Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: rGAC+vINfnsnhHfbQLsxpKMuTRbC9Qro4yMnO1xXF9E=
Subject key identifier: C0:B2:34:0E:D2:45:1E:34:99:4A:8D:AA:C0:C9:D9:87:7A:70:59:70
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 019D9A3EA5EB352B30997570D9ACF4CDEEC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 07:01:30 +0000
Manifest this update: Fri 17 Apr 2026 07:01:30 +0000
Manifest next update: Sat 18 Apr 2026 07:01:30 +0000
Files and hashes: 1: 5zXq-FtbfKVjtSSz3geS2vHCvmY.roa (hash: wO+/2FCBNgWvsvAqT9cT/K3eUtj2DJtruhQHyhf5M3Y=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: mKKRAnJUkUkeRHhiqKCdSxkTfVXja2zUPrNF3BhIEi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:a5:eb:35:2b:30:99:75:70:d9:ac:f4:cd:ee:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Apr 17 07:01:30 2026 GMT
Not After : Apr 18 07:01:30 2026 GMT
Subject: CN=c0b2340ed2451e34994a8daac0c9d9877a705970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:38:c0:10:42:af:91:c6:fc:9c:e7:fc:73:
aa:63:1c:06:7c:4b:ea:0c:d3:10:f4:a0:31:52:37:
10:86:2e:41:d2:e6:26:67:87:26:2c:6b:b8:d9:13:
ca:4a:67:45:d2:1f:6d:2f:e7:ea:f6:e9:9e:ed:b4:
a5:d7:47:f3:f5:b1:db:b6:eb:67:80:ce:f6:07:c2:
25:a1:8a:3f:ff:48:ab:8d:08:ff:e6:01:3c:ba:cf:
64:00:bd:36:fc:24:b6:df:8c:92:3a:55:b9:ec:55:
c2:e4:2e:ad:76:61:ec:f5:eb:60:4b:9d:3d:74:a2:
e7:e5:90:00:66:f5:81:c4:54:2c:22:1e:e3:a4:71:
59:b2:b5:77:d3:0c:cd:1f:06:b2:39:e2:a3:28:62:
a8:43:9e:95:be:ef:17:60:3e:4a:85:76:d9:92:c8:
84:f7:81:cc:e1:e4:6b:e4:66:de:7c:fb:ee:94:d2:
ca:2b:91:87:3b:43:85:6e:58:c0:38:2a:0e:8f:63:
c1:9b:f0:5b:16:f6:d3:a3:4f:c1:a0:ae:71:ac:18:
99:ae:9c:cc:aa:24:69:d5:f5:ea:0e:17:0e:52:9f:
75:c1:c3:f1:e3:df:2f:3e:9c:cd:79:1d:39:40:94:
c9:1f:cf:4e:00:23:ba:45:35:50:bf:ae:1b:11:e7:
82:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B2:34:0E:D2:45:1E:34:99:4A:8D:AA:C0:C9:D9:87:7A:70:59:70
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7e:6c:59:44:1b:eb:df:67:3d:55:4e:31:69:b1:5f:79:9b:
53:69:cf:f9:da:1b:01:63:84:c5:16:5d:14:cc:c8:90:3e:1b:
95:17:62:de:b7:42:dd:ef:b6:3a:cb:cd:12:b1:cd:6b:b8:6a:
df:b7:f9:91:82:b8:02:20:86:5a:7c:dd:08:f8:69:6b:f3:f2:
37:58:a5:81:70:d7:d6:17:16:31:2f:b8:2b:b1:23:7b:b0:e3:
28:34:4c:97:9d:69:6f:28:f4:ff:61:19:53:32:6b:8f:58:30:
ce:15:a3:64:6e:5f:1c:54:e8:06:45:f3:9a:ba:e2:68:81:cc:
85:56:d2:5c:70:93:6f:48:2a:8a:f8:20:6b:ec:26:9e:16:40:
c1:30:cc:dc:69:25:b3:2e:bb:34:42:6a:17:be:87:04:1f:dd:
bb:1d:d4:0d:3c:73:df:33:96:1d:36:65:f5:91:ce:33:fb:e4:
26:ca:52:b3:f8:8d:96:c5:b8:78:fc:fd:63:92:9e:41:04:da:
bf:6a:b3:b6:53:68:24:36:b3:6d:17:e0:b4:a0:ac:c7:93:05:
33:a3:98:2b:78:b1:8e:bd:27:5e:78:15:f9:90:ea:0f:b9:15:
38:7b:54:94:0c:23:35:39:29:1b:f7:6e:02:5f:59:e1:af:f4:
5b:65:e9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:50:00 2026 by rpki-client