Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
File: lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft (raw, json)
Hash identifier: QKeJSFd49CDdTaEwmkO/gMGv00ZxYXS86oEjdGYqfhw=
Subject key identifier: 60:1F:11:B1:B3:3D:DB:D0:E8:00:F3:06:F8:86:25:A5:15:1D:1D:EF
Authority key identifier: 94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
Certificate issuer: /CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Certificate serial: 019D9B87453CBB91E9423121229CDA183369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
Manifest number: 07D9
Signing time: Fri 17 Apr 2026 13:00:26 +0000
Manifest this update: Fri 17 Apr 2026 13:00:26 +0000
Manifest next update: Sat 18 Apr 2026 13:00:26 +0000
Files and hashes: 1: lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl (hash: F9b0nP8ztrrUrZdVotd0IdAqaEpCbqmiCZ4RUo6s7WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:45:3c:bb:91:e9:42:31:21:22:9c:da:18:33:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Validity
Not Before: Apr 17 13:00:26 2026 GMT
Not After : Apr 18 13:00:26 2026 GMT
Subject: CN=601f11b1b33ddbd0e800f306f88625a5151d1def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:06:a1:4e:af:65:15:29:00:9f:66:17:82:
b1:81:47:68:08:86:54:ee:b9:98:f8:9f:07:34:d0:
9d:e1:bf:d9:ab:ae:50:98:fe:1a:ce:5a:20:bd:ba:
0a:7b:11:12:ac:24:98:0e:b9:61:4d:9a:70:3a:ed:
88:ed:6d:9a:54:89:57:2c:d5:96:77:71:de:f1:c9:
c5:cf:35:35:b9:eb:75:64:cf:f1:03:5f:5a:3b:6c:
a4:0d:a4:2d:bc:44:12:93:dc:09:ed:96:7c:d0:11:
6c:d0:07:d7:b0:9f:9a:55:24:e0:2d:db:cf:3f:f8:
e9:7c:50:0c:02:e1:92:01:91:55:ff:1c:ba:41:67:
e5:b7:1d:a6:4c:0b:1d:1e:b8:2f:0f:be:49:6c:87:
3a:97:7f:2f:88:3e:78:0a:a4:6c:0d:e1:41:24:d6:
9c:de:50:06:fc:2d:77:76:38:7c:f5:17:2a:92:51:
94:cd:a9:65:8f:98:bb:65:9b:40:9b:65:e4:6e:6f:
68:12:94:3c:c4:07:6d:2b:1a:01:10:21:17:b2:34:
30:bb:a0:ac:b1:f7:e6:47:d8:27:5e:50:b5:75:1a:
9b:51:88:41:8e:85:78:2f:a0:d1:fe:3a:60:30:09:
55:83:b8:ce:d9:95:9e:0e:88:ba:a9:86:e9:86:d7:
ff:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1F:11:B1:B3:3D:DB:D0:E8:00:F3:06:F8:86:25:A5:15:1D:1D:EF
X509v3 Authority Key Identifier:
keyid:94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0b:80:b0:4a:47:44:dd:85:54:c5:ed:a4:ef:5b:ac:a9:4d:
be:8c:54:bc:2c:16:0f:6e:09:42:60:95:60:0c:3b:d2:ad:a4:
e6:ae:36:3e:98:e1:57:1e:69:f2:b5:e0:b8:12:c4:d0:1f:ac:
3f:2e:be:aa:e5:aa:87:a4:89:53:e0:79:b8:58:9c:fc:da:7f:
63:9e:81:f6:e4:71:f8:ce:37:32:b8:cd:e2:fa:c8:ea:51:83:
e7:64:1f:b1:35:cb:17:6e:8d:3e:85:fa:29:12:af:65:19:65:
23:9a:ad:94:8b:06:4b:10:91:53:00:3f:3c:ae:56:1f:67:e0:
90:04:86:24:66:a0:92:8f:5f:07:10:cd:45:1a:7b:82:4f:94:
d6:ea:09:65:f2:f6:d8:d6:8a:31:ee:cf:92:b6:f0:8f:cf:e2:
db:22:7a:21:47:df:57:4f:e5:64:63:70:50:60:89:5a:c9:a6:
91:48:b0:3b:3f:dc:ea:b7:6c:54:c6:c3:60:29:5a:64:53:58:
f6:93:90:f1:e7:a8:7d:38:c1:5a:92:43:ee:a2:de:1e:36:88:
aa:0d:fe:2e:1d:24:a1:56:d9:58:d1:da:1b:b1:75:52:13:cb:
b0:5c:ee:79:d9:ab:86:cb:81:77:0a:68:ca:4d:96:ed:8a:2c:
80:60:39:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:17 2026 by rpki-client