Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: Os6HJqn5p4XFw3E8989miF9APfsY2AOZM0ZCRbRdlE4=
Subject key identifier: 0C:D4:3B:27:45:0F:0A:12:2B:44:BC:AE:D2:9B:DD:FF:E1:B0:5E:B7
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 019D99CFBDD23C4B49793AA362828B840601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 16A1
Signing time: Fri 17 Apr 2026 05:00:21 +0000
Manifest this update: Fri 17 Apr 2026 05:00:21 +0000
Manifest next update: Sat 18 Apr 2026 05:00:21 +0000
Files and hashes: 1: UipotQ-uJFFtPyyGfsmm8VGPq_Y.roa (hash: 1ArIsx9oTls8tQ2A71LvIPypaXRgZmQimvwpiodxUUE=)
2: WOZGN68ORC_fjS0NcqSjNDVXKaY.roa (hash: AjRBGSZk8zOXbmkuoK7ZV4c6kcxCjWb+oPTXu10gwFM=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: 3iTS3WPTzoLEBEPLpFlH3i360NtDgZ6qQmBdzn517mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:bd:d2:3c:4b:49:79:3a:a3:62:82:8b:84:06:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Apr 17 05:00:21 2026 GMT
Not After : Apr 18 05:00:21 2026 GMT
Subject: CN=0cd43b27450f0a122b44bcaed29bddffe1b05eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:14:33:fc:c0:27:43:99:19:23:35:5d:01:
dd:e0:61:1f:90:b2:72:8b:92:c3:06:8a:05:aa:a2:
e5:6b:81:12:d9:79:80:eb:33:ef:2c:fa:0b:50:14:
a5:51:be:20:99:6e:87:49:bb:d7:2d:25:63:d6:a1:
e8:23:2e:7c:2f:d6:99:ac:87:8e:10:44:f8:88:24:
12:40:69:89:0c:e5:fd:da:78:74:26:13:85:4d:e4:
b8:0f:bd:60:ab:d8:78:f4:35:94:2f:90:f4:b7:ef:
13:97:40:04:77:89:1d:cb:2d:d9:12:ef:5e:d6:62:
8c:19:b7:19:1d:96:23:80:71:85:d8:c0:16:12:3d:
60:7d:1c:4c:bf:cd:ea:a2:81:85:3e:17:bc:5d:ef:
a2:e4:da:8e:26:f8:d2:91:b9:ac:dc:fe:39:50:58:
bb:66:b5:d0:6e:aa:a0:5b:d2:e3:b0:1e:93:70:95:
f9:76:8b:b7:8b:af:0b:06:32:8d:ba:33:ce:ea:f2:
f7:1a:48:b2:32:37:25:32:c1:9f:4d:44:dc:d9:56:
4b:a7:25:85:7d:4e:06:d8:0c:70:8e:d3:85:69:e5:
76:78:af:f3:23:8e:60:37:21:c7:89:13:1d:6f:65:
6d:c2:ba:93:06:2e:71:e6:96:df:ae:41:12:25:3f:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D4:3B:27:45:0F:0A:12:2B:44:BC:AE:D2:9B:DD:FF:E1:B0:5E:B7
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:62:56:e9:03:0b:11:37:12:d7:7d:18:5a:3a:3f:af:b1:8e:
b2:42:f2:c5:36:81:9c:ab:2d:a0:97:6c:0e:77:61:c1:d2:15:
39:86:24:2a:04:1e:a6:39:48:14:ef:ce:8f:60:cc:62:18:b4:
ab:31:a0:9d:46:df:2e:80:74:1e:7f:7f:59:70:79:7c:89:bf:
96:d2:9d:56:1d:34:34:c7:71:1a:d7:30:09:a5:e1:19:5e:46:
ce:ed:c7:16:bd:13:a5:98:98:92:a5:c8:ed:06:94:28:19:23:
98:2b:b2:d1:72:c5:8e:ce:2e:75:a0:51:b0:03:de:a1:c7:ea:
3f:ec:37:3f:0d:35:4c:5b:bc:3e:70:14:e3:31:6b:86:35:92:
72:2e:65:90:7b:ef:74:a0:69:10:19:7d:67:dd:6d:6f:8a:6b:
35:20:b0:b5:50:83:9d:2c:34:4b:bc:71:5b:c4:f1:46:f4:31:
be:8c:2b:0a:9e:94:22:f8:6f:d6:32:f3:6a:87:38:39:c5:d0:
b8:cd:1f:4c:7c:eb:8b:11:98:d8:f4:e7:46:86:1e:a0:a6:0b:
26:d4:9d:1d:76:ea:ee:27:f4:49:ec:28:52:d5:da:32:74:13:
a0:b6:e3:f7:d4:3e:6e:e0:70:55:ec:69:81:6b:93:cb:17:d5:
32:8f:38:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:54 2026 by rpki-client