Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier: O1ZW8CtIno16M5nJlPydJYNg+oiWrm8QpsJKQ0irCkM=
Subject key identifier: 01:FC:BF:3D:E5:E3:B5:07:39:9D:2F:98:B5:AD:32:65:18:1A:6E:7C
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 019D97E19B42A0FB1D8C4CA61576C6F537CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 20:00:38 +0000
Manifest this update: Thu 16 Apr 2026 20:00:38 +0000
Manifest next update: Fri 17 Apr 2026 20:00:38 +0000
Files and hashes: 1: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: clqJZW63dI68joarv23Rrx31DJjzx/2qO2UVb0UXvOk=)
2: q_6rXYE5naFTYIqL8Xb1V5kt0hw.roa (hash: oNdTo6cg1MBLR8xzU20UilfpNxSC7GvJArzxlqR/iAg=)
3: sdkmYCTpxXVubPzt0Vusqo9p2cM.roa (hash: cR5IHtVLgA9zfYhE/lZgYLsMdhZ5hl2OfHWB5ot/8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:9b:42:a0:fb:1d:8c:4c:a6:15:76:c6:f5:37:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: Apr 16 20:00:38 2026 GMT
Not After : Apr 17 20:00:38 2026 GMT
Subject: CN=01fcbf3de5e3b507399d2f98b5ad3265181a6e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2b:a9:ab:f9:b8:62:97:53:d9:1b:17:9b:9e:
3c:f7:f9:26:39:71:21:89:d7:03:5f:69:a2:9c:0c:
ac:df:1c:00:d8:f1:b4:90:83:be:95:90:3a:75:73:
96:5b:b7:bf:c1:39:15:3d:48:72:d8:20:d0:78:61:
82:21:c7:b4:9b:ad:9c:95:7f:e9:25:63:45:47:0a:
03:cc:8c:76:91:8a:1e:2d:9d:52:8a:5f:d2:d2:2f:
f9:ef:9e:b6:87:0e:08:de:87:95:99:f3:84:c3:34:
04:21:31:64:ab:ee:de:d6:5b:1b:74:65:83:11:20:
35:6a:b2:89:ab:c5:d1:fb:c3:e5:cc:7b:cf:cd:05:
6e:82:89:b1:30:fb:a4:02:30:a8:d3:de:be:00:4e:
3f:da:23:43:e7:c7:61:f4:2b:3f:ed:89:45:11:3d:
e2:ce:47:eb:47:8c:85:35:8d:1c:6b:93:e4:c9:38:
1b:a8:6a:aa:ac:4f:e9:a6:85:f4:ac:cd:cb:2c:59:
44:57:3e:8f:69:03:cc:0a:29:9f:16:aa:35:4b:42:
fa:d1:a7:aa:99:d0:10:14:c1:a3:ca:1b:3c:54:00:
d3:cd:cb:ff:8e:08:d4:e3:b3:25:96:ad:fd:de:fe:
21:1b:03:4d:23:79:15:7f:88:ac:03:93:e1:3d:bb:
5b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FC:BF:3D:E5:E3:B5:07:39:9D:2F:98:B5:AD:32:65:18:1A:6E:7C
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:01:03:45:f1:95:cf:c9:9d:b3:8a:ea:d7:9a:ec:b6:02:8e:
a6:8d:ed:11:fa:1a:98:67:99:74:7b:f4:57:66:be:b0:d5:03:
36:87:f5:4f:f4:c4:59:a8:d5:8f:32:b8:76:a5:1a:a0:eb:af:
e1:49:2c:85:cc:8d:0f:4c:ed:45:d1:9a:18:e7:24:e0:6b:38:
fd:94:fe:d6:66:07:1a:97:d6:63:43:18:fe:d8:da:84:72:67:
de:0c:bb:1b:a5:46:f3:8e:d1:ba:b8:66:8c:92:fe:d6:3f:01:
72:11:70:40:cc:79:33:23:4e:3b:60:c9:01:db:b7:b8:67:11:
09:30:b5:72:39:7d:b8:eb:ab:79:f6:f1:26:2e:19:57:41:86:
fa:47:4d:34:27:03:03:b8:4b:64:cc:12:f5:82:dc:5d:60:91:
12:18:e0:4e:de:c2:ee:56:45:9c:38:6f:15:79:a2:4d:61:68:
ce:a5:68:84:f1:fd:cc:c3:6b:54:ea:67:05:72:4c:da:16:69:
ad:f8:2a:91:99:2b:a9:16:d3:6d:bd:1a:8e:3f:62:01:56:71:
4b:9f:9c:e0:89:bc:cd:14:92:ff:f9:4f:48:d4:14:e8:1b:b2:
5e:3b:38:75:b3:28:89:76:74:89:a7:c3:26:58:2e:97:52:3b:
71:cd:44:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:08:44 2026 by rpki-client