Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File: L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier: C4VUhgGB5BSJ3AHa2XpjEMaKD1QFDPp1VXausLd0RVQ=
Subject key identifier: 33:09:58:52:44:9D:94:BF:24:B5:A7:1B:66:C3:AF:18:FD:1B:40:AA
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 019D39409D0FB3D346F9523828BE620DA0B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number: 18B0
Signing time: Sun 29 Mar 2026 11:00:28 +0000
Manifest this update: Sun 29 Mar 2026 11:00:28 +0000
Manifest next update: Mon 30 Mar 2026 11:00:28 +0000
Files and hashes: 1: 8jWlz2m9nCdJLhol3WggXkpKwJ0.roa (hash: 10a8KHPkSWoPLzvv6hdEYed7WTrDaMTcRydUqLRuJGw=)
2: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: YK+YMlCnZietIbyGrdHR1IvcbTK8sHVrw88E1jaf2Lo=)
3: N4cB8WWtysbWqDi87bGAQQ2rt4E.roa (hash: S3j7rc4gR5B77q9DRMpITCq3BO39bGjWQciU5Aajs0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:9d:0f:b3:d3:46:f9:52:38:28:be:62:0d:a0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Mar 29 11:00:28 2026 GMT
Not After : Mar 30 11:00:28 2026 GMT
Subject: CN=33095852449d94bf24b5a71b66c3af18fd1b40aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:70:4b:c0:77:aa:72:f8:b7:83:e9:27:6c:e0:
9f:fa:70:92:d3:f5:f9:5e:54:f7:a8:6f:ea:0f:a4:
61:80:b7:c3:35:56:7a:cc:06:05:40:5e:14:56:e2:
b0:7d:b2:df:1e:f5:32:ba:8b:36:8e:33:b3:68:d4:
42:63:1c:32:22:94:a5:94:4d:2a:ca:2f:05:0c:21:
0b:de:be:2b:f0:26:0d:05:a4:2a:08:03:a8:3f:62:
31:2f:92:be:b6:8b:70:6c:b5:82:18:ce:d3:7a:15:
89:03:f6:d1:e8:11:58:b4:c2:15:7d:0a:36:2b:e4:
8d:6c:94:b6:bc:65:7b:b8:16:dd:a1:23:86:88:cd:
02:3e:a1:2f:20:f4:65:6b:5f:17:4f:45:d1:81:b5:
c1:b0:98:89:17:b3:47:89:1b:9c:2a:9b:47:e5:e1:
09:eb:76:fc:e6:cc:dc:b5:a1:de:17:14:a5:84:8c:
c0:86:41:a8:43:d5:5b:dc:48:60:5e:46:43:33:9c:
6d:fd:ce:52:6a:1a:62:16:b4:4c:58:e2:6d:12:66:
71:f9:0c:da:05:fa:9a:04:9d:d0:85:63:c0:00:d0:
ec:05:3d:ad:a0:90:be:1d:f0:25:d7:13:b4:27:f7:
73:14:28:f4:0e:58:bf:65:ee:3e:c9:0e:b9:b6:d3:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:09:58:52:44:9D:94:BF:24:B5:A7:1B:66:C3:AF:18:FD:1B:40:AA
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c6:34:45:e5:15:0d:57:e6:fc:c3:64:f2:d6:eb:62:95:04:
47:0e:5c:38:53:6b:08:86:8a:39:ff:11:f9:ea:9a:08:3a:9c:
f9:eb:f8:c6:2b:65:15:18:99:2f:61:c6:eb:5f:c6:eb:d4:f5:
3d:5c:6a:c8:3c:7a:6b:34:95:b0:86:f3:28:ea:21:c8:c2:93:
9b:10:f8:54:be:83:10:2f:9f:4a:d3:1b:12:ae:f1:f0:26:58:
e0:23:29:3e:a5:4f:b5:53:86:78:ff:c7:30:83:56:40:74:bf:
47:00:96:38:24:cd:52:5c:5c:27:99:c5:31:51:49:3f:8b:d2:
c1:a8:4d:15:de:1b:39:09:ec:e9:2c:4b:2a:40:2e:69:38:06:
32:c1:06:3b:e7:fc:fc:ba:a9:7d:51:03:56:52:56:56:10:c4:
49:b5:e7:80:52:b6:bc:c9:2d:65:7c:6b:fd:20:2a:cf:da:81:
7a:83:66:cf:ce:1f:2c:f6:77:e3:e9:8d:89:5a:a9:e7:3e:0f:
b1:b1:79:5a:6c:54:41:f0:78:76:9f:52:8e:84:e1:81:02:76:
91:36:3e:87:35:58:48:2e:7d:50:9c:aa:1d:85:41:f4:e2:be:
24:25:47:0b:a4:0f:c8:06:8b:dd:ff:3d:8f:c7:05:07:fb:2e:
ee:43:53:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:05 2026 by rpki-client