Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
File: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft (raw, json)
Hash identifier: LZrbvWYRc8TNouX1fhIm2dkwG44fPTqttwlnrMxLZG4=
Subject key identifier: B4:B0:C5:A0:D6:A4:BD:F3:2F:C1:19:63:8C:2C:07:80:2A:F8:70:BE
Authority key identifier: 2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
Certificate issuer: /CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Certificate serial: 019D992B0708BA267C5502661063AC516204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
Manifest number: 0CC4
Signing time: Fri 17 Apr 2026 02:00:27 +0000
Manifest this update: Fri 17 Apr 2026 02:00:27 +0000
Manifest next update: Sat 18 Apr 2026 02:00:27 +0000
Files and hashes: 1: H6q8h__WeJINLNS-JCWvRE5rrpQ.roa (hash: wliRsZf6kHIWennhhOkB1e0svy01r5HVaziAUGbDu0c=)
2: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl (hash: Jy7xLANxk2IlC/vXr98f/cwMTZQGD63/U8la8Yxdcyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:07:08:ba:26:7c:55:02:66:10:63:ac:51:62:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Validity
Not Before: Apr 17 02:00:27 2026 GMT
Not After : Apr 18 02:00:27 2026 GMT
Subject: CN=b4b0c5a0d6a4bdf32fc119638c2c07802af870be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:4f:d1:a7:9d:4d:fd:62:7c:09:6c:76:f7:
ea:fc:cf:ea:34:00:9c:7f:3f:e7:64:3e:fb:2d:53:
09:ba:a8:0e:9c:88:9a:ae:46:c7:5a:03:49:68:98:
7a:52:25:97:b3:02:9f:50:5b:c2:04:b1:84:bb:f5:
02:53:c5:84:35:84:e2:33:34:1f:fe:99:fa:f2:7b:
f5:45:26:e6:c4:99:61:a6:8a:bc:06:92:72:98:30:
f9:75:63:57:cd:ba:9d:d3:c1:a9:53:73:03:98:9e:
e4:c6:b7:5e:76:f5:15:58:92:54:17:43:d7:46:8f:
2c:4b:9d:b6:88:6b:fa:7f:8b:94:43:89:9f:fb:ec:
21:da:e4:ed:c7:ca:21:95:16:00:80:80:27:b8:18:
f6:e1:69:57:ed:b2:1f:41:ac:ca:10:9a:e0:b9:5a:
7c:2e:94:5b:aa:00:69:aa:33:10:d9:8b:63:74:ff:
ef:e2:1b:6c:be:56:35:01:0c:c8:c6:02:ab:61:10:
e7:9a:63:b4:46:69:c5:55:27:ab:4e:db:6b:e7:70:
8f:fa:64:4b:ac:8e:6a:22:44:d5:39:a4:30:cf:28:
bc:b1:28:3d:19:30:c1:de:58:e2:92:6f:47:35:8c:
70:6a:db:0d:e1:e6:49:70:cb:39:aa:e9:85:36:e5:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B0:C5:A0:D6:A4:BD:F3:2F:C1:19:63:8C:2C:07:80:2A:F8:70:BE
X509v3 Authority Key Identifier:
keyid:2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:cf:68:2c:f5:d3:00:0e:d4:ca:96:74:c0:d6:1b:33:f5:f0:
f9:20:8e:94:2d:27:25:4b