Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
File: L8VFWRk_6APSh01pjzQpKPdjKgU.mft (raw, json)
Hash identifier: ZnFlNxuFnp+Lk8zR98SyoukTElNlOEkPE8fGyon8P5U=
Subject key identifier: 64:E3:8F:71:12:FC:9B:06:A0:2C:42:52:B9:2F:F7:D0:38:69:6E:70
Authority key identifier: 2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
Certificate issuer: /CN=2fc54559193fe803d2874d698f342928f7632a05
Certificate serial: 019D9999A6799B403A5D0243FA457165CC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 04:01:16 +0000
Manifest this update: Fri 17 Apr 2026 04:01:16 +0000
Manifest next update: Sat 18 Apr 2026 04:01:16 +0000
Files and hashes: 1: L8VFWRk_6APSh01pjzQpKPdjKgU.crl (hash: bVP6wSkbaE1gewd8Byw+GM9zya8NzzKwf7mtOBRfgeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:a6:79:9b:40:3a:5d:02:43:fa:45:71:65:cc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc54559193fe803d2874d698f342928f7632a05
Validity
Not Before: Apr 17 04:01:16 2026 GMT
Not After : Apr 18 04:01:16 2026 GMT
Subject: CN=64e38f7112fc9b06a02c4252b92ff7d038696e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:f1:0d:8e:53:26:ee:c8:7b:3b:ec:11:c0:
f9:d8:15:2f:70:4d:2c:ab:c6:aa:65:a5:08:e1:16:
fc:68:9d:9d:6d:a7:7b:32:fa:99:52:5a:78:2e:be:
cb:3f:fd:47:0b:71:3b:a2:de:15:0d:04:e3:86:92:
47:3a:0e:e5:4e:37:9d:8c:7f:ca:30:c7:7a:db:30:
1f:03:78:e9:ba:ee:f7:f1:b0:71:ca:15:35:4f:8b:
8a:f2:97:c3:60:b4:d4:65:b0:ff:22:fd:50:80:c7:
b1:69:2e:f6:2d:a9:44:e7:1c:42:ba:32:d1:c3:f5:
22:bc:f0:29:bf:7a:24:de:61:20:8a:0e:63:18:88:
2b:84:1a:a8:8d:7b:3e:53:fd:9e:9e:2d:02:29:32:
2f:53:32:7c:72:18:b2:cf:0c:cf:b5:e8:e7:ba:86:
7b:db:da:03:b0:8d:28:c8:6b:31:b1:96:a4:28:e1:
5f:bd:6f:b3:de:25:83:a3:56:ac:70:1b:53:5d:76:
1a:01:be:88:3d:ad:b6:81:2b:03:9a:61:27:d1:84:
01:12:dc:18:ec:fd:ae:80:f9:a8:0b:d1:41:fb:dd:
db:88:26:67:29:83:a9:73:bb:86:1f:84:9e:85:de:
d8:89:27:79:57:c8:1d:2e:59:96:49:0c:5a:76:86:
61:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E3:8F:71:12:FC:9B:06:A0:2C:42:52:B9:2F:F7:D0:38:69:6E:70
X509v3 Authority Key Identifier:
keyid:2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:be:dc:6a:6a:f7:c4:83:de:da:7e:20:7c:c3:99:49:8e:89:
0d:5d:6e:08:d3:7f:00:6d:75:ac:90:dc:12:a5:0f:f1:ca:4d:
ab:26:ae:02:5d:96:88:8b:be:86:7e:8a:ef:fa:d3:3d:88:05:
71:a6:c4:89:3a:60:35:f6:6b:30:ca:39:f5:23:d5:26:db:0c:
90:0b:bf:02:a1:78:41:37:55:fd:5c:08:4f:8d:e8:78:5f:60:
cf:bd:bf:3f:0f:51:91:be:07:ac:36:64:4e:07:c2:32:2c:0c:
33:95:b6:7f:f2:40:39:e6:2e:7f:03:98:31:c5:77:4a:c1:b6:
a5:cb:a7:6e:cf:4e:41:38:64:49:64:a5:77:5d:84:3b:cd:be:
3c:86:a1:b4:28:66:1f:e5:5f:b1:d8:85:5d:d5:a8:fe:0c:76:
7c:bc:58:41:2b:c3:ec:e8:a1:c1:6f:e9:33:c4:d8:2a:a0:86:
a9:d4:1a:01:0d:8e:73:49:16:d4:1c:fd:2d:e8:46:20:2a:93:
ab:da:00:53:a8:f3:f0:c6:b1:b3:72:78:60:d5:db:15:39:5f:
75:cb:9f:a2:47:11:32:2f:57:db:d5:28:b9:50:6e:83:77:38:
b9:dc:ec:3a:e0:0f:0d:d9:1b:2c:92:82:2a:dd:6d:57:f1:f2:
e2:82:8e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:55 2026 by rpki-client