Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
File: LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft (raw, json)
Hash identifier: RGmhcz1WpSEDn7qhsr/y8oDirIvsQl9ImbRSTWVNlgc=
Subject key identifier: 7B:46:5C:4D:25:5A:1A:CE:3E:DA:EA:5B:D8:83:23:D2:C8:E8:30:DE
Authority key identifier: 2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
Certificate issuer: /CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Certificate serial: 019D99CFFDC916B8861ED8C2CBC02E670E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
Manifest number: 0535
Signing time: Fri 17 Apr 2026 05:00:38 +0000
Manifest this update: Fri 17 Apr 2026 05:00:38 +0000
Manifest next update: Sat 18 Apr 2026 05:00:38 +0000
Files and hashes: 1: LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl (hash: 5+vqvqD69Lvqyg2zxTXVDBqbsZNxNAX0jv386eSv09s=)
2: Oz8EKSEHcWY_e4izVRb6ZqBpY-g.roa (hash: WQ/GzCseC8Ss8NihAisrEJ049anzZmJVy7FC4nNnwTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:fd:c9:16:b8:86:1e:d8:c2:cb:c0:2e:67:0e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Validity
Not Before: Apr 17 05:00:38 2026 GMT
Not After : Apr 18 05:00:38 2026 GMT
Subject: CN=7b465c4d255a1ace3edaea5bd88323d2c8e830de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5d:b3:e6:9b:38:80:ad:c3:19:b8:3c:81:2c:
60:6a:f3:f2:03:12:85:b1:03:e7:1c:4d:c2:5b:95:
3a:2c:22:24:eb:c7:dc:d3:87:13:35:fa:0d:96:8e:
3d:cc:3e:7d:e7:4f:01:78:32:6c:a9:74:bd:9a:7e:
1d:0d:bc:37:75:39:6a:48:96:87:70:ec:38:0f:0c:
73:0a:20:90:9e:1d:db:50:c2:37:33:9f:f5:01:d4:
97:ef:d0:19:92:e6:ca:70:58:69:0c:ef:1d:65:1e:
07:01:e0:53:af:37:b1:fe:ab:13:9a:b6:bd:0c:68:
a8:ae:96:7f:f4:43:87:c5:06:f8:53:03:7c:ed:e7:
96:0f:1d:ac:f5:71:ba:f0:63:43:61:b9:07:84:81:
aa:9c:54:14:87:99:08:a4:62:56:81:31:25:ff:2d:
8e:70:8d:dd:16:84:47:3f:7a:29:54:d0:3a:83:56:
ad:08:a2:47:5a:71:64:42:87:b3:3e:61:4c:29:ce:
9a:e0:33:1a:a7:46:08:94:e2:c9:ef:1a:ef:07:b9:
af:58:82:b4:bd:96:ae:9f:58:2f:bd:31:0b:4a:4f:
67:4f:50:a6:e3:b3:21:26:5b:df:c9:73:f9:99:f1:
70:fd:8d:ea:e3:4c:90:03:cb:89:be:17:8f:7d:05:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:46:5C:4D:25:5A:1A:CE:3E:DA:EA:5B:D8:83:23:D2:C8:E8:30:DE
X509v3 Authority Key Identifier:
keyid:2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fd:a9:d7:eb:7b:7e:52:cb:b3:91:14:61:55:a7:69:2a:b9:
fe:0b:9f:d6:5e:e4:e5:06:74:08:f6:43:d5:ae:57:9e:5f:8c:
56:1c:1e:13:ec:4b:ed:34:44:31:f2:f5:7b:7b:34:27:6d:c6:
fb:93:f7:2c:74:dd:3f:30:33:40:3b:5e:ab:bc:b1:54:b8:7d:
ae:a5:1e:25:d7:76:75:d8:25:d8:1d:a6:29:2a:32:2c:8f:36:
88:91:1e:c0:ab:2a:75:6d:7e:1c:86:1a:35:de:98:41:6e:b0:
b3:66:5f:19:21:cc:6c:08:d9:f6:fc:dc:54:02:8c:94:de:0b:
9e:d9:c9:73:05:11:42:d3:a5:5b:f6:51:9b:b0:a5:07:ad:d7:
cf:46:ed:32:06:10:a5:b8:81:38:26:a0:4c:e3:74:27:c0:20:
72:8d:75:30:d2:ac:b3:e3:50:c2:28:f9:ad:b3:0e:98:7d:b6:
65:ca:b0:d5:92:40:85:ad:84:60:be:59:4c:37:b3:e2:c5:89:
af:17:c8:b7:7e:79:f0:2f:73:e2:09:b5:b7:69:f2:47:eb:c1:
75:d5:d7:94:64:c1:79:37:a8:ce:6b:b6:f3:e2:ec:90:af:53:
f9:8f:d2:38:1d:b1:ac:fe:5c:a3:1b:8f:d2:0c:12:97:d7:60:
80:39:9c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:39 2026 by rpki-client