Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
File: l8yglS24qp_l5XA8bxiaBqV_S7E.mft (raw, json)
Hash identifier: JserhcGETIYqUtI7EM4fWFuwIPsl04lgkYHchQDbCN0=
Subject key identifier: 20:67:F5:F9:FE:79:03:21:5F:9D:A2:FA:08:63:63:37:50:D1:8F:B3
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial: 019D9AE3963F8121BD00F0020C4393EB6B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
Manifest number: 18CF
Signing time: Fri 17 Apr 2026 10:01:39 +0000
Manifest this update: Fri 17 Apr 2026 10:01:39 +0000
Manifest next update: Sat 18 Apr 2026 10:01:39 +0000
Files and hashes: 1: D_NaeME6deLTOM55Rrl2tm5MZLg.roa (hash: 2nQkrWt+U2qpN2DacnokV1bSMaLyh7jDyjPYg9NULnc=)
2: _Z9kIAQcE6-6EPrDFAlao0VNTuk.roa (hash: YO3bTxD0d8jX4MfO5emz2hZodBfCrU0nERueP6IevH4=)
3: foV-97aSM2J17L6HTgvN2wr-MCc.roa (hash: ziu79fnSFBF1I8pOYgL2UURHoDwOvi1qVp+GJ/gyfms=)
4: l8yglS24qp_l5XA8bxiaBqV_S7E.crl (hash: OvEf79XoNkyJD3g8WA6sNG/V8vGjUmxB1xSOhQEKmvk=)
5: n1Cgw1hB_M-JwsTRUDUDk0hkx0I.roa (hash: X0eM+VJX4804vZu0ss2zy1CUVizErDWKqV14QA7ZUik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:96:3f:81:21:bd:00:f0:02:0c:43:93:eb:6b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Validity
Not Before: Apr 17 10:01:39 2026 GMT
Not After : Apr 18 10:01:39 2026 GMT
Subject: CN=2067f5f9fe7903215f9da2fa0863633750d18fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:87:0d:d3:12:0a:39:6b:73:a6:7e:6d:af:
b6:23:e7:81:48:f2:30:10:bc:5d:c0:ac:af:f3:73:
df:9f:16:9c:c5:27:00:29:fb:0f:39:e4:22:76:f0:
42:22:0b:32:52:6c:2b:1a:a3:e0:86:79:be:60:92:
b9:80:36:a3:d0:d4:04:c4:4f:fa:cc:3f:8e:63:17:
19:f5:f7:11:6a:ef:70:de:c2:a5:1c:5c:af:1e:8c:
f5:10:c0:05:c5:4f:c7:9d:64:4f:a4:d5:5c:fd:af:
14:a0:62:d8:3e:9a:75:af:e1:24:6a:17:05:93:26:
2c:b7:54:8c:e8:46:75:2f:3f:e5:e2:6b:1d:19:cd:
fb:58:86:d9:13:56:3a:7a:fd:5f:32:d0:8d:01:d0:
01:50:3f:77:18:86:06:89:ec:f8:8c:d5:27:7b:f2:
de:1f:98:e6:d4:10:24:37:c0:e0:30:6e:fb:fa:ee:
98:f9:f5:ba:dd:1a:75:1a:6a:51:9d:96:fd:25:cc:
bd:5d:7f:f1:46:1c:12:63:76:68:7a:33:dd:3c:d9:
be:82:87:8e:7f:99:e9:f7:23:25:46:f7:5b:42:68:
bf:fc:85:f9:c9:b9:eb:63:72:d3:32:d2:eb:ca:4f:
d7:1b:df:76:b2:f4:65:fd:6d:e9:1e:1c:69:f8:17:
e0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:67:F5:F9:FE:79:03:21:5F:9D:A2:FA:08:63:63:37:50:D1:8F:B3
X509v3 Authority Key Identifier:
keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:83:10:64:c5:9c:24:23:c1:a1:37:04:df:bb:a0:c0:5d:bb:
f5:e4:d7:31:a7:e8:5e:42:8b:a3:1f:e0:ea:8c:8d:34:2e:16:
98:d6:8b:c0:1d:91:1f:74:65:6a:34:c1:b0:1f:a3:80:99:b1:
60:16:4f:c9:ac:80:d0:64:3b:ab:49:3a:77:cf:07:f3:31:21:
58:07:f6:dc:20:c0:0c:5e:52:34:46:2f:bd:e7:47:5f:39:61:
68:3b:4d:a2:42:f8:75:72:39:e5:45:b1:68:da:d2:06:97:3d:
58:bb:33:91:27:5c:a8:8e:b6:f9:26:4b:45:43:85:57:b7:19:
0b:35:22:52:55:ed:5b:fe:38:da:ac:5c:d9:d3:21:41:72:39:
a8:c5:ea:95:c0:70:73:7b:ca:ae:a4:2a:90:7e:2a:df:f2:4f:
38:64:a1:f1:05:25:98:c5:47:fc:40:6c:e1:f3:16:74:13:79:
ee:d8:d7:7a:eb:2c:37:b6:ee:fa:5d:be:8c:5a:04:a0:9e:78:
a2:37:17:26:2e:89:e8:c8:1d:e4:72:b2:7c:49:19:8f:ee:f2:
19:e3:5b:4d:7c:a1:22:19:6d:f3:ca:74:24:00:39:13:dd:f0:
3a:3d:31:0b:13:13:72:6c:89:af:00:e0:ac:e3:5d:e6:da:3e:
30:55:0a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:58:20 2026 by rpki-client