Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
File: _lyk4qChgOsvKcyIdAqnB7iCHXw.mft (raw, json)
Hash identifier: bevwP8SsI6PSULslE3tGeeYYJtw1Qo3ae9NFlFO3eYQ=
Subject key identifier: 59:86:D1:B3:93:44:EA:D7:5C:3F:3E:17:98:22:A3:CD:0C:CF:9A:73
Authority key identifier: FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
Certificate issuer: /CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Certificate serial: 019DA3788D316439013495FAB936A23ECFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 02:01:19 +0000
Manifest this update: Sun 19 Apr 2026 02:01:19 +0000
Manifest next update: Mon 20 Apr 2026 02:01:19 +0000
Files and hashes: 1: NP5tK9sJqRpdt0WYxsVkCWjvRlc.roa (hash: l2Db7QyGTQEhegInLfDc9J67ROlsj8aNjEngOYZ1S48=)
2: _lyk4qChgOsvKcyIdAqnB7iCHXw.crl (hash: //KPngMWPAIviDXjDNEDGLU16cCakjRoxy7spb7tEWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:8d:31:64:39:01:34:95:fa:b9:36:a2:3e:cf:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Validity
Not Before: Apr 19 02:01:19 2026 GMT
Not After : Apr 20 02:01:19 2026 GMT
Subject: CN=5986d1b39344ead75c3f3e179822a3cd0ccf9a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d6:dd:29:18:49:a8:3b:86:b5:a0:4f:a1:eb:
86:6d:ef:09:e7:2e:47:09:a8:ee:1b:ee:65:ae:d4:
61:c0:3c:62:ce:b7:64:34:8f:b7:c0:4c:15:3b:66:
de:92:9f:be:2d:d5:df:00:60:62:ae:b9:58:33:cf:
1c:e7:04:b0:60:cc:a2:90:b6:97:9e:db:ff:6e:ff:
7f:9e:03:09:c5:17:39:45:12:7f:e7:9f:aa:e5:ee:
96:f8:68:64:3d:5b:4a:36:b6:a8:78:c7:82:f6:71:
59:07:b5:21:f7:79:18:46:18:e9:44:59:16:26:42:
0b:97:27:0c:63:d8:d6:f1:62:ff:01:06:b3:07:af:
13:af:5b:5a:a1:a7:54:f7:05:b3:cd:2f:1f:18:7e:
e7:28:6d:1e:f6:66:c2:67:af:ed:27:54:e8:5a:1b:
81:ce:f6:19:78:cc:36:a5:55:51:f3:5b:58:cf:34:
83:23:4b:23:86:1a:18:bb:bf:78:c9:db:d2:ca:d3:
e7:1e:af:0b:df:ff:77:7f:3e:27:41:dd:fd:7b:2d:
8d:fb:f7:a5:0d:f6:0d:5f:e3:7a:97:6b:79:44:35:
32:4b:60:0a:d4:e3:80:7c:42:35:42:93:4e:d8:23:
ee:1f:6e:cb:11:de:a9:c5:85:37:94:1c:44:05:10:
cf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:86:D1:B3:93:44:EA:D7:5C:3F:3E:17:98:22:A3:CD:0C:CF:9A:73
X509v3 Authority Key Identifier:
keyid:FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:33:d3:0c:56:6b:25:af:49:d6:23:50:6b:c2:ee:39:41:3b:
49:19:63:ab:dd:41:82:de:f7:b5:a6:3b:bf:79:5a:e0:9f:ad:
01:46:b2:88:5d:0f:52:6f:76:3f:80:83:14:60:4e:a6:0b:65:
bc:0c:74:47:a7:32:8f:69:75:7e:52:7e:13:dd:8f:e7:e8:a5:
c0:f5:f2:46:16:b6:f2:dd:c6:6f:ef:9f:9b:8e:68:29:68:e3:
e5:61:32:44:4e:45:a9:97:ca:79:af:50:26:44:b3:d2:27:7e:
a9:7e:bb:ee:b2:f5:f3:a1:c3:fc:e9:46:36:09:f6:ec:e1:96:
bb:2a:00:15:08:e1:97:f3:82:08:5e:95:4e:fc:85:71:e2:77:
2e:5b:7d:59:6a:d0:df:d6:42:5c:1a:d1:cf:f6:41:35:a6:df:
1c:7a:63:a4:86:4c:8f:f0:44:93:77:d9:d2:cd:b8:da:da:18:
ef:4f:10:0c:3e:f2:b7:38:5e:cc:f4:98:8a:df:6c:88:d7:f1:
70:c3:e7:cf:70:ad:59:b3:53:b6:36:07:a0:d2:92:05:98:ba:
26:88:11:a5:d4:50:88:c6:76:47:8d:9e:a3:54:0a:32:1d:65:
22:28:4f:cf:1f:db:4a:ed:eb:b4:a2:6e:47:d3:36:c9:bc:5a:
9f:e7:ba:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:33:01 2026 by rpki-client