Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json)
Hash identifier: rgxh8FSaM6Fcu6bBb8ivVRaSntJAQGzrcpafqIh0H0U=
Subject key identifier: C4:D9:EE:07:E0:86:CA:76:C3:2B:7F:99:1F:5B:70:7F:CA:E7:DF:AD
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 019D9AAB971648F44C7CF00EA6067BD859C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 09:00:29 +0000
Manifest this update: Fri 17 Apr 2026 09:00:29 +0000
Manifest next update: Sat 18 Apr 2026 09:00:29 +0000
Files and hashes: 1: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: C5rueu9oFzPb0JAbDIskEK42LJm0bP5fhOOVVJoCu64=)
2: y_2SHxKhfe_rgzbIS6eSd_GEWIw.roa (hash: /4b4cJ0+NGqltrpZyUr4ICghwSOnPUDvjMTMvvgLSLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:97:16:48:f4:4c:7c:f0:0e:a6:06:7b:d8:59:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: Apr 17 09:00:29 2026 GMT
Not After : Apr 18 09:00:29 2026 GMT
Subject: CN=c4d9ee07e086ca76c32b7f991f5b707fcae7dfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:66:08:8d:40:89:6a:5d:8a:5c:ec:7e:d0:9b:
6b:df:5e:49:0b:29:8a:99:ab:9a:cf:fa:bd:e7:e9:
67:13:ae:65:8b:3e:e7:0c:b6:c6:7f:95:98:6d:e9:
aa:18:d6:62:5f:28:d5:8b:91:55:ef:3c:a1:f0:34:
6e:f0:f4:1e:62:8c:32:59:7c:08:df:06:e8:13:ea:
02:f6:bb:56:7f:88:c0:49:b1:db:5f:e9:39:04:3d:
d8:b2:9d:87:56:4b:67:31:7f:9c:fd:a1:1e:c1:22:
83:10:4d:76:e7:a9:37:9b:37:83:9e:05:dc:2a:9c:
e8:5b:78:f0:3d:89:c1:2f:87:5e:22:c4:e3:90:7a:
64:32:66:66:4d:b3:2f:ed:c1:90:3b:8c:13:40:dd:
14:27:1c:7e:e6:e6:bd:93:33:ce:2d:1f:38:cf:26:
c1:f2:90:99:71:42:e1:8a:bb:f8:3f:65:d9:9b:72:
9a:80:70:1d:e0:7f:95:d7:d7:ad:b7:e8:b2:1a:8f:
a1:0e:f9:13:84:f6:c5:6b:fe:c8:1a:22:64:7d:f2:
13:1a:aa:bc:48:2d:8d:8e:16:ff:5a:7f:e5:ed:cf:
df:83:51:35:3b:db:33:98:df:ba:aa:a4:b5:9c:e6:
f1:83:35:57:29:6e:91:66:fe:9b:50:13:f9:87:35:
39:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D9:EE:07:E0:86:CA:76:C3:2B:7F:99:1F:5B:70:7F:CA:E7:DF:AD
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9f:b6:86:e9:92:8a:c2:4f:a7:60:72:cb:8f:09:22:db:66:
f7:89:83:5a:63:76:4e:04:e6:27:b2:9d:64:ef:e0:00:6e:23:
ec:86:c5:1a:ae:e0:ae:d6:e8:54:cc:98:83:51:9c:25:a5:c9:
5d:5c:88:74:f7:d1:57:2d:7a:dc:0b:d8:5d:1f:6f:06:51:c3:
e2:26:e6:04:df:e8:32:21:30:e9:64:d8:24:6d:a9:e3:21:8b:
c7:a8:39:87:84:05:74:d4:4c:3c:ee:90:87:8a:49:55:9a:0c:
c0:c7:b4:6c:32:f7:17:66:cb:3a:c2:53:6d:ac:57:cc:82:80:
16:c1:54:18:fa:ca:3c:4d:4f:af:9a:77:cd:90:0d:3a:37:a9:
af:40:d6:79:fb:18:81:55:9a:77:16:c3:76:2e:0d:f8:be:df:
eb:6f:0d:87:9e:56:70:cf:eb:cf:af:a2:61:88:68:f6:70:33:
11:fd:20:43:c5:fb:55:24:ea:72:c1:9b:3c:5d:88:ee:91:e7:
3e:ac:f8:31:e0:61:9c:07:e0:03:2c:3f:47:66:9f:2f:bd:86:
78:6f:77:bc:e8:0d:91:66:30:31:0d:19:d6:7d:94:cb:40:a2:
bd:30:87:d4:0d:3d:d8:4d:42:6f:5b:b0:fa:4e:24:94:03:d5:
14:dc:e7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:38 2026 by rpki-client