Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.mft
File: 4LZ1Qbjn3z1WRJH-pVjOyynpcIM.mft (raw, json)
Hash identifier: kBZNB89N6YYLT/9Evklij1aj08pW4Cu/ZC6eObPMw44=
Subject key identifier: B0:00:4A:C4:54:59:E8:69:F9:4A:1B:68:20:9D:8C:56:62:3D:74:71
Authority key identifier: E0:B6:75:41:B8:E7:DF:3D:56:44:91:FE:A5:58:CE:CB:29:E9:70:83
Certificate issuer: /CN=e0b67541b8e7df3d564491fea558cecb29e97083
Certificate serial: 01A089E7CD3FDB3E9444EEC6581014EB9CBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.mft
Manifest number: 04
Signing time: Thu 10 Sep 2026 06:01:04 +0000
Manifest this update: Thu 10 Sep 2026 06:01:04 +0000
Manifest next update: Fri 11 Sep 2026 06:01:04 +0000
Files and hashes: 1: 4LZ1Qbjn3z1WRJH-pVjOyynpcIM.crl (hash: EekFCa24p1tcVJHjSwqRZX21Z1XsIi/OunnoGpub9tU=)
2: raStXVKdcpmZECk_0amdM6iFBkM.roa (hash: OkzRGccuAo2/o3w00touVdIm5lxj1wpjHOWmBqY715M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:cd:3f:db:3e:94:44:ee:c6:58:10:14:eb:9c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b67541b8e7df3d564491fea558cecb29e97083
Validity
Not Before: Sep 10 06:01:04 2026 GMT
Not After : Sep 11 06:01:04 2026 GMT
Subject: CN=b0004ac45459e869f94a1b68209d8c56623d7471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:22:45:a1:06:83:3d:1e:48:e3:93:27:09:8c:
95:06:1a:f9:aa:5a:c5:da:a2:0b:80:62:af:33:f9:
9a:79:18:5a:02:19:14:1b:8a:0e:4e:a4:1b:ea:43:
0b:f8:ed:c2:87:2d:7a:ac:5a:cf:46:5f:d9:70:0e:
3f:d0:60:1b:c6:2e:0f:0b:1b:8b:72:9f:e3:00:1d:
bf:38:7a:3e:ad:4a:d0:74:40:18:c4:2f:9c:42:25:
17:4b:a1:aa:d1:bc:f1:ea:61:9a:33:10:8b:c1:27:
b4:5a:73:67:0b:0c:2f:35:6e:ce:ee:e1:a7:d0:47:
d5:9b:1d:8e:4f:27:8a:b0:2c:ac:70:c7:d9:07:7b:
fa:a0:94:b9:5a:ba:e2:80:52:c4:b2:4f:b2:b8:d9:
37:05:be:8a:95:68:60:03:54:c7:a8:45:65:ae:f1:
36:30:b2:a4:0d:ab:bc:56:bf:3e:9c:2a:60:95:b8:
5b:4a:20:af:4f:ba:c7:88:c2:2f:6a:b1:86:2e:80:
75:a4:e3:30:d0:83:05:4e:69:bb:6c:fb:2a:b0:ab:
e4:26:ea:ce:03:10:d7:8f:b7:a1:9e:b7:e8:c1:d4:
48:17:f3:3a:0a:83:a7:c5:d4:e5:d0:72:3d:ad:94:
8f:3d:c6:a4:79:61:ec:57:e8:9f:cc:50:19:63:c6:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:00:4A:C4:54:59:E8:69:F9:4A:1B:68:20:9D:8C:56:62:3D:74:71
X509v3 Authority Key Identifier:
keyid:E0:B6:75:41:B8:E7:DF:3D:56:44:91:FE:A5:58:CE:CB:29:E9:70:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:93:23:ac:66:6b:76:0f:69:30:28:5b:d8:44:ed:6c:79:35:
