Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json)
Hash identifier: Qv+8ExU5i3SGSQGjdHcyaaCsn9lbrwmOzBdO6B9tu5A=
Subject key identifier: 16:D2:44:D5:70:F0:B4:48:90:B6:B3:5D:FF:00:91:98:E5:12:2F:C2
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 019D9B879D6CC7AAADF684866B55DF20A17C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 13:00:49 +0000
Manifest this update: Fri 17 Apr 2026 13:00:49 +0000
Manifest next update: Sat 18 Apr 2026 13:00:49 +0000
Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: Zhx5vCaiWWRvI06wD/wOLlFcJqDKQIrBPBcKGp9k6OI=)
2: 3Xes1MHD_a5bIGduyNKw431Rgic.roa (hash: Wc2i+E+YpkqUKLdM48sp0OfQBJ7K/jV9MpkIdBzD9ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:9d:6c:c7:aa:ad:f6:84:86:6b:55:df:20:a1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Apr 17 13:00:49 2026 GMT
Not After : Apr 18 13:00:49 2026 GMT
Subject: CN=16d244d570f0b44890b6b35dff009198e5122fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:57:bf:15:45:bb:bd:30:a2:33:ae:37:7b:
2d:a2:c8:38:17:0d:fd:9e:c6:73:5d:38:bc:fd:bb:
3a:1c:0f:b0:a6:9a:3e:ae:b0:e4:8b:fb:ca:56:d8:
4c:d6:0c:2f:fd:4d:be:c9:3a:11:67:e5:98:fc:61:
a2:e0:de:df:a7:fc:fa:74:34:fd:af:3d:0e:96:2e:
d4:bf:4b:81:29:32:e6:7c:b0:e8:63:25:bf:3e:0b:
39:f6:95:09:fb:3a:59:a7:05:8d:4e:9a:e9:c8:cb:
bb:36:57:06:b4:72:d1:12:1f:e3:eb:61:ea:99:7a:
18:a7:34:7d:d2:5e:e7:a5:8a:71:4c:48:12:07:bd:
0d:fa:a7:f4:07:97:18:1c:b2:9f:99:d3:e0:cf:f7:
e8:38:b4:b1:e9:0c:6f:77:af:ad:7c:b9:9b:11:62:
d7:d3:61:6a:a4:4c:28:1f:ea:ff:37:3d:93:bf:94:
8f:1f:b8:33:fb:47:0d:4e:67:f1:bf:3a:0c:43:7b:
92:f4:3b:a4:05:95:f3:dc:3a:88:76:d3:da:51:6f:
8c:e2:89:33:2f:83:ac:3d:59:e0:63:ba:9b:0e:e6:
da:20:f0:d6:bf:35:eb:ed:74:4d:04:94:31:a9:86:
a6:74:65:21:a5:43:88:29:7a:c3:b9:4c:a3:dd:76:
8e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D2:44:D5:70:F0:B4:48:90:B6:B3:5D:FF:00:91:98:E5:12:2F:C2
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2a:ca:a6:cf:8e:e6:4b:fa:14:16:9d:a2:2c:46:6a:82:c9:
58:ee:e6:d9:95:77:a8:cb:20:d1:18:0a:50:af:48:ad:c6:ed:
c7:c8:15:1a:a0:3c:7a:48:5b:43:95:7d:74:b5:23:86:6c:87:
3e:de:c1:32:93:10:8e:a4:67:34:93:85:21:5c:92:5d:5e:81:
ee:b2:ab:4b:b1:5e:3c:64:d2:e8:9d:19:e4:ff:5a:ba:f6:6a:
ea:94:84:42:f4:fe:67:c9:bd:d5:00:cf:c9:65:62:ac:ed:f3:
a2:9d:07:1e:5c:a3:96:21:69:2e:88:da:55:9d:c8:8b:fc:a5:
77:88:32:ee:1a:0f:9e:b3:9a:39:a3:71:e7:68:d7:ac:86:59:
76:f4:16:2c:ae:2d:0d:88:bb:45:63:a0:e4:23:e0:a2:c3:73:
20:66:84:88:f1:db:91:6a:68:80:67:72:59:01:a2:20:d4:70:
a8:f4:f7:51:12:66:7b:60:cd:bd:65:34:ef:16:0b:81:4e:94:
15:5d:aa:8a:12:cc:a5:db:bd:5d:c5:32:4e:9e:b4:ed:1e:e9:
2b:42:f4:8f:6d:e6:d8:b8:cc:cd:52:30:bb:3e:0b:09:3a:4e:
3a:9f:4f:d9:be:fa:0f:19:9e:85:90:5e:2d:a5:81:63:a4:79:
0a:e3:7d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:21:25 2026 by rpki-client