Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
File: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft (raw, json)
Hash identifier: 2vl8RbucZNMNzKzj4rS4aDXfthMvW/NQXHPPQUBBr7w=
Subject key identifier: DD:0B:3B:7C:1C:64:B5:45:C0:7D:24:AF:12:D8:17:35:E2:8E:39:C3
Authority key identifier: 2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
Certificate issuer: /CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Certificate serial: 019D9AE315ABAB3D4954B3A7029953B118C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 10:01:06 +0000
Manifest this update: Fri 17 Apr 2026 10:01:06 +0000
Manifest next update: Sat 18 Apr 2026 10:01:06 +0000
Files and hashes: 1: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl (hash: w4cuaN3iiw73aRGG4cubLilApeva1gW65lF3l0hP7xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:15:ab:ab:3d:49:54:b3:a7:02:99:53:b1:18:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Validity
Not Before: Apr 17 10:01:06 2026 GMT
Not After : Apr 18 10:01:06 2026 GMT
Subject: CN=dd0b3b7c1c64b545c07d24af12d81735e28e39c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:b9:f3:5d:9f:6d:a8:d5:8b:e4:31:3b:90:
b2:a7:38:81:fb:ab:6d:ec:af:28:57:70:7b:70:b3:
35:96:ed:56:63:e9:7a:72:4f:b1:2a:16:a0:da:6d:
85:72:50:b6:ff:04:ec:c7:31:87:ef:13:c2:c0:39:
a2:9f:d0:98:f7:53:b8:3a:94:6e:a9:ca:7d:de:d4:
7c:94:4e:5e:cb:e4:43:5e:63:a3:57:89:47:fa:ad:
fd:4f:5b:ba:c7:be:8f:bf:66:b3:c7:41:42:39:f7:
64:51:36:c7:25:f0:26:7a:80:2d:cb:f6:9f:80:fe:
fc:d4:cc:c6:c3:2d:3a:c4:ae:93:bf:72:85:c8:8d:
3e:7d:04:69:f9:1e:44:be:ba:0c:3b:c2:8f:60:b5:
fa:d9:64:52:82:b9:e4:f7:68:12:88:70:65:de:f5:
e3:68:49:13:cf:7a:3e:24:20:60:55:15:79:08:7c:
62:b4:ac:a6:23:d7:e6:b5:aa:e0:ff:b7:8b:78:eb:
41:3f:48:da:4b:98:79:e4:f1:78:96:40:06:eb:ce:
06:3d:5d:b2:af:9d:72:d7:7f:80:a6:f9:b5:6f:14:
45:d0:0d:7f:ed:2c:ac:54:ef:06:e4:23:3b:24:dd:
27:3b:44:3e:cd:88:3b:48:56:12:70:b1:22:d3:8d:
e4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0B:3B:7C:1C:64:B5:45:C0:7D:24:AF:12:D8:17:35:E2:8E:39:C3
X509v3 Authority Key Identifier:
keyid:2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a7:7c:64:9d:59:1f:2d:81:55:5a:86:82:b0:0e:c9:f9:74:
de:74:66:89:e9:4f:86:ef:4b:ba:92:72:a4:96:55:5b:e6:51:
51:af:17:89:ec:e5:3c:dd:8f:28:4e:23:92:da:fb:b4:2a:ef:
d5:3a:d7:25:be:d7:30:5d:44:ac:d0:a4:26:65:5c:93:61:c8:
1c:d4:ac:96:d5:4b:cf:33:3c:ea:d7:39:f9:38:90:7d:61:08:
83:77:70:a4:36:6f:44:fb:fe:6b:4e:cc:51:17:6d:44:5e:91:
b2:b0:73:bc:b4:76:2a:be:e6:1b:88:02:5f:af:33:aa:5c:e1:
6f:3a:d5:00:ef:33:90:f9:69:ec:98:7c:6c:49:c5:2d:66:8f:
2d:f2:5c:e6:61:4b:f7:0e:a6:9a:d9:1a:1b:e9:f2:a9:2a:a6:
4a:b1:62:62:17:df:1d:2a:ff:05:c9:75:c1:a7:a5:0c:e6:51:
74:54:b6:8f:9c:95:ad:c6:7c:ff:4d:57:bf:b1:ce:46:0a:96:
10:36:be:13:99:6a:94:3e:66:d4:82:97:87:9e:1b:3c:ed:3f:
a2:ef:ba:f3:ec:25:35:66:6e:81:de:a8:ab:d1:a8:f6:88:e5:
7b:2f:68:1f:e7:a9:01:07:f6:6e:55:24:46:bd:99:8c:2d:a0:
fb:4f:c4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:57:06 2026 by rpki-client