ac:c9:9d:5b:64:c1:b8:cd:c9:f1:39:84:cb:3c:d7:9a:f2:1a:
17:de:a4:89:85:bd:4f:69:53:fb:14:f7:d9:d9:1a:f7:80:1e:
48:a3:0e:6d:6e:97:2b:be:8e:b7:41:fd:f2:c9:4b:61:ea:45:
03:cc:ff:23:5b:a8:b4:f1:84:60:46:31:eb:bc:e8:b9:02:40:
f3:65:94:66:92:8d:0b:1b:4f:24:1b:91:ed:83:6a:f0:32:cd:
9a:83:4a:9e:86:32:30:b8:f3:00:0d:ca:bc:b1:b3:02:8d:b3:
42:db:ac:54:8c:d7:38:00:d7:2c:32:5f:fe:79:11:b0:f9:ec:
ee:81:43:c9:e1:6c:e0:31:5b:ac:e6:3b:4b:41:af:64:b4:2a:
86:20:bc:80:a1:e7:e5:e6:53:98:a6:f8:88:a6:7d:87:ea:b5:
97:80:a8:1f:9e:a9:78:17:23:2d:fe:49:64:46:2e:82:fd:89:
a0:0d:54:5d:0d:24:5d:56:f0:ee:e5:e8:64:06:78:5c:aa:64:
6c:76:d1:6a:ff:e4:6d:9d:76:c6:6b:5c:f3:d7:08:2d:f2:94:
d4:6f:2e:75:51:6d:86:93:1f:f4:96:b1:97:9e:3d:3b:2f:aa:
69:05:90:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJ580/2z6URO7GWBAU65y9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYjY3NTQxYjhlN2RmM2Q1NjQ0OTFmZWE1NThjZWNiMjll
OTcwODMwHhcNMjYwOTEwMDYwMTA0WhcNMjYwOTExMDYwMTA0WjAzMTEwLwYDVQQD
EyhiMDAwNGFjNDU0NTllODY5Zjk0YTFiNjgyMDlkOGM1NjYyM2Q3NDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iJFoQaDPR5I45MnCYyVBhr5qlrF
2qILgGKvM/maeRhaAhkUG4oOTqQb6kML+O3Chy16rFrPRl/ZcA4/0GAbxi4PCxuL
cp/jAB2/OHo+rUrQdEAYxC+cQiUXS6Gq0bzx6mGaMxCLwSe0WnNnCwwvNW7O7uGn
0EfVmx2OTyeKsCyscMfZB3v6oJS5WrrigFLEsk+yuNk3Bb6KlWhgA1THqEVlrvE2
MLKkDau8Vr8+nCpglbhbSiCvT7rHiMIvarGGLoB1pOMw0IMFTmm7bPsqsKvkJurO
AxDXj7ehnrfowdRIF/M6CoOnxdTl0HI9rZSPPcakeWHsV+ifzFAZY8bPdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAASsRUWehp+UobaCCdjFZiPXRxMB8GA1UdIwQY
MBaAFOC2dUG45989VkSR/qVYzssp6XCDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNExaMVFiam4zejFXUkpILXBWak95eW5wY0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMzcwNzAtMzYzMC00NTYwLTkzYWUt
ZDIwMjFmNzA4YmY3LzEvNExaMVFiam4zejFXUkpILXBWak95eW5wY0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hMzcwNzAtMzYzMC00NTYwLTkzYWUtZDIwMjFmNzA4YmY3
LzEvNExaMVFiam4zejFXUkpILXBWak95eW5wY0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5MjrGZr
dg9pMChb2ETtbHk1rMmdW2TBuM3J8TmEyzzXmvIaF96kiYW9T2lT+xT32dka94Ae
SKMObW6XK76Ot0H98slLYepFA8z/I1uotPGEYEYx67zouQJA82WUZpKNCxtPJBuR
7YNq8DLNmoNKnoYyMLjzAA3KvLGzAo2zQtusVIzXOADXLDJf/nkRsPns7oFDyeFs
4DFbrOY7S0GvZLQqhiC8gKHn5eZTmKb4iKZ9h+q1l4CoH56peBcjLf5JZEYugv2J
oA1UXQ0kXVbw7uXoZAZ4XKpkbHbRav/kbZ12xmtc89cILfKU1G8udVFthpMf9Jax
l549Oy+qaQWQDQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:03:09 2026 by rpki-client