Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
File: levYBm8QkMMRnNtp6dTcQNkDBPg.mft (raw, json)
Hash identifier: HMDijxMQVUuDcRgjfnc6GtEBSrko6mLqhQGTXxT/aRo=
Subject key identifier: F0:D0:3B:EE:DD:08:4D:EE:DB:E5:77:1B:E1:AE:F6:7C:6C:7E:4A:6C
Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
Certificate issuer: /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Certificate serial: 019D99D0ABB6CF83CF39F6E3F4D2E80C0C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
Manifest number: 18CD
Signing time: Fri 17 Apr 2026 05:01:22 +0000
Manifest this update: Fri 17 Apr 2026 05:01:22 +0000
Manifest next update: Sat 18 Apr 2026 05:01:22 +0000
Files and hashes: 1: 6p89_xCOKbaLA_nTNaPhKFJdz_c.roa (hash: 8QYHiVGLqfMhZfw5m6z2kE4Wp9ZlKeYZXiQifht1XBw=)
2: levYBm8QkMMRnNtp6dTcQNkDBPg.crl (hash: Ne7seuYHyP2B8zhA4e7bMuPV7oYWaohQBZWNPaTHfbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:ab:b6:cf:83:cf:39:f6:e3:f4:d2:e8:0c:0c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Validity
Not Before: Apr 17 05:01:22 2026 GMT
Not After : Apr 18 05:01:22 2026 GMT
Subject: CN=f0d03beedd084deedbe5771be1aef67c6c7e4a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:74:89:ab:ea:7b:4d:f4:20:4d:1e:51:2b:8b:
4c:ba:67:10:b6:e5:98:16:cc:49:f2:06:7c:71:9c:
42:f6:1c:ec:6c:28:96:e5:5a:6b:20:ba:c0:7d:95:
0e:6c:4a:be:e9:68:fd:e7:c8:5f:29:38:6b:81:b1:
fa:04:3c:49:0e:a2:29:c1:e1:b7:0c:8d:aa:90:1b:
51:43:82:6c:a6:5d:f5:b2:79:69:20:a8:f9:c2:fa:
c1:0c:a7:7c:2b:58:25:0f:bf:eb:49:de:54:07:c0:
6f:a3:55:e8:72:c0:c7:86:bc:ab:dc:3c:29:64:0f:
25:a7:1d:08:25:53:38:97:a3:a7:6f:07:e7:65:ec:
8c:3a:4f:7a:8f:21:9a:51:5d:55:74:24:31:97:08:
fb:89:76:ac:31:c3:53:f5:f3:d7:0b:9b:c1:b3:54:
cb:79:c6:7b:ed:3a:76:f2:f4:ec:d1:54:a8:c0:94:
c5:d8:8b:9c:a0:1b:d9:31:23:89:69:88:dd:b2:9b:
1b:c8:1a:5c:b9:da:1b:43:4e:e8:0d:34:41:ab:bb:
5f:f6:1c:df:2a:3e:94:44:f1:b3:9e:f6:55:12:7e:
5e:97:d9:43:89:ae:16:e3:f0:8e:29:92:e1:62:73:
bc:24:66:8b:1f:5e:e4:55:e1:1e:93:3a:73:4e:88:
f7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D0:3B:EE:DD:08:4D:EE:DB:E5:77:1B:E1:AE:F6:7C:6C:7E:4A:6C
X509v3 Authority Key Identifier:
keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e7:7e:ea:64:39:0f:e5:1f:7a:61:82:46:5e:95:de:fe:0f:
12:d3:b6:6a:c0:51:9e:25:d6:eb:d5:29:c9:68:91:ff:79:6e:
c0:b9:b0:33:2a:6b:31:56:c3:00:75:2a:6b:0d:fa:9d:c6:6a:
