Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
File: L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json)
Hash identifier: SzWiHPZcQQ8x9gIlnndnCsedlns2lzUOxYZtT/gyqkU=
Subject key identifier: 10:4F:85:E4:88:5C:4C:0C:D8:99:1E:CA:73:F4:2A:C2:FA:55:53:1E
Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
Certificate issuer: /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Certificate serial: 01A19F91899C7DB6F87CA140E8029F5ADCC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
Manifest number: 1AD5
Signing time: Tue 03 Nov 2026 04:01:17 +0000
Manifest this update: Tue 03 Nov 2026 04:01:17 +0000
Manifest next update: Wed 04 Nov 2026 04:01:17 +0000
Files and hashes: 1: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: lxxqFXHlVfflgwSnUAsp7x2zVBOXFldNK+F0m+UrcGo=)
2: rQp0KtrZ2vEnGo7a2SDmUAvFVx4.roa (hash: uy4FLHEMk8dBagqU7F42mpSaD+FcR8r9kkARIXcPG1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9f:91:89:9c:7d:b6:f8:7c:a1:40:e8:02:9f:5a:dc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Validity
Not Before: Nov 3 04:01:17 2026 GMT
Not After : Nov 4 04:01:17 2026 GMT
Subject: CN=104f85e4885c4c0cd8991eca73f42ac2fa55531e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:f6:0a:fe:74:d2:4f:c4:bd:6d:12:51:f9:
fe:b0:f1:33:4c:3f:fe:cb:13:4f:f1:88:b3:e8:d9:
7a:2a:04:cb:19:70:40:83:bd:80:36:05:b8:91:eb:
50:a4:53:b1:7f:aa:20:2d:78:57:68:37:c2:c4:a8:
9c:77:90:6f:cd:11:14:e2:81:b0:dc:e3:64:18:59:
a1:a0:77:1c:c6:e2:8f:23:48:3d:4c:04:1f:88:1b:
69:f6:c3:95:1e:c3:c6:75:cc:3f:f7:42:3f:f5:41:
1c:eb:b3:52:38:38:b3:a3:48:50:2b:d0:e2:91:87:
87:dd:3c:de:94:1f:24:11:9b:99:95:7b:bc:c1:e5:
3e:76:94:7b:83:b9:e5:30:68:0b:27:98:a8:ed:35:
a1:45:48:24:74:aa:a4:82:04:25:20:1e:83:60:b9:
8f:a4:b9:c9:f5:fd:fd:47:3d:29:a0:6a:13:91:7c:
da:34:ec:60:11:66:fe:7e:f8:5b:ce:d3:04:e6:a3:
be:75:e1:1d:ef:d9:06:78:67:c7:9f:32:52:74:37:
96:d8:c3:45:03:1c:ce:44:82:3a:f4:c8:65:dc:07:
5e:92:2b:df:67:24:ca:8e:3d:fc:ff:59:1b:22:c3:
3b:b0:e2:99:aa:9a:5c:56:46:e7:0e:01:98:b2:fc:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4F:85:E4:88:5C:4C:0C:D8:99:1E:CA:73:F4:2A:C2:FA:55:53:1E
X509v3 Authority Key Identifier:
keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:13:24:27:2f:96:3b:a7:9b:51:4d:54:b7:3c:70:93:05:5d:
cf:d1:6c:ae:91:4e:20:b5:dd:fe:86:24:22:f1:cc:08:98:54:
ae:1e:cf:94:ca:4f:34:cc:16:82:95:8c:95:60:f5:5a:7b:9d:
00:2a:d8:b8:a7:98:91:2e:99:6d:e8:8a:58:e4:77:be:1a:ed:
90:ad:f3:07:6e:20:2b:ed:c3:3d:a9:a5:85:9f:3b:4b:6b:59:
91:9f:86:fe:c2:45:8e:d5:b4:a0:fd:35:96:d2:8e:f9:36:22:
31:38:95:05:d5:04:53:81:4f:ea:7c:76:e0:65:d2:79:3e:86:
c0:e9:66:ec:59:3a:62:96:33:3b:0f:cb:72:3b:88:d6:70:ad:
4c:e1:c4:0a:b0:11:8b:75:5d:e6:ee:ab:c9:0a:34:b5:e0:09:
76:59:41:44:05:78:50:d1:ed:3a:e5:77:3c:2f:f7:15:5e:00:
88:6e:62:04:08:a7:46:a1:f6:7f:dd:49:a7:bb:0b:fd:4c:b7:
b9:11:25:b5:d4:e8:97:6f:e0:14:52:ec:aa:11:92:93:ee:41:
31:04:0c:bd:48:f7:b4:d3:67:71:a3:5b:ad:f1:76:b5:64:2e:
1b:f9:92:1a:d8:7e:e2:4f:c8:43:67:49:73:c4:0f:5c:f4:66:
9b:ab:7e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 12:06:06 2026 by rpki-client