Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File: L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier: 5BgvQ/96SF7VFbdzNF1cv4DKaMwzlzOfTMiZZYWamnw=
Subject key identifier: B3:DC:00:2E:AE:E8:E2:46:91:CA:ED:55:06:5C:9B:24:7A:6D:CE:1D
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 019F830C9DFCB57CCC0841E438D10246F035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number: 1A0C
Signing time: Tue 21 Jul 2026 05:01:09 +0000
Manifest this update: Tue 21 Jul 2026 05:01:09 +0000
Manifest next update: Wed 22 Jul 2026 05:01:09 +0000
Files and hashes: 1: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: dgIn7eUPNLkmMWUwy+ATx39/xMvphp87xTYtQYXLQHI=)
2: N4cB8WWtysbWqDi87bGAQQ2rt4E.roa (hash: S3j7rc4gR5B77q9DRMpITCq3BO39bGjWQciU5Aajs0Y=)
3: wyTYzuUqrQiNPXEeWo4c58RNirU.roa (hash: xHPn1Owi3HFJRBFbv5G0KIz4Nyk1yyuajyWSPCXb4c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:0c:9d:fc:b5:7c:cc:08:41:e4:38:d1:02:46:f0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Jul 21 05:01:09 2026 GMT
Not After : Jul 22 05:01:09 2026 GMT
Subject: CN=b3dc002eaee8e24691caed55065c9b247a6dce1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:c1:24:bf:2d:e6:08:e8:f5:cf:4e:d3:50:
55:e7:71:76:bd:d2:bc:7b:43:44:80:20:b8:62:81:
72:74:3a:07:72:77:31:40:e4:bb:1c:43:2a:fe:a4:
82:48:5c:80:e4:e6:36:bb:5c:98:6e:b3:b0:f7:f0:
6f:e9:ef:bf:49:a8:bb:50:9e:1e:98:fc:d1:0d:20:
10:81:56:2c:f6:20:6e:dd:31:ea:9e:21:6f:84:cd:
41:26:a5:7d:17:40:1b:a2:1f:08:d0:43:f8:47:32:
13:9e:87:ac:6c:14:97:cc:00:19:f9:2e:2b:01:d4:
64:ce:13:72:4c:5d:84:e0:9c:cc:ea:30:86:e8:51:
01:54:8e:3d:f2:74:5b:cb:76:e4:9f:d3:e7:98:88:
69:c3:63:b7:6c:c6:7d:d9:62:5f:a0:26:e8:82:8c:
5c:bc:0a:e4:b3:e8:32:ff:2b:b0:bf:a5:b6:39:52:
b9:ca:5f:5f:06:cc:13:c7:2d:40:b3:2e:6f:9b:d8:
fd:5c:f2:43:b6:45:a7:b2:40:88:14:5f:b2:f2:26:
65:eb:56:46:ef:8c:b5:59:ba:81:9f:3a:f6:99:cd:
77:e2:53:90:59:53:11:35:54:ea:2a:3c:19:b1:0a:
e5:d4:68:73:4c:67:2d:d9:e2:e4:25:99:aa:3e:ea:
33:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DC:00:2E:AE:E8:E2:46:91:CA:ED:55:06:5C:9B:24:7A:6D:CE:1D
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f7:86:b8:d5:56:46:9d:a0:58:c2:30:9b:b0:21:b1:6b:c7:
7e:d7:95:3d:99:e0:3c:b1:14:4a:a9:55:e4:ea:b1:dd:93:99:
4b:66:76:4f:e9:d9:e4:3d:98:f5:de:a6:48:2a:43:ff:b1:5b:
ec:aa:58:43:4e:54:fb:f7:c4:cc:e5:e1:9a:ec:43:a5:eb:80:
da:a9:5d:ca:99:95:a9:32:3d:a4:fb:82:68:6d:6b:6d:27:b6:
34:8e:92:38:5d:68:eb:2a:63:02:0c:ac:88:e0:ec:a3:8a:c8:
2a:91:76:d6:a7:ca:d3:7c:8d:37:3a:65:49:22:1b:e3:31:e5:
99:81:b5:22:42:bd:8d:43:b4:54:00:fc:fb:d5:18:35:ba:93:
93:1a:00:ff:c8:92:11:55:c4:9e:10:ca:2a:15:1b:7d:21:18:
26:eb:4f:c6:2f:ce:76:99:c6:64:eb:45:d9:5c:3a:4c:f5:d2:
6d:95:71:7e:30:7a:e8:e9:ec:e2:8a:5f:19:be:2b:5d:a5:20:
41:3b:5d:86:9a:fc:dd:8d:15:47:5d:b0:0f:37:f8:40:17:47:
08:7b:f3:91:ca:35:1a:dc:dd:04:0e:40:d7:ed:98:5c:cd:9f:
93:de:0c:1f:ba:9d:58:f1:b2:55:9d:34:d4:07:8e:61:27:bb:
61:04:de:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:04:00 2026 by rpki-client