Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: OrDInT/hY38psHWSYw4FZhYjpv/9NTfIzTkwTruDQCE=
Subject key identifier: 50:DB:C8:16:06:77:34:29:C2:1A:29:03:19:06:CF:78:F1:82:2B:43
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 019D9A74F5A16E875527964975171664AEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 08:00:49 +0000
Manifest this update: Fri 17 Apr 2026 08:00:49 +0000
Manifest next update: Sat 18 Apr 2026 08:00:49 +0000
Files and hashes: 1: EpA_Ep7US9arWt2LAQnWqt8G0MQ.roa (hash: Enhj2i2fenmWvJgS9B/Dve2c1SF+MZkG+SV2591CLso=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: tSwIl1lXuDnOBJZUtWGdJnbj7vxfZKFd0iuITq0iTXM=)
3: qr2Qsm_m43gmQ4yBbPFTPZR9e5E.roa (hash: 3+Soe86vT0NYIViAWLAPp8YdyjKuUQGSfLwiQOP3wao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:f5:a1:6e:87:55:27:96:49:75:17:16:64:ae:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Apr 17 08:00:49 2026 GMT
Not After : Apr 18 08:00:49 2026 GMT
Subject: CN=50dbc81606773429c21a29031906cf78f1822b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:f5:57:eb:de:e9:55:80:c0:5e:e4:30:5a:
96:96:04:a9:fd:f0:fc:41:13:d1:5c:f3:d7:c1:ed:
34:9b:8a:49:12:9a:d9:74:b2:cd:de:db:0c:87:fe:
6e:be:df:9b:7c:8a:77:cb:45:c4:03:6c:fc:17:8b:
d5:5c:d1:b6:2e:e2:76:b1:29:12:50:23:db:7b:0c:
6a:46:dc:7b:48:9a:d8:98:c3:0b:ac:65:9f:bf:9d:
d8:01:4e:8b:15:e2:3e:3f:d6:ca:03:0a:9e:08:07:
f5:60:fc:d7:3e:e4:b1:3c:fe:9c:86:a4:bf:07:16:
97:de:f7:ca:d5:96:03:da:f4:84:74:96:4a:ac:d9:
8a:4b:58:53:e1:3d:1e:04:9c:62:90:b1:f0:c5:5c:
d8:ca:4b:08:16:d3:6b:28:27:d2:fa:a0:2c:c8:47:
d4:54:61:a3:88:71:8e:3e:bf:f4:54:7e:c5:a9:f8:
72:29:86:ed:11:25:be:5a:26:ab:03:61:a8:6a:99:
c0:6a:3b:d5:d1:74:87:3b:79:b0:09:d6:bb:32:4d:
af:6c:43:86:69:cd:36:69:38:ad:a8:74:a7:09:fa:
48:5d:98:22:67:56:33:a5:b2:9c:c0:08:33:c8:33:
68:6d:02:03:1d:79:87:09:3b:de:14:27:c9:73:e4:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DB:C8:16:06:77:34:29:C2:1A:29:03:19:06:CF:78:F1:82:2B:43
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:70:1c:45:aa:97:a0:f2:53:ae:d9:11:ba:2b:bc:d7:35:6d:
d3:3a:85:9e:b2:90:31:d0:2c:bd:fd:47:18:86:99:2b:49:e8:
99:a6:d6:e9:f6:22:d2:f0:38:dd:89:fe:3f:3c:f7:8a:f5:a9:
74:1c:6b:cf:97:42:8d:12:c9:4e:87:2b:39:0f:05:ab:87:5c:
e7:0f:e9:6e:14:3b:6f:0d:b0:a4:05:31:a5:5f:36:ae:04:53:
49:c8:65:13:dd:1e:09:c2:4d:29:e1:d2:fb:91:3a:35:d2:cd:
3e:e5:1a:b8:ca:af:b9:fd:0f:ea:99:4c:27:db:54:5c:9b:84:
6d:98:b1:05:25:03:8a:58:b9:7e:c9:5c:ed:77:a8:92:37:3e:
8d:00:2c:fd:3d:41:70:0d:e3:94:40:40:a8:1a:82:d5:ff:55:
26:4e:3c:db:7c:c9:2d:e9:75:1f:9d:07:6e:eb:bd:99:e0:34:
ba:0d:01:79:a5:fc:4e:05:8e:83:23:9e:6e:3b:44:0a:27:a6:
d4:99:d2:25:04:c5:f6:e0:33:68:4d:34:30:28:44:5d:ec:6e:
98:ba:cc:64:63:f9:02:fa:9c:eb:e7:2e:cf:04:d0:a6:57:ca:
d8:13:9a:9f:53:5a:3f:76:8c:5e:b4:b2:70:d4:9b:13:ee:6b:
6c:5d:af:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:13:57 2026 by rpki-client