR8Y.roa (hash: /vf+glhaE0iUfqhKrI+IRegz6qCv6eXnRNU2sTI97mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4IFe98YT8Q6GjsF492Z_-KgvmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:07:ed:8b:fd:b5:5f:94:68:9f:ea:a1:61:40:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f82057bdf184fc43a1a3b05e3dd99ffe2a0be60
Validity
Not Before: Mar 29 13:01:05 2026 GMT
Not After : Mar 30 13:01:05 2026 GMT
Subject: CN=bb6a43762d90e4de7dddd426b5a48ac1268d5bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:1c:85:c4:b1:7e:54:e2:4d:fa:9c:34:d9:
29:8b:e8:fd:7d:55:4a:a4:42:7b:fb:ad:bc:48:85:
a0:3d:81:7d:16:08:09:b5:bf:a3:a1:7c:eb:9c:3f:
3f:d8:92:a4:c2:75:24:23:ef:ba:09:c1:bf:c4:4c:
a9:ce:77:2a:e4:04:aa:d5:57:71:b2:3c:12:f0:88:
98:12:f9:f1:38:ea:d6:5b:1d:ba:fc:f3:98:58:ac:
14:99:a2:a6:cf:c9:8e:93:62:03:41:54:47:2b:39:
a6:ae:91:8d:d7:24:7c:b4:8a:65:f5:b9:1b:69:9b:
c7:48:04:e7:f9:db:48:22:e6:cb:58:f6:4e:1a:45:
94:56:34:45:e6:c4:ee:5a:cf:70:45:7c:35:55:fe:
8a:95:1f:05:b0:ec:82:8a:d0:3e:67:cb:6b:55:99:
2c:fc:d9:6c:c3:c2:dc:55:a0:67:59:c8:2b:04:98:
7f:aa:ac:b3:f0:7e:8b:6c:86:26:a1:2f:49:e3:2f:
94:84:dd:07:d2:85:83:3a:6f:6c:ad:4f:6e:5e:34:
59:3a:da:bd:40:67:28:5e:c5:e0:35:9f:0b:83:26:
d0:ee:13:ba:23:97:68:64:75:c3:e1:a7:78:79:32:
74:5d:06:e4:c1:5e:c1:06:16:9a:cc:0c:8b:e4:f6:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6A:43:76:2D:90:E4:DE:7D:DD:D4:26:B5:A4:8A:C1:26:8D:5B:DE
X509v3 Authority Key Identifier:
keyid:2F:82:05:7B:DF:18:4F:C4:3A:1A:3B:05:E3:DD:99:FF:E2:A0:BE:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4IFe98YT8Q6GjsF492Z_-KgvmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:12:f4:ff:26:68:92:c6:28:39:e5:9e:8c:9c:bd:e8:1e:bb:
af:79:33:3c:d4:04:79:37:17:6d:de:52:42:34:fe:50:de:87:
9e:7f:4a:fd:29:8a:c1:6d:29:6d:0d:b4:64:49:e5:bb:a5:58:
23:f7:06:18:7d:61:f5:32:9f:da:08:f5:1b:83:c6:c3:81:4f:
cf:f5:8c:3b:17:22:6f:cf:8a:12:73:eb:ba:18:98:7c:74:cb:
78:58:36:3e:70:ca:35:cc:c7:75:a2:73:53:16:e2:01:f2:89:
cf:30:3d:4c:9d:1b:5e:82:b5:ce:14:1f:08:2d:59:ee:cd:20:
4d:74:5b:ac:72:24:1c:2b:49:2d:c6:7e:45:02:13:92:58:a7:
b0:a8:6f:4e:75:8b:d6:93:c1:a2:fe:28:e7:4e:97:49:7a:92:
cb:28:8d:5f:4d:0c:df:8b:e0:50:95:09:1b:3f:d6:31:a5:96:
45:b8:f4:94:af:e0:df:2b:47:48:a9:b4:4b:ab:dc:c3:38:68:
02:6b:2c:fe:ad:ae:62:b1:1e:ed:37:d5:c3:32:47:c4:52:5b:
49:35:c4:da:90:60:08:03:b1:92:8c:16:27:43:93:7b:0c:b4:
fa:11:ea:e4:2b:07:ce:4d:43:58:49:86:00:89:90:7f:53:e4:
33:dd:7e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:57 2026 by rpki-client