Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
File: p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json)
Hash identifier: b+cD9HpfLFPLWu1zFYa3NhrvlrSQmgQT2cQd9mfCWlk=
Subject key identifier: 0D:2D:F9:E6:58:D5:A3:54:81:9B:91:D7:5F:49:48:4D:F6:2E:21:B0
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial: 019DA454048CA53AC0A5649589CAFA097294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 06:01:02 +0000
Manifest this update: Sun 19 Apr 2026 06:01:02 +0000
Manifest next update: Mon 20 Apr 2026 06:01:02 +0000
Files and hashes: 1: 1-qbRbX71ZtqzATiAIr_2cHLpT2E.roa (hash: 80UD49+4eAKYXdHmbKKPrWk/eFWzqmC9nsf2Sb2JWAc=)
2: OHNfoBMAU3xGnwf5tzn2G_YDSFI.roa (hash: T2noCjQvATNrV0LGWxL0yXlHH9lINoswZ6xk9SUmTdM=)
3: _Cx6x6OYI0AEDhlscd8HyWPxJFQ.roa (hash: Dl+MVhNB+0e5OFzfhLng21/Lw1g8tjBPug9HjFBm/XQ=)
4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: 1WjPaevULFPPJ7vZdvRTJR4x2w7RIgkarC/SqAgMPkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:04:8c:a5:3a:c0:a5:64:95:89:ca:fa:09:72:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Validity
Not Before: Apr 19 06:01:02 2026 GMT
Not After : Apr 20 06:01:02 2026 GMT
Subject: CN=0d2df9e658d5a354819b91d75f49484df62e21b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:34:b0:f9:1b:96:8a:0a:34:92:a5:6a:a4:d5:
85:ad:34:6e:20:87:85:48:09:af:e5:a6:7c:9a:fe:
c7:70:1e:f0:0a:1a:58:b8:7b:1b:40:49:4f:7d:65:
f9:d0:61:be:81:c7:02:5a:e1:18:37:73:3c:b7:ca:
b7:0c:73:36:fe:db:fd:44:59:f5:fb:c5:02:d6:1d:
23:d6:82:3d:5b:c2:50:ac:d0:f6:ac:8d:a3:28:38:
bd:64:1e:58:72:b5:ae:b9:f2:25:71:45:2c:e7:f6:
45:02:8d:ae:a4:79:ba:d0:2a:bd:e2:80:e5:55:31:
36:e0:31:8a:7e:8d:66:0d:5b:f6:f6:cc:6b:4e:0e:
5e:07:a0:83:dd:65:3a:a3:8b:57:91:89:b2:59:17:
8c:04:fb:fb:c3:17:22:a3:d0:4f:bb:85:ba:e8:be:
78:3c:46:ed:5f:be:44:eb:54:8f:37:38:25:0e:87:
b4:22:b3:bc:21:b5:5a:76:c9:89:a9:36:3a:4c:97:
17:ba:85:a9:a9:75:d4:91:8a:93:a6:b4:6f:ba:18:
1e:d6:71:1c:60:55:05:94:f8:74:94:88:53:9d:e2:
83:18:18:a8:30:95:79:2c:31:d3:2d:2c:0b:d6:f6:
ff:94:6b:45:29:81:e9:54:d2:a9:59:6f:ad:2c:47:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2D:F9:E6:58:D5:A3:54:81:9B:91:D7:5F:49:48:4D:F6:2E:21:B0
X509v3 Authority Key Identifier:
keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c3:09:7f:54:50:76:ac:87:c2:c5:65:c1:cf:2f:fc:80:52:
8d:24:42:57:96:c7:96:d5:bf:ad:52:fb:33:43:e9:a8:a8:7b:
70:78:40:b2:af:7f:ef:fc:94:9c:43:34:73:4e:90:6b:df:e1:
61:70:86:16:8b:00:e6:e8:a1:dc:af:37:c8:47:30:36:f2:0d:
95:17:c2:d8:19:87:7a:79:04:19:48:8c:ce:ba:f9:20:2a:5d:
c2:65:00:20:dd:38:3a:ad:bf:89:b2:e6:1a:0e:b2:47:3a:4f:
d6:08:f0:b0:73:f3:03:17:f5:ac:25:81:02:61:d1:bb:14:a4:
a2:92:ea:cb:16:64:8a:30:cc:7b:7c:64:45:04:91:80:e1:f1:
d6:c9:1e:4b:82:13:a7:01:94:09:de:87:7a:c1:f6:a2:23:3b:
68:1a:ae:e2:83:e4:9a:89:d4:0b:3a:c9:fc:74:74:57:aa:8c:
7d:fe:f4:ce:e3:73:73:76:24:66:aa:34:85:5e:b8:54:a7:13:
df:04:95:16:26:67:19:e5:0e:67:c8:37:bd:47:59:3a:01:e9:
0d:e4:0e:8f:50:f0:6b:29:fd:31:2c:ed:20:1a:29:18:8b:8f:
c8:6c:12:09:db:c5:4d:23:3b:91:87:5f:7f:dd:7a:d7:29:99:
92:34:5e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:27:56 2026 by rpki-client