Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
File: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft (raw, json)
Hash identifier: h/jr3RpJS6D38BZAw11/78XEoSjNiUElWDC+5X4ah1o=
Subject key identifier: BE:08:C2:65:3B:22:5F:63:71:21:3D:17:FA:C1:FD:66:2D:51:BD:33
Authority key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
Certificate issuer: /CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Certificate serial: 019D394173F13ACB61F94190D45B628DF291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
Manifest number: 0FC9
Signing time: Sun 29 Mar 2026 11:01:23 +0000
Manifest this update: Sun 29 Mar 2026 11:01:23 +0000
Manifest next update: Mon 30 Mar 2026 11:01:23 +0000
Files and hashes: 1: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl (hash: wf+NECic/KbgkmD5Af/NEIzZUbAHTbQ0Jhp5GBTxXYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:73:f1:3a:cb:61:f9:41:90:d4:5b:62:8d:f2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Validity
Not Before: Mar 29 11:01:23 2026 GMT
Not After : Mar 30 11:01:23 2026 GMT
Subject: CN=be08c2653b225f6371213d17fac1fd662d51bd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:c8:7b:6f:be:21:d8:21:bf:6b:8e:d3:95:
3f:cd:6c:3d:e9:57:bb:cc:64:c8:10:6e:5d:d9:b4:
55:0b:30:05:39:dc:33:49:80:0b:a5:26:5c:bc:f5:
cc:e2:31:71:6f:9b:fc:c8:f5:ad:11:8d:6b:d7:66:
1d:e0:06:46:2d:10:62:95:9d:ce:a0:c2:4d:ed:2c:
5e:d1:9e:a8:9b:1c:06:2e:3e:4c:1b:9f:51:53:77:
4a:43:8b:6a:e1:49:cd:5f:4a:56:2e:40:c3:4e:f5:
4c:30:b0:79:b0:56:36:fa:c8:88:9d:c1:38:26:f9:
81:80:b9:54:f7:23:39:7f:2a:ec:c4:a5:15:db:58:
0f:7b:e3:9e:0c:3d:37:51:de:aa:e1:e6:b2:2a:d9:
a2:27:b3:e9:27:67:ab:6a:46:e2:d9:57:7a:bc:b7:
81:2c:61:d1:cb:ff:0c:83:07:0f:f6:70:82:fd:d4:
62:28:dc:d4:99:0b:a0:3f:81:73:f3:39:3f:26:89:
e5:c5:92:8c:15:76:6c:b1:ba:71:68:f6:28:db:50:
c0:a1:51:6e:55:9a:30:66:9e:d4:45:94:7d:c2:9c:
4f:92:d5:fc:30:df:33:4b:21:95:02:0d:51:bc:3b:
34:37:0d:61:e8:c2:96:6a:d2:21:32:c7:48:8c:96:
07:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:08:C2:65:3B:22:5F:63:71:21:3D:17:FA:C1:FD:66:2D:51:BD:33
X509v3 Authority Key Identifier:
keyid:2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:44:79:5c:a0:ab:f8:7a:9e:20:20:59:c0:3c:83:48:3f:ab:
14:22:b7:4c:66:05:22:d4:0d:76:e5:df:45:21:f6:59:ae:f1:
67:c3:d2:0e:cb:8c:b6:c2:2d:7b:87:c0:af:9f:3b:c3:b0:d9:
93:c7:06:a7:d1:58:76:c9:8c:67:04:04:58:aa:70:7a:b8:e0:
e9:4c:ec:81:8e:c1:f9:95:8e:a6:f0:2c:e9:d6:b8:4d:14:6c:
77:d6:ec:00:bb:03:48:18:6e:72:d3:7e:16:1a:22:69:a4:88:
7b:eb:6e:ff:0d:68:e9:76:5a:4d:67:3b:a7:bf:f0:35:ce:29:
b9:88:d7:be:3e:1f:bc:ac:04:cf:df:44:63:ba:c5:60:6b:00:
79:76:c7:1f:8a:72:8b:06:6c:3d:c4:e4:3b:f5:57:bb:1a:21:
13:c8:aa:14:94:4e:00:80:d4:4f:f6:aa:57:ab:83:9b:3f:4d:
91:f3:91:c8:4e:6b:da:9e:69:0c:c5:45:c4:1b:4e:25:7a:9e:
8b:9d:66:c5:a2:60:51:14:15:d5:a5:36:b6:54:c5:69:90:72:
47:a5:a9:2f:ff:9c:17:e1:b5:19:b1:91:88:d5:76:fa:83:b6:
b2:c3:c1:47:20:8c:1a:4c:af:84:17:31:87:17:4d:f2:42:27:
5f:29:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:48 2026 by rpki-client