Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
File: _l28QbEed7xEvSxzVVS1tCWNDDM.mft (raw, json)
Hash identifier: Atu1OAO101wThqcH3ZXtF5KGlS/mZcF4x4Zv2HQaYRk=
Subject key identifier: 60:E8:F6:2C:C3:06:45:D5:A7:76:16:6B:CD:BD:10:83:2F:3C:E5:DA
Authority key identifier: FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33
Certificate issuer: /CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33
Certificate serial: 019D9AE28EACDB7DC869F0B3FF6908455064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 10:00:32 +0000
Manifest this update: Fri 17 Apr 2026 10:00:32 +0000
Manifest next update: Sat 18 Apr 2026 10:00:32 +0000
Files and hashes: 1: _l28QbEed7xEvSxzVVS1tCWNDDM.crl (hash: Jg+SQJZN7irUad5tTgEl+z6ac8gsu+5wSq1rr7IkHlM=)
2: vzX0LpiRwEQlpNTtMNXqGCdmemM.roa (hash: KNuGavq6SzPf6J1CyBPc8g7thzHVaBolgWDilffZwwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:8e:ac:db:7d:c8:69:f0:b3:ff:69:08:45:50:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33
Validity
Not Before: Apr 17 10:00:32 2026 GMT
Not After : Apr 18 10:00:32 2026 GMT
Subject: CN=60e8f62cc30645d5a776166bcdbd10832f3ce5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:ca:91:ef:35:6d:ea:7a:8e:3e:16:4e:d6:
6f:5f:e3:16:6b:34:8b:1f:3f:c3:95:54:9a:f2:64:
e9:39:9b:64:5f:f4:41:ab:f6:08:44:06:88:8d:34:
96:b6:02:d5:d3:36:ed:97:cc:24:a0:cb:fc:7b:99:
2d:e6:0d:86:4d:95:9c:ac:26:68:03:f2:3d:79:02:
9f:00:9c:a7:f3:aa:f1:1b:ce:86:51:bf:0b:a6:33:
cc:04:7a:83:b8:8b:9f:b9:2d:52:42:1d:00:c8:67:
d3:1c:82:2b:54:62:c9:ca:de:d3:57:31:14:4a:93:
7f:e5:38:f9:92:f1:fb:24:1b:5d:4b:9a:9f:80:1d:
13:94:f0:43:98:98:df:5a:45:79:e9:b1:e3:3f:bf:
e3:a1:30:5a:73:3e:1b:9a:7a:82:bc:12:b2:30:d7:
e8:3e:74:19:fe:03:62:51:75:d6:80:f8:bb:ca:5e:
33:f3:4c:dd:eb:4f:16:7e:6c:9b:d4:ca:88:5d:c1:
03:aa:be:0b:f4:3a:35:40:fa:5d:fd:ce:6f:3f:a4:
07:61:50:7a:b6:50:73:40:12:6c:1a:f8:53:ce:56:
a7:d1:1e:1c:4c:be:8e:27:d5:98:bc:04:84:fe:58:
0e:c6:ca:15:94:7f:ad:0a:07:ca:8b:03:f1:1d:08:
bd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E8:F6:2C:C3:06:45:D5:A7:76:16:6B:CD:BD:10:83:2F:3C:E5:DA
X509v3 Authority Key Identifier:
keyid:FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ae:ba:6a:5d:33:a7:34:9c:05:d0:d1:1c:75:5f:c9:58:de:
0b:77:67:73:49:cd:87:bb:d7:8e:df:a5:0c:e3:e1:38:9b:f1:
39:3c:74:8d:fd:90:51:16:91:f0:82:9b:df:40:67:ee:d6:06:
96:a8:b1:27:ed:83:f3:8d:e2:30:dc:3a:08:de:84:02:1f:95:
93:fc:58:d6:f5:b4:7c:e6:39:b4:9c:c2:9f:f5:47:90:29:34:
87:1d:34:cc:6f:fe:87:b9:da:d5:4d:4a:4e:57:7b:d6:91:1d:
a6:ef:c8:2f:2e:24:b1:2a:2a:06:c8:c6:a9:72:1b:7f:31:98:
dd:09:07:70:e3:9d:16:7c:54:ea:0c:83:19:b6:bf:b6:5c:7b:
af:ae:7e:8c:20:2d:d2:8b:3a:8e:20:bc:50:50:d8:9b:d2:68:
e2:61:69:1b:7d:87:04:e4:21:71:70:f1:9d:55:34:e9:c2:84:
0d:18:d3:bb:b5:5d:05:e4:20:2e:86:0e:70:01:8b:9c:9f:da:
2a:b6:98:76:74:de:62:2f:ac:73:b5:1f:a6:2f:e5:0b:80:a8:
d0:27:01:04:9b:b0:7d:0d:cd:38:71:8b:10:9a:1d:0e:d3:37:
9b:5d:cc:ce:8d:4f:43:5d:61:c5:4f:a7:79:b0:ac:dd:aa:d0:
75:4f:44:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:58 2026 by rpki-client