Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.mft
File: 4LZ1Qbjn3z1WRJH-pVjOyynpcIM.mft (raw, json)
Hash identifier: j+spUX3vx2bL7lyDgFJW2HwTj+OD6sowjFiJLIWLhK8=
Subject key identifier: 8B:15:77:82:26:18:C3:FF:A6:D4:F5:E2:98:17:0D:2C:2B:D9:F5:35
Authority key identifier: E0:B6:75:41:B8:E7:DF:3D:56:44:91:FE:A5:58:CE:CB:29:E9:70:83
Certificate issuer: /CN=e0b67541b8e7df3d564491fea558cecb29e97083
Certificate serial: 01A17770871F1DA19FB0E191DD1B032D83C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.mft
Manifest number: 7F
Signing time: Mon 26 Oct 2026 09:00:25 +0000
Manifest this update: Mon 26 Oct 2026 09:00:25 +0000
Manifest next update: Tue 27 Oct 2026 09:00:25 +0000
Files and hashes: 1: 4LZ1Qbjn3z1WRJH-pVjOyynpcIM.crl (hash: IVBplsGUHRgqDrO7OBkgPHRcXS2u3AX++aD1nclDPqk=)
2: raStXVKdcpmZECk_0amdM6iFBkM.roa (hash: OkzRGccuAo2/o3w00touVdIm5lxj1wpjHOWmBqY715M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:70:87:1f:1d:a1:9f:b0:e1:91:dd:1b:03:2d:83:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b67541b8e7df3d564491fea558cecb29e97083
Validity
Not Before: Oct 26 09:00:25 2026 GMT
Not After : Oct 27 09:00:25 2026 GMT
Subject: CN=8b1577822618c3ffa6d4f5e298170d2c2bd9f535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:ba:ba:24:e7:23:b7:42:f9:47:34:7f:dd:
17:e4:d6:e5:f4:65:12:57:ab:63:3d:1a:33:2e:21:
47:17:bb:57:67:15:4d:f2:45:2b:12:79:60:83:76:
0c:0d:a7:fa:c5:0a:e2:fc:59:b0:73:97:4a:07:8f:
1c:8b:cf:14:84:5c:3c:9e:39:4a:e0:fe:b3:aa:1d:
d5:a5:95:f8:a6:4d:c9:fa:e2:8e:e4:86:28:82:58:
2f:47:b3:d6:85:1a:e2:29:82:f1:a0:0b:1d:e9:8d:
69:80:3e:4c:3a:d8:31:f6:4d:5b:aa:c3:dc:5e:a6:
52:70:e8:43:6e:25:67:0f:e1:a3:7e:5f:42:f4:a6:
fc:e8:71:94:4a:50:f7:0f:2c:a9:80:54:e9:4c:a9:
19:04:1f:d3:b0:b5:c5:d1:2a:37:85:58:f1:02:8e:
a1:60:63:6e:04:75:44:05:84:4c:21:7b:eb:14:cb:
5d:be:c1:8d:c8:df:5f:81:64:09:66:2e:32:6c:30:
73:4a:18:3b:57:5c:30:36:4f:fd:d0:ad:44:af:0d:
c3:a9:59:3c:92:eb:7e:35:75:da:04:58:6c:10:84:
13:f9:31:f8:58:a1:cb:02:b3:45:31:6a:ed:5d:c0:
90:f4:f7:6d:ad:98:f9:0d:07:bd:0a:7f:68:55:98:
15:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:15:77:82:26:18:C3:FF:A6:D4:F5:E2:98:17:0D:2C:2B:D9:F5:35
X509v3 Authority Key Identifier:
keyid:E0:B6:75:41:B8:E7:DF:3D:56:44:91:FE:A5:58:CE:CB:29:E9:70:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:39:70:75:1e:25:27:53:7d:4c:ae:01:f7:f6:b7:a9:68:4f:
78:17:92:73:26:fc:fb:b7:94:3b:1a:cd:8f:a9:44:08:d5:ff:
34:cd:da:18:65:31:4c:01:d8:0b:e3:8c:d8:ad:52:13:98:8b:
68:9a:58:29:4f:d8:67:4a:19:b4:f7:51:6e:0b:9a:04:79:40:
97:8a:a1:8a:b8:82:e3:1f:9e:2a:e4:7a:d4:2f:0b:e9:71:06:
8f:11:07:a1:59:f2:95:a2:c2:fb:1e:00:f4:df:9f:c3:ab:44:
1b:8c:db:21:e4:e4:fc:90:99:72:cb:aa:bb:66:e0:d5:99:0c:
98:8f:cf:39:44:3b:25:3e:71:51:c1:fb:da:b1:dd:60:1d:6d:
79:b1:74:7a:05:0a:76:11:db:67:a8:78:09:fc:07:76:00:93:
c8:bd:e2:ff:79:c1:13:6b:44:21:b1:24:d6:e3:48:a0:26:26:
51:db:5d:4b:24:21:38:bc:7b:f1:4d:b2:9b:72:aa:e1:af:fd:
33:74:da:5d:83:9a:22:08:7c:3f:7e:ec:50:51:b4:d2:52:6b:
ed:b4:51:4a:33:db:79:6a:c8:f3:a4:ba:ba:a8:5b:c4:ba:28:
0c:ab:a3:4b:3e:e0:dc:67:7e:35:52:91:24:37:be:ba:51:65:
54:96:b5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:26:46 2026 by rpki-client