Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File: L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier: IyUq2mXubo+fMhgf9PU6J4FPfkFp9ku5C8e6aqqD6O0=
Subject key identifier: 61:A0:17:A2:8C:27:37:26:78:EF:B2:B3:01:D3:3F:C4:8C:C9:B8:A2
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 01A06EA7D171B809C7A47E1AA91A12F72F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number: 1A86
Signing time: Fri 04 Sep 2026 23:01:26 +0000
Manifest this update: Fri 04 Sep 2026 23:01:26 +0000
Manifest next update: Sat 05 Sep 2026 23:01:26 +0000
Files and hashes: 1: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: QFg4A2kHFgRnq9qfHJm3lU6igEJdxTuzummLbILw6gY=)
2: N4cB8WWtysbWqDi87bGAQQ2rt4E.roa (hash: S3j7rc4gR5B77q9DRMpITCq3BO39bGjWQciU5Aajs0Y=)
3: wyTYzuUqrQiNPXEeWo4c58RNirU.roa (hash: xHPn1Owi3HFJRBFbv5G0KIz4Nyk1yyuajyWSPCXb4c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:d1:71:b8:09:c7:a4:7e:1a:a9:1a:12:f7:2f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Sep 4 23:01:26 2026 GMT
Not After : Sep 5 23:01:26 2026 GMT
Subject: CN=61a017a28c27372678efb2b301d33fc48cc9b8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:2a:58:fa:c1:35:06:b4:63:17:5a:87:b2:
3b:df:7a:3f:54:27:3a:34:21:6e:f9:27:43:44:60:
69:6c:42:2f:b7:13:5b:29:e5:cb:fa:7f:e2:a4:9b:
77:69:1f:cc:c5:d1:36:38:98:7a:fb:be:6c:2d:d9:
13:fc:47:8c:1a:c6:0f:89:7b:78:67:fb:29:54:66:
59:9f:92:92:d8:34:d1:2a:33:64:2e:22:db:5a:09:
0b:8d:ed:27:34:4f:2b:b4:0b:00:90:42:e3:e8:c8:
81:45:68:19:9d:ef:b4:cd:6a:25:fd:fb:e0:70:9c:
e1:60:1a:8d:7b:81:8e:11:03:1b:9a:be:7c:39:dd:
e9:37:5d:a0:60:15:2d:4c:3f:65:fe:1e:2a:48:14:
f7:8b:ef:02:72:ed:db:b8:4b:d3:74:5e:13:0e:83:
f4:65:68:6d:38:73:cb:b6:85:cf:fb:05:8a:5d:6a:
55:b6:92:35:35:b2:92:05:0d:33:a5:fb:d1:2e:66:
1b:a8:7c:0c:40:e8:7b:66:8d:e9:8a:b8:a6:2e:37:
b6:65:93:4a:9a:1c:b1:cc:35:91:ad:0a:40:80:a9:
60:87:6a:e4:b2:26:6a:dd:9e:8a:22:0f:8e:77:00:
dd:d5:56:34:e7:4b:80:77:87:ce:a2:23:cb:b4:55:
3b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A0:17:A2:8C:27:37:26:78:EF:B2:B3:01:D3:3F:C4:8C:C9:B8:A2
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:48:21:95:eb:49:05:a3:41:fb:73:df:af:fc:76:fb:f4:61:
c4:64:6f:a6:f3:23:0d:4f:39:e2:b7:ca:b5:f6:d4:c9:0c:75:
b9:8e:10:51:89:4a:96:78:a2:11:cf:79:6e:a3:8e:69:fa:c8:
d8:13:a3:17:cc:82:54:5b:1b:18:d2:d4:a8:43:23:7e:62:5d:
0a:02:d4:3c:57:da:38:06:f2:9a:1f:1b:f3:42:8b:03:33:bf:
1a:2b:a2:06:9d:a2:51:0d:f4:fa:79:ab:1a:a5:05:f9:97:bc:
b3:d6:04:43:e9:b4:75:d9:6a:6f:6e:56:d9:cf:b0:02:83:93:
9b:f2:d3:cf:96:70:15:8c:89:fa:34:25:32:b0:7f:1c:25:ce:
e0:99:6e:76:76:54:00:4a:32:ac:bb:13:9f:ff:76:5a:87:f0:
b0:c8:09:fc:3e:f6:a0:cf:e7:4a:5f:91:f5:ce:fa:ba:15:3d:
8c:e5:2a:b7:7b:40:62:20:15:91:eb:3a:73:42:67:68:7f:8a:
10:a3:8e:5d:0b:99:6a:34:7f:a6:d4:a7:14:c3:d9:e7:c7:fe:
33:de:1a:bf:29:1c:28:a5:1f:54:59:94:1f:a5:49:a5:54:f8:
70:2c:a0:8a:59:3e:c1:d2:97:26:7c:7f:a2:af:d7:09:73:9e:
90:9f:cd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:53:03 2026 by rpki-client