Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
File: l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json)
Hash identifier: ICAU7JJA16hHIruLIIxiFn1QT+cCeoYPritKJevbwic=
Subject key identifier: 46:7E:BB:53:25:58:59:60:B5:0D:EC:0C:51:C6:BC:35:45:00:27:32
Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Certificate serial: 019D99CFF243FB205EA9966B0A5D3BD1C7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
Manifest number: 11DA
Signing time: Fri 17 Apr 2026 05:00:35 +0000
Manifest this update: Fri 17 Apr 2026 05:00:35 +0000
Manifest next update: Sat 18 Apr 2026 05:00:35 +0000
Files and hashes: 1: K1yzaA2LKv6WrPfYON-LGHn3q18.roa (hash: e3dzwnCmJbGlroDSJANi3J5QVo/VvZgQAmatunxEAZo=)
2: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: Ycc0POZ6G8gpkvjse0f3LPWpWSbOB3amx2lzNn4DlSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f2:43:fb:20:5e:a9:96:6b:0a:5d:3b:d1:c7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Validity
Not Before: Apr 17 05:00:35 2026 GMT
Not After : Apr 18 05:00:35 2026 GMT
Subject: CN=467ebb5325585960b50dec0c51c6bc3545002732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:7c:c3:ed:63:06:d9:c8:ff:a1:51:bf:13:
d2:a9:61:16:84:24:50:27:99:f1:cf:bf:06:47:4a:
3d:bf:55:7d:78:82:d2:1a:1e:56:c0:c7:2e:f2:3a:
ef:c3:62:b2:aa:d5:97:80:b1:54:4f:e4:d2:bb:dd:
fe:b5:0f:78:5b:d8:4e:9e:47:59:27:d8:f0:38:ed:
70:eb:bd:00:59:80:29:68:02:c8:cb:9e:e7:13:7b:
bd:53:84:b7:f0:a2:99:d8:2a:83:3a:2e:ab:f7:7f:
20:19:bd:08:66:c2:ce:aa:49:32:5c:bc:b3:49:7b:
e1:49:4d:95:92:b0:95:58:45:04:e9:ae:9f:4a:7b:
8f:0a:e2:69:14:4c:4c:8b:3b:b2:23:55:3c:39:dd:
2f:86:51:0c:36:81:48:03:de:08:1a:9c:b6:28:1d:
3e:c4:8e:53:bf:a3:ba:77:b9:32:19:fa:54:d5:ed:
3f:c3:cd:95:e1:d6:70:27:6a:9a:09:60:11:c0:82:
39:9d:5d:36:ec:4a:32:88:a6:bd:d5:4c:b8:a0:5e:
c5:b1:c0:d2:c5:ae:91:46:2a:fa:8e:7d:99:83:dc:
bf:ac:fa:85:47:91:02:ca:31:f3:73:76:51:6c:8d:
42:c2:27:17:03:d2:59:d8:55:98:07:d8:fd:d4:67:
71:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7E:BB:53:25:58:59:60:B5:0D:EC:0C:51:C6:BC:35:45:00:27:32
X509v3 Authority Key Identifier:
keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7f:1b:4e:02:1b:ff:f2:7b:68:bf:15:0e:b1:46:17:31:15:
66:75:7d:53:9e:d3:71:b8:37:4c:e0:01:8a:7a:ba:d9:10:a7:
78:7a:0c:7d:9b:d3:ed:b1:cb:bd:e8:b1:37:db:c0:d8:53:37:
f2:3b:c9:1d:55:b8:4d:7f:59:4d:a1:76:04:cc:c2:6b:c9:79:
76:ca:5f:9a:99:18:eb:90:ce:e1:e0:8a:b5:33:29:af:a9:47:
4c:45:7f:a3:09:c8:6b:94:36:11:13:dc:1d:be:8f:d5:9a:7f:
4a:e9:ba:2d:4c:26:1e:72:e1:9f:e2:25:b4:80:28:02:6f:0b:
7f:eb:46:dd:fb:7a:3a:f7:76:b2:6b:b2:4d:0c:90:7e:a8:ba:
da:1d:e6:bd:fd:f6:6d:1c:a1:4f:95:25:b3:0c:19:07:59:c8:
be:6c:4e:b7:2b:46:79:40:76:bc:10:1a:1f:3d:a9:4b:c0:5c:
3a:9f:92:16:3c:28:cf:19:22:8e:fe:ae:6e:e3:69:81:94:e2:
a0:77:bb:8e:5c:11:a2:cd:ae:8d:2c:32:24:04:94:0a:50:b7:
e0:bd:9d:1e:7f:2e:10:b0:c4:25:e2:69:a8:e9:05:54:a1:bd:
fe:ef:9d:2a:d8:98:b0:ad:36:53:d7:9f:c8:42:58:37:bd:c5:
b1:19:3f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:32 2026 by rpki-client