Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
File: L28OoBJ6bjkhlWljgL5bsEdLAd8.mft (raw, json)
Hash identifier: RciiGsKkwNYgGjS6xKOXUslRuWaGjiME+b4DpkvbliY=
Subject key identifier: 51:18:27:DB:7F:69:FE:E7:BF:1B:E2:AB:8F:B1:BF:01:A3:6C:6C:B2
Authority key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Certificate issuer: /CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Certificate serial: 019D97E1C2A1B575316DFBA1BF9BCDDA3957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 20:00:48 +0000
Manifest this update: Thu 16 Apr 2026 20:00:48 +0000
Manifest next update: Fri 17 Apr 2026 20:00:48 +0000
Files and hashes: 1: L28OoBJ6bjkhlWljgL5bsEdLAd8.crl (hash: p45aE+yC7aAEiNbrPd1Kns1SgQeHyKL6woB8Y8lcpoQ=)
2: ojMiU5ZW89cnHI1G20p4HQw3p0E.roa (hash: vNBIj7f+Qx1+2T2uT1qli3Cooig9ZkkBG0sEKNGjtRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:c2:a1:b5:75:31:6d:fb:a1:bf:9b:cd:da:39:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Validity
Not Before: Apr 16 20:00:48 2026 GMT
Not After : Apr 17 20:00:48 2026 GMT
Subject: CN=511827db7f69fee7bf1be2ab8fb1bf01a36c6cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:39:6e:79:17:6d:1c:cd:14:10:35:83:16:b4:
8f:40:c3:a1:ae:d6:ea:43:c4:2e:ab:cd:a9:85:80:
91:7a:ad:d4:40:9b:68:07:b6:36:4e:f0:a7:69:03:
c6:aa:40:ad:c4:f2:89:b3:3d:0c:a4:29:13:df:46:
a9:30:71:74:e2:76:8f:3d:5e:65:b8:b9:de:0d:89:
05:a8:2a:74:81:ab:f9:2c:48:66:df:c8:80:55:b9:
d1:c6:dc:52:50:aa:96:51:8c:b1:a6:e4:e1:00:9c:
ea:07:23:2d:7b:f8:48:24:99:34:25:b1:95:b9:12:
9b:2a:89:1e:8e:48:10:6b:2d:fa:1d:10:43:97:00:
40:e3:72:62:91:71:1c:8a:93:fb:0a:52:61:b0:ed:
80:49:a5:60:2e:f7:aa:3d:88:95:dd:d1:95:cc:c0:
df:a0:ba:e5:af:07:ee:04:e6:b3:81:97:f5:3f:c4:
20:c1:c9:51:34:44:e7:97:68:8e:cf:40:86:ea:26:
c2:2b:f7:2a:d0:f5:5b:2c:42:e4:71:ee:f4:66:99:
09:48:d9:4e:8e:ba:aa:cc:e5:d1:1b:9c:77:95:91:
71:c5:e8:24:2d:5a:c9:10:b7:82:80:7b:aa:43:29:
33:48:d4:8b:38:c6:5b:82:11:4c:79:7f:9a:37:ff:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:18:27:DB:7F:69:FE:E7:BF:1B:E2:AB:8F:B1:BF:01:A3:6C:6C:B2
X509v3 Authority Key Identifier:
keyid:2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ac:6d:54:77:44:95:16:d0:07:5a:6f:5c:b1:ba:28:70:0f:
ec:ff:d5:4e:e3:cd:ff:2f:01:03:fe:31:5b:7a:9d:18:3b:0b:
bf:d4:f5:1b:89:bb:a5:1c:68:4f:40:93:cb:9e:50:ea:87:54:
ec:0f:fa:29:71:b0:06:76:15:12:3c:3b:f9:7b:58:f1:48:d9:
58:3a:fa:d3:86:ef:23:f3:93:84:62:1f:c2:ea:ed:86:db:61:
0f:cb:be:3f:25:a8:5b:cf:b0:7f:c1:23:81:60:c9:29:c7:ee:
38:89:80:92:88:01:e2:e7:2b:31:b5:fa:6b:58:dc:eb:37:4f:
6a:f1:44:dc:2d:55:a6:51:0e:72:b6:f5:d5:16:27:f9:0d:eb:
ab:c5:d3:5f:e8:63:34:40:38:32:dc:73:95:f3:8d:be:2b:4b:
83:c9:68:cd:6b:99:e4:8d:59:99:ef:95:0d:75:76:57:81:cd:
bd:2f:b5:d8:89:03:e1:32:09:62:16:51:dc:c2:54:c6:86:25:
da:a6:a8:c6:cd:ea:d0:78:6d:12:2b:e2:ab:ab:c3:8b:5d:17:
40:58:fb:f4:8f:7e:e6:e7:48:15:7a:c8:0b:b1:ee:8f:4d:1b:
17:13:81:6f:db:ab:37:eb:3f:42:db:b3:6a:78:fb:93:e2:15:
1c:0e:71:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:10 2026 by rpki-client