Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
File: L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json)
Hash identifier: LdFJeqCd9gRRUF8a8C6rsq/i6HecJLxgmEDGkTCLIOM=
Subject key identifier: 90:60:9C:44:4A:CB:84:D8:37:0E:C7:4B:66:04:FB:74:36:A8:D3:93
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Certificate issuer: /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial: 019D9818D5FFA8FC96C985D036DB4AE94A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 21:00:57 +0000
Manifest this update: Thu 16 Apr 2026 21:00:57 +0000
Manifest next update: Fri 17 Apr 2026 21:00:57 +0000
Files and hashes: 1: 7mIA3Luhg39GWRjtxd0G6cNoiNM.roa (hash: 9RHRZDIR3eag+ugNv6r1XDMS8XWYJr2tgc2FPO+4l3Y=)
2: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: njargpi2pSxmbgtLd501zNJ8lYt7fzCB5u1letFNlVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:d5:ff:a8:fc:96:c9:85:d0:36:db:4a:e9:4a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Validity
Not Before: Apr 16 21:00:57 2026 GMT
Not After : Apr 17 21:00:57 2026 GMT
Subject: CN=90609c444acb84d8370ec74b6604fb7436a8d393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d5:fe:f7:fe:05:8d:e6:ab:59:56:28:07:75:
2d:8d:8c:68:35:3e:27:33:8d:e2:d1:c6:0f:45:5f:
09:5d:a8:f1:5c:02:4c:5b:72:3a:53:69:2b:ef:a3:
1b:37:18:72:c6:67:99:1b:61:72:c3:ce:68:e2:b0:
96:00:05:bd:fd:ca:ea:39:8e:b8:76:ec:15:65:73:
86:e2:2f:0a:d4:09:15:4a:34:56:ec:1e:8c:07:12:
ad:0d:a8:22:48:6f:b0:28:67:d6:64:72:98:d3:29:
a2:24:28:8c:1e:d7:da:ec:c0:89:9f:19:b9:ee:f8:
af:c9:cf:7c:08:e8:54:e7:71:3b:e1:6e:8d:8d:e9:
99:1f:44:32:af:b9:ba:c5:6c:74:38:9b:4e:e0:30:
f8:9e:b4:c3:ac:ae:0a:c4:70:fc:03:df:90:d6:85:
df:42:56:1d:25:22:cd:23:6a:cc:28:6c:4d:d7:61:
af:f7:7f:7e:1c:e3:0a:80:1e:40:31:5d:23:a4:af:
08:fe:cb:13:4a:b5:f9:e5:32:ab:eb:7a:d9:cf:b9:
5a:fb:43:ca:5c:25:09:96:33:96:64:6c:94:24:9e:
9f:6c:4d:21:e8:49:e9:a9:bc:c8:51:37:04:d7:a5:
68:59:ec:91:4e:4b:b1:4e:6d:ac:d2:78:ce:64:73:
d4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:60:9C:44:4A:CB:84:D8:37:0E:C7:4B:66:04:FB:74:36:A8:D3:93
X509v3 Authority Key Identifier:
keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7e:aa:7c:b9:32:e5:14:91:98:60:3d:ac:94:d5:a8:f7:41:
f1:57:c2:8c:7a:67:44:51:54:21:8e:00:79:e8:a7:fb:3d:b9:
af:af:4b:3d:9e:c3:1e:07:ba:59:2b:05:60:8b:14:71:ac:49:
93:24:0a:1e:61:df:98:de:ba:5a:35:41:e9:11:ee:d2:26:9c:
85:0c:54:56:f1:15:0a:ed:e0:28:43:e9:f9:a0:ea:47:ba:6c:
53:da:8a:ef:ff:fc:34:7b:2d:22:9a:61:66:9f:c7:a8:b9:9c:
54:75:7f:e0:04:5a:8e:09:9b:8c:ff:71:61:f2:65:fb:63:58:
15:a1:4d:dc:6f:e6:d7:fb:71:22:d1:da:04:c1:c3:9e:ab:97:
57:f8:55:30:cc:09:a6:4f:48:2e:ff:5f:32:8d:ca:d7:88:a6:
ad:66:f6:71:f2:6f:71:2a:08:08:fc:fb:ef:89:9e:d4:3a:40:
b5:f3:08:7f:ba:10:70:14:a5:65:93:4f:a5:55:e8:79:66:f5:
86:ea:0b:60:82:c9:b5:6a:92:c8:84:8f:fc:ea:6f:36:77:62:
eb:74:40:4f:5c:93:2b:2e:a8:3a:23:7e:95:ce:fe:d8:29:92:
12:f1:f0:3f:a3:b3:d4:79:a5:da:38:88:48:ba:76:f9:64:a0:
73:32:f1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:56 2026 by rpki-client