Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
File: lsvPLpV8qNlCRyp7AEQoWybbayI.mft (raw, json)
Hash identifier: 722EV8JLMkYCRbxAOqZjuG3yfOP2reXsRSTHg+wJfUg=
Subject key identifier: BA:71:A6:9C:1A:F2:8B:66:0B:ED:BC:82:A3:15:C3:17:BC:BB:77:DD
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 019D9B512B2AD8E1FD98BD2A83942E364066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 12:01:21 +0000
Manifest this update: Fri 17 Apr 2026 12:01:21 +0000
Manifest next update: Sat 18 Apr 2026 12:01:21 +0000
Files and hashes: 1: 3x92TrF8N94ZpyZCm4fts9AHkrI.roa (hash: sNwt0zp1LxcJpyDYVc0cP5yyw+nZAgDz5XkvLtfBLcY=)
2: CvN-OPpHrkoiSwngHGByZ8d5Y50.roa (hash: HUmo1OpTkAigfX6oXWD0/+6iPG83y0OXXAaTcOrXIoE=)
3: JejL0L9MCBQWF6peNve4-RWHF1w.roa (hash: PXp7lUFrDYOjtMqq8880S6RWrXRSNsHPCPxIMrX1zVU=)
4: lsvPLpV8qNlCRyp7AEQoWybbayI.crl (hash: exooi4+y+baYjgYANeQGVMVIC2wV5b3BqDsNXndeOgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:2b:2a:d8:e1:fd:98:bd:2a:83:94:2e:36:40:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Apr 17 12:01:21 2026 GMT
Not After : Apr 18 12:01:21 2026 GMT
Subject: CN=ba71a69c1af28b660bedbc82a315c317bcbb77dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:6d:52:17:02:c9:83:07:8e:14:ca:7e:cc:
2d:59:d7:0d:1e:78:b4:54:18:35:20:25:43:07:0b:
d7:9b:59:c2:2e:97:d6:d4:f9:8d:c0:5f:ee:cd:81:
77:53:24:a0:2c:3b:af:7c:f4:e3:c0:dc:e8:2a:95:
a7:35:01:55:82:7b:ee:25:01:7d:24:9f:71:c9:f4:
7f:4e:67:9b:16:17:95:a1:ac:35:ea:22:3b:fd:5d:
8c:3c:31:9d:ab:56:81:6e:3d:a1:b4:14:8a:e4:5f:
f4:c0:c6:ce:0c:7d:54:4d:f3:da:a0:06:d7:e9:2b:
3d:a2:d0:25:b6:c1:9f:b5:d0:bb:cf:02:96:b6:d9:
fc:bc:19:e6:f7:77:a3:40:24:92:e4:87:d0:1b:a8:
10:ea:f0:92:4a:88:48:c8:e3:21:52:82:09:12:07:
10:8f:11:0e:bc:02:7e:61:21:d8:de:00:e7:21:96:
32:e3:16:fb:7b:21:58:5c:9a:43:4b:59:2f:7e:34:
50:e5:6f:9c:36:d7:bb:b6:fa:ed:8b:05:47:06:7b:
92:3c:9c:eb:b2:a1:f9:ee:78:9a:02:e5:41:a4:8a:
68:3b:d8:e0:da:8d:30:f7:cb:cc:c6:6f:ba:80:b0:
e2:de:a6:23:2c:6b:61:b9:ff:7b:03:b9:a1:18:87:
c9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:71:A6:9C:1A:F2:8B:66:0B:ED:BC:82:A3:15:C3:17:BC:BB:77:DD
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f9:f6:49:5e:8a:33:7f:5b:38:e3:f9:a2:73:9c:7e:76:f8:
b1:50:cc:e0:61:f6:43:25:50:d0:d5:4e:7f:58:73:1e:cf:aa:
54:65:7a:b0:0a:c4:cb:d4:79:c3:06:b2:f7:0f:0d:ba:74:3c:
ed:40:ba:42:c3:6c:07:e9:10:5f:47:3c:31:09:8e:fa:29:04:
2a:3e:cc:b6:16:e6:1b:21:96:7c:b6:c8:4f:d8:98:56:cf:35:
74:31:ba:25:50:46:8b:f8:65:54:2d:de:91:2b:6b:1d:96:6b:
fa:14:c8:00:78:92:cc:52:8c:e4:93:1e:96:b8:20:e8:59:b2:
8a:f0:6c:b4:c3:47:1e:e1:f6:6e:ad:17:0c:cc:8c:e0:16:53:
1c:0c:8b:bb:20:37:ad:74:3c:51:ad:7b:44:52:7a:09:21:50:
ad:d2:2f:21:49:68:7e:83:b2:f7:0d:1e:19:f1:68:74:5e:61:
3f:ba:5d:72:cb:fa:d4:3f:e0:0f:8e:86:17:36:e3:e1:ad:29:
ed:2c:7a:3d:54:61:e3:99:b4:5b:08:ee:d0:ad:64:af:85:63:
16:42:51:9e:46:8e:77:89:4b:3e:2f:22:48:a6:8e:93:b6:e5:
e1:8a:a2:c9:06:96:1c:2a:c8:79:36:08:01:17:54:65:cd:29:
0c:1e:c6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:44:26 2026 by rpki-client