Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: TMypv+DbKGU69bVjKIl/HEpHEVgKEhRIyl+gzjgg25o=
Subject key identifier: D2:C6:35:DA:71:0C:FC:A1:D1:D9:63:D9:32:9C:76:FB:1B:AD:37:FD
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 019DA3AEE717CAACCA46C9DF6BF4D156BAE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 03:00:41 +0000
Manifest this update: Sun 19 Apr 2026 03:00:41 +0000
Manifest next update: Mon 20 Apr 2026 03:00:41 +0000
Files and hashes: 1: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: WzzXmTNn8OOFSEzhL53/41AQ8Y6AdyYUZVrbp8+iKC8=)
2: SizhTkIG2sATNsv1VQNzH4wHchc.roa (hash: 2PYBEpDEAGt3SnEGmQvvCFiLA489Fe6L2n4/O/hryFQ=)
3: cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa (hash: D27oXJgFuXlMx0AdNp5xIFlLxsheQv6fczl4XU0D9Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:e7:17:ca:ac:ca:46:c9:df:6b:f4:d1:56:ba:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Apr 19 03:00:41 2026 GMT
Not After : Apr 20 03:00:41 2026 GMT
Subject: CN=d2c635da710cfca1d1d963d9329c76fb1bad37fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:08:24:b4:1a:4d:40:af:02:93:45:57:d8:
7d:14:ae:54:7e:c9:4d:9b:e6:42:ee:de:79:b0:7c:
3c:e4:17:8a:90:de:e8:49:f9:4e:33:31:91:46:d7:
00:9e:b1:cc:01:4d:29:e8:cc:0c:9a:3f:3e:14:22:
08:1e:c6:2f:20:64:fd:86:d6:8c:09:c6:13:ac:38:
5b:90:cf:6b:9f:f0:61:bb:ec:1e:0b:67:61:a1:41:
09:76:f6:0e:04:0b:47:52:5a:f4:88:df:42:f8:1b:
37:3a:bd:20:e3:8d:8d:0e:7b:79:d6:d9:f6:68:51:
41:4d:91:95:3b:32:22:7f:45:89:59:b7:0b:07:ad:
37:c1:bd:18:b3:ac:02:9b:73:6e:2b:a2:6d:02:63:
a9:cc:52:c5:6b:45:a7:93:65:38:86:38:a2:eb:93:
9e:8c:9e:31:b1:ea:cb:7b:3b:f9:70:c7:20:cf:e2:
a2:8e:48:47:a8:5b:2e:24:7f:d8:c5:72:18:18:f4:
cc:8f:c4:0b:bd:07:04:f7:96:aa:61:8c:ab:85:bb:
b0:f0:3f:c9:f6:f1:22:58:42:58:61:63:63:f1:c8:
83:d4:fb:a6:a5:e9:ff:8f:0a:30:0f:73:d3:b9:6a:
db:71:fe:1a:ab:81:f1:80:9c:4c:aa:36:03:ce:8f:
12:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C6:35:DA:71:0C:FC:A1:D1:D9:63:D9:32:9C:76:FB:1B:AD:37:FD
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:39:c8:90:c8:db:b9:29:ab:00:f8:0b:94:c0:6a:44:a4:8e:
4b:bd:a9:9a:cd:70:b2:ad:fa:b1:d8:25:29:ca:6d:36:db:25:
4c:b3:b9:60:b9:ec:42:92:91:6c:cc:2e:3c:25:3c:99:8a:30:
3d:e0:e4:da:b0:0b:fa:86:6e:bd:72:0b:1a:cb:24:64:55:75:
23:fd:4f:9f:45:b4:e2:b1:8c:7f:34:4f:1c:1b:af:6a:9e:f7:
dc:79:7f:34:6d:06:e3:05:7a:91:ea:c4:35:73:f8:66:58:9a:
f2:20:1b:74:40:1b:61:ae:ae:da:5d:eb:65:c0:1c:e5:fe:7f:
09:39:2d:8d:b7:3d:de:58:6e:9a:06:00:65:09:cd:6c:30:57:
f7:67:bb:de:7d:ba:b0:d4:da:c6:92:08:3c:3d:78:86:03:8e:
f9:b6:6a:84:b3:50:e9:87:a3:c5:62:d6:ca:2d:ed:f5:23:42:
f2:60:ac:c7:3d:f9:06:98:8e:de:c2:b7:23:75:99:53:2c:26:
c8:cf:3a:b4:ca:5d:8d:00:31:2e:fa:94:15:f0:18:31:5d:bf:
e5:11:5a:30:a4:61:f0:db:58:59:86:a2:83:19:7c:db:b4:36:
32:f0:08:ba:e1:b6:12:2d:85:10:05:38:ce:a1:77:57:2f:3f:
80:60:c8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:10 2026 by rpki-client