54:5d:39:21:a5:b9:cd:10:e3:fc:65:e2:3e:ff:c1:80:77:5c:
bd:71:89:24:c1:39:25:2f:4b:f5:56:f3:11:f5:e2:e0:04:17:
48:20:14:da:87:4b:66:3a:ad:4e:36:de:17:22:30:a2:65:ed:
9f:e8:a8:17:47:84:87:f6:66:55:90:d7:d6:b7:c6:0a:0a:07:
d7:88:ed:fb:d3:a3:12:4e:3e:00:e5:76:a0:05:47:1d:68:19:
80:9c:60:11:c3:d1:a9:8b:0c:2b:7e:81:f9:fb:de:20:83:1f:
2f:93:fa:b1:d1:72:aa:98:b8:b3:94:e8:57:c8:12:a2:90:7e:
0b:d7:4f:7d:89:dd:7b:79:c1:b3:2f:7b:67:fa:52:71:98:7c:
0a:43:1e:db:5f:45:92:7f:72:40:38:b8:4d:d6:77:d3:44:55:
61:8f:df:14:4d:db:35:20:16:31:fc:f6:8d:ea:d5:80:b4:b9:
6a:8c:b5:fd:c9:54:b2:27:4a:8a:c7:b6:cc:f1:76:a5:55:68:
04:7c:00:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0Ku2z4PPOfbj9NLoDAxkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZWJkODA2NmYxMDkwYzMxMTljZGI2OWU5ZDRkYzQwZDkw
MzA0ZjgwHhcNMjYwNDE3MDUwMTIyWhcNMjYwNDE4MDUwMTIyWjAzMTEwLwYDVQQD
EyhmMGQwM2JlZWRkMDg0ZGVlZGJlNTc3MWJlMWFlZjY3YzZjN2U0YTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3SJq+p7TfQgTR5RK4tMumcQtuWY
FsxJ8gZ8cZxC9hzsbCiW5VprILrAfZUObEq+6Wj958hfKThrgbH6BDxJDqIpweG3
DI2qkBtRQ4Jspl31snlpIKj5wvrBDKd8K1glD7/rSd5UB8Bvo1XocsDHhryr3Dwp
ZA8lpx0IJVM4l6OnbwfnZeyMOk96jyGaUV1VdCQxlwj7iXasMcNT9fPXC5vBs1TL
ecZ77Tp28vTs0VSowJTF2IucoBvZMSOJaYjdspsbyBpcudobQ07oDTRBq7tf9hzf
Kj6URPGznvZVEn5el9lDia4W4/COKZLhYnO8JGaLH17kVeEekzpzToj3LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDQO+7dCE3u2+V3G+Gu9nxsfkpsMB8GA1UdIwQY
MBaAFJXr2AZvEJDDEZzbaenU3EDZAwT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGV2WUJtOFFrTU1Sbk50cDZkVGNRTmtEQlBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZGZmMTItNGU3Mi00MzBlLTlkZjYt
YmRhYTZmYmQ0MzQ3LzEvbGV2WUJtOFFrTU1Sbk50cDZkVGNRTmtEQlBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wZGZmMTItNGU3Mi00MzBlLTlkZjYtYmRhYTZmYmQ0MzQ3
LzEvbGV2WUJtOFFrTU1Sbk50cDZkVGNRTmtEQlBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArud+6mQ5
D+UfemGCRl6V3v4PEtO2asBRniXW69UpyWiR/3luwLmwMyprMVbDAHUqaw36ncZq
VF05IaW5zRDj/GXiPv/BgHdcvXGJJME5JS9L9VbzEfXi4AQXSCAU2odLZjqtTjbe
FyIwomXtn+ioF0eEh/ZmVZDX1rfGCgoH14jt+9OjEk4+AOV2oAVHHWgZgJxgEcPR
qYsMK36B+fveIIMfL5P6sdFyqpi4s5ToV8gSopB+C9dPfYnde3nBsy97Z/pScZh8
CkMe219Fkn9yQDi4TdZ300RVYY/fFE3bNSAWMfz2jerVgLS5aoy1/clUsidKise2
zPF2pVVoBHwAEA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:52:28 2026 by rpki-client