Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
File: lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft (raw, json)
Hash identifier: WsuRxse2mCVxE9kaXwS2LXAc01NQGK3VvwVtyj2V1DM=
Subject key identifier: 6D:2C:69:C8:26:6E:90:1D:17:6F:85:F6:DF:1E:49:71:D6:B6:DE:90
Authority key identifier: 94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
Certificate issuer: /CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Certificate serial: 019D9A3EA16DB8E00DEDBCE5CE12000CADF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
Manifest number: 05D8
Signing time: Fri 17 Apr 2026 07:01:28 +0000
Manifest this update: Fri 17 Apr 2026 07:01:28 +0000
Manifest next update: Sat 18 Apr 2026 07:01:28 +0000
Files and hashes: 1: lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl (hash: q5d/CzI2XfPShjGVkoFadLWQD7zUtcU1+nHSLtRHtG8=)
2: mP9cK1RwU1pjVezxiqGqeS_0jfQ.roa (hash: +NdnMWckAu9KkO1maMu0xEAp7z5Y14BHcgqlI8aDarY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:a1:6d:b8:e0:0d:ed:bc:e5:ce:12:00:0c:ad:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Validity
Not Before: Apr 17 07:01:28 2026 GMT
Not After : Apr 18 07:01:28 2026 GMT
Subject: CN=6d2c69c8266e901d176f85f6df1e4971d6b6de90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:2d:69:d2:a7:6f:64:43:d6:19:80:91:63:
65:14:58:87:d8:97:61:4b:26:5c:32:ab:7c:cd:8a:
0b:ef:af:e1:20:7b:f4:aa:69:03:0b:ab:9d:28:d3:
0d:e6:1e:b9:92:5e:3c:c1:41:2f:f7:1e:74:5e:43:
9c:b3:8b:c7:4f:b3:22:c0:34:41:0b:2b:85:f6:df:
1e:62:70:42:3a:d7:61:5d:eb:f8:13:e0:fc:bf:6f:
78:3f:41:14:19:fc:55:e5:f2:e7:47:e7:9c:58:bb:
50:bd:3c:dd:69:15:72:d9:ad:34:6c:5b:75:32:cb:
07:c5:74:99:9b:0b:1a:a1:38:7f:3f:4d:e4:37:38:
1b:9a:a3:ff:18:8d:9f:a9:bf:df:b5:48:63:b5:b6:
9c:ee:06:46:58:47:7d:0e:ff:ce:b9:2b:44:b0:58:
bc:0e:fc:c2:ae:b6:5d:0f:9e:98:b3:54:51:db:e1:
e1:c2:1d:1a:b6:47:e3:34:d7:c5:45:1d:fa:20:23:
7f:7c:96:32:f3:03:9f:94:e5:3d:3a:bf:87:23:80:
be:2b:2e:2b:2e:12:8b:10:ee:46:29:31:71:fc:e5:
01:23:a6:e1:de:ee:0a:6c:d5:01:3f:95:32:ca:12:
3c:fe:88:d6:35:53:9b:d7:8a:a8:8c:ea:ff:8e:a3:
44:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2C:69:C8:26:6E:90:1D:17:6F:85:F6:DF:1E:49:71:D6:B6:DE:90
X509v3 Authority Key Identifier:
keyid:94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:51:b1:a2:37:a5:a3:ed:6d:19:e9:44:2c:5a:cb:16:4f:4d:
42:c1:cb:24:fb:73:75:f0:33:3e:6f:9e:d8:9a:7e:e8:b3:ab:
9a:f9:a2:e2:14:c7:aa:f1:47:47:1c:5b:d6:0e:3b:e9:20:c7:
f0:00:78:f7:72:0d:e5:46:00:b6:40:2c:06:0c:77:4f:4c:ab:
e2:4f:10:5b:5a:09:17:f6:b8:2d:c8:6a:f9:64:7a:b3:6e:8d:
92:c0:87:88:a1:58:1b:b8:60:64:4e:fd:a3:00:b3:de:e8:77:
74:56:22:b2:02:1b:12:d7:84:fc:50:56:c3:24:7b:a4:d7:24:
a0:13:a3:12:92:5b:87:f2:89:79:5f:1a:22:c9:73:8d:99:9b:
3c:6a:da:01:80:05:56:2a:ee:87:b7:95:c6:4f:40:20:ba:25:
3f:c7:57:96:20:ba:85:a2:b8:21:20:67:e6:7c:47:08:f1:57:
4b:12:95:38:68:08:0b:2e:7b:bf:4e:d6:c9:5d:8a:69:91:3d:
c4:19:d5:9b:75:fd:5d:27:df:94:d5:bd:e6:57:7b:39:b7:ef:
ae:12:16:f6:16:1c:6a:aa:c9:2a:97:70:d9:18:09:1e:de:d4:
18:8f:b8:28:9e:5c:0d:73:34:e8:01:2f:6b:f7:40:37:ff:62:
1f:10:a6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:04:45 2026 by rpki-client