Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
File: LONOJrtlYwuGk29JaTU-18hplcg.mft (raw, json)
Hash identifier: 9TdTfJglGkxhv2aUVKNxUoduClPlrrp8v5oVngGFG/U=
Subject key identifier: 3F:9D:33:F6:19:CB:B1:28:46:FC:BE:5B:C6:C9:F4:28:63:F2:20:1B
Authority key identifier: 2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8
Certificate issuer: /CN=2ce34e26bb65630b86936f4969353ed7c86995c8
Certificate serial: 019D9A3DFFB60A422AB88110E9DDD80F5FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
Manifest number: 17FC
Signing time: Fri 17 Apr 2026 07:00:47 +0000
Manifest this update: Fri 17 Apr 2026 07:00:47 +0000
Manifest next update: Sat 18 Apr 2026 07:00:47 +0000
Files and hashes: 1: LONOJrtlYwuGk29JaTU-18hplcg.crl (hash: eQWhX+K4CojbXIBBBvoAEzO4fgCObcFb6gFJL2THaUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:ff:b6:0a:42:2a:b8:81:10:e9:dd:d8:0f:5f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce34e26bb65630b86936f4969353ed7c86995c8
Validity
Not Before: Apr 17 07:00:47 2026 GMT
Not After : Apr 18 07:00:47 2026 GMT
Subject: CN=3f9d33f619cbb12846fcbe5bc6c9f42863f2201b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:81:7d:81:4c:2f:4b:8b:bc:64:3c:48:fd:
5f:ac:7a:78:f6:62:82:8a:c2:8a:1b:62:6a:c2:ca:
fb:a0:16:48:8e:12:6d:15:b7:9d:69:e9:f6:ad:bb:
04:19:0b:f2:b0:94:e2:28:49:4c:f4:1f:ea:7f:2d:
44:b9:69:df:ff:b8:c8:8c:db:65:9c:fc:62:66:b3:
7c:df:4e:f3:51:21:36:2c:f7:a6:c3:38:e0:4b:82:
e1:47:b4:71:eb:ca:a4:9e:8a:5c:2b:55:bd:e9:fb:
b5:a5:11:8f:46:6c:87:6c:3a:26:a5:ee:53:27:e1:
2f:b3:3d:56:be:7b:b4:09:ad:3b:a1:b2:0e:29:5e:
1a:c7:4d:71:24:8e:a9:fa:f3:fe:4a:82:d1:03:55:
79:ba:14:6c:52:50:1e:11:5a:77:75:cb:51:ba:e9:
70:19:ec:9b:80:ab:7f:c0:6e:c7:09:a8:eb:d3:f7:
84:35:9d:ba:8f:a3:ae:a6:5f:9b:f2:ae:ea:a3:01:
a0:22:b7:b9:0a:06:96:44:2d:42:77:3b:73:a0:3e:
e3:07:4d:2d:86:41:02:43:36:79:0b:b1:4d:08:26:
32:60:cf:7b:73:b5:2a:fe:03:cd:13:46:bb:53:ff:
1a:54:ac:a8:31:ce:93:22:c5:21:ed:21:b5:7a:b7:
2f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9D:33:F6:19:CB:B1:28:46:FC:BE:5B:C6:C9:F4:28:63:F2:20:1B
X509v3 Authority Key Identifier:
keyid:2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:af:fa:d8:21:21:d1:2f:7a:1a:d9:b0:9e:6c:cd:4b:8e:4d:
c5:33:ea:a6:20:99:65:34:55:e2:cf:14:4e:1c:33:f7:a6:95:
e8:b5:18:ca:55:1c:c5:24:8a:ef:0f:15:43:25:73:67:d6:d8:
49:fa:d1:7b:e5:a9:5c:73:25:60:f7:f9:c0:8b:c1:ef:f1:16:
bc:69:0a:a3:2d:91:c4:5d:29:e1:8e:83:49:41:6b:7e:9f:51:
f8:a4:5d:e6:c3:1b:cf:f0:52:39:84:76:bb:47:2b:2f:44:c0:
4a:c0:f0:c1:8a:43:66:bc:9a:13:08:eb:d0:97:fa:fb:dc:9f:
4a:5e:89:a8:c3:52:2a:18:7e:37:ab:fd:06:48:a2:e6:39:6d:
f7:05:3e:80:ea:46:5d:b9:60:d3:d1:be:2b:86:05:81:02:1a:
63:ff:06:ab:9f:5a:56:f9:a2:d9:8e:22:ec:d7:16:d8:ed:c0:
96:0a:89:d0:4c:eb:f8:46:41:f7:c2:87:09:f7:62:0a:33:d2:
4d:43:57:08:b3:34:c2:4a:ac:b7:b2:fb:28:a2:a5:1d:fc:cf:
51:1b:f0:92:1e:01:04:5f:69:e3:26:78:67:26:73:50:ce:da:
81:ba:c5:81:a2:dd:ec:3d:73:9c:81:d3:21:ea:13:7a:d5:d2:
50:ea:a8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:55:42 2026 by rpki-client