Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
File: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft (raw, json)
Hash identifier: EvlRq5QD159FEo1OiF758f3c5B8BjjZULP6vxpX0rx8=
Subject key identifier: 50:E2:A6:63:CB:B3:A4:13:E4:49:9A:F3:A7:7B:8E:0D:D9:EF:65:4C
Authority key identifier: 2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
Certificate issuer: /CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Certificate serial: 019D9AE35941735B8DD6B20B8761C4D1DA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 10:01:23 +0000
Manifest this update: Fri 17 Apr 2026 10:01:23 +0000
Manifest next update: Sat 18 Apr 2026 10:01:23 +0000
Files and hashes: 1: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl (hash: bLhyWBQxR7WjQN7r38+cDzGHTYcWIEzOujZHGzCu4G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:59:41:73:5b:8d:d6:b2:0b:87:61:c4:d1:da:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Validity
Not Before: Apr 17 10:01:23 2026 GMT
Not After : Apr 18 10:01:23 2026 GMT
Subject: CN=50e2a663cbb3a413e4499af3a77b8e0dd9ef654c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:aa:41:6d:f0:21:94:a3:86:02:f4:79:6c:
c6:56:4a:59:2d:cb:59:8d:c5:cc:40:ce:42:9f:66:
e2:eb:b2:f0:4e:a9:59:a8:3c:3b:16:68:2d:e5:b1:
81:87:a1:45:1b:65:1e:93:40:82:d2:9b:00:44:a9:
4c:62:c6:e1:93:5c:ae:8b:07:ca:69:35:ad:bb:21:
8a:37:4a:c1:41:8a:cf:c0:83:b2:bf:29:ec:5c:04:
c6:0d:5c:65:93:aa:58:7a:66:f0:2b:14:fe:0d:a4:
29:b3:fe:ac:ec:80:be:a1:3d:0b:e1:f2:1e:11:06:
16:8f:db:ed:53:4d:13:fb:f3:95:2f:52:e3:41:34:
95:67:52:b3:eb:a6:a8:24:19:87:27:36:f3:b3:ed:
8b:c2:ef:1f:db:fe:da:20:9d:71:bd:9b:03:6b:a8:
f9:7a:3a:ab:b0:b8:e5:15:f2:26:a6:d8:65:37:eb:
83:ee:56:8d:1e:bc:c2:bd:00:a1:b4:9c:b9:8d:12:
71:5a:c1:9b:0d:8a:73:37:46:85:1c:1e:a3:b4:18:
e1:ef:e5:ef:a5:ef:18:be:7f:9a:2e:2a:fd:12:ca:
e8:c1:5a:78:7c:9e:a4:01:b4:e2:93:1b:3a:11:03:
57:61:aa:01:d0:5f:21:77:90:59:db:0e:22:c3:dc:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E2:A6:63:CB:B3:A4:13:E4:49:9A:F3:A7:7B:8E:0D:D9:EF:65:4C
X509v3 Authority Key Identifier:
keyid:2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4b:cb:9c:b8:57:02:28:72:ae:ed:da:ef:11:b0:b4:88:a7:
eb:5e:05:a4:61:0c:d9:d9:21:ba:9a:d3:f7:99:82:57:d0:a9:
0d:38:37:8b:f6:b7:60:2b:22:89:d0:6e:ec:43:10:fb:ca:a6:
c6:ed:bf:6f:91:4d:84:5b:1e:27:2e:33:d5:8d:6d:55:a7:3a:
ae:e4:0c:7e:74:83:a1:dd:e8:5b:e9:41:86:44:df:aa:c4:1a:
fb:fa:2b:cf:b5:f6:35:1c:55:3a:45:01:e7:90:bc:0e:4f:66:
36:6f:12:ee:87:12:16:97:c8:b3:cc:23:44:fd:7e:d0:1e:c4:
f9:d1:fa:67:02:e0:93:c7:9b:f4:a9:8f:46:0e:0d:4c:9b:4a:
50:b5:5c:7c:ae:6b:9b:34:ba:87:8f:67:10:d2:f7:16:c1:9d:
4d:22:e9:64:ba:8d:3e:76:7a:53:f8:2a:b6:f9:1b:7a:d5:d0:
0f:49:ae:b7:e2:65:1a:58:69:4e:88:cb:23:a2:38:07:3f:17:
51:76:09:f0:bc:d1:c3:27:8a:da:1c:3a:dc:a4:db:7d:44:53:
a6:c9:d4:16:d6:3e:da:db:ac:c9:98:d2:71:83:d9:69:a3:0b:
ac:56:15:b9:fd:8f:32:dd:03:b2:06:0f:42:3b:94:ed:2a:23:
61:fc:55:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a41lBc1uN1rILh2HE0dpCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYWIxMGU4YWZkZjAzZTRiMWRhODU3ZmFjMDUxOWY0OTQz
ZGJjYWIwHhcNMjYwNDE3MTAwMTIzWhcNMjYwNDE4MTAwMTIzWjAzMTEwLwYDVQQD
Eyg1MGUyYTY2M2NiYjNhNDEzZTQ0OTlhZjNhNzdiOGUwZGQ5ZWY2NTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EqqQW3wIZSjhgL0eWzGVkpZLctZ
jcXMQM5Cn2bi67LwTqlZqDw7Fmgt5bGBh6FFG2Uek0CC0psARKlMYsbhk1yuiwfK
aTWtuyGKN0rBQYrPwIOyvynsXATGDVxlk6pYembwKxT+DaQps/6s7IC+oT0L4fIe
EQYWj9vtU00T+/OVL1LjQTSVZ1Kz66aoJBmHJzbzs+2Lwu8f2/7aIJ1xvZsDa6j5
ejqrsLjlFfImpthlN+uD7laNHrzCvQChtJy5jRJxWsGbDYpzN0aFHB6jtBjh7+Xv
pe8Yvn+aLir9EsrowVp4fJ6kAbTikxs6EQNXYaoB0F8hd5BZ2w4iw9xdoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDipmPLs6QT5Ema86d7jg3Z72VMMB8GA1UdIwQY
MBaAFCyrEOiv3wPksdqFf6wFGfSUPbyrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEtzUTZLX2ZBLVN4Mm9WX3JBVVo5SlE5dktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82NjllNDctYzA0ZC00ZDk2LWI5YTAt
MGQ1MDk0NGYyMzllLzEvTEtzUTZLX2ZBLVN4Mm9WX3JBVVo5SlE5dktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC82NjllNDctYzA0ZC00ZDk2LWI5YTAtMGQ1MDk0NGYyMzll
LzEvTEtzUTZLX2ZBLVN4Mm9WX3JBVVo5SlE5dktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0vLnLhX
Aihyru3a7xGwtIin614FpGEM2dkhuprT95mCV9CpDTg3i/a3YCsiidBu7EMQ+8qm
xu2/b5FNhFseJy4z1Y1tVac6ruQMfnSDod3oW+lBhkTfqsQa+/orz7X2NRxVOkUB
55C8Dk9mNm8S7ocSFpfIs8wjRP1+0B7E+dH6ZwLgk8eb9KmPRg4NTJtKULVcfK5r
mzS6h49nENL3FsGdTSLpZLqNPnZ6U/gqtvkbetXQD0mut+JlGlhpTojLI6I4Bz8X
UXYJ8LzRwyeK2hw63KTbfURTpsnUFtY+2tusyZjScYPZaaMLrFYVuf2PMt0DsgYP
QjuU7SojYfxVVA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:23:39 2026 by rpki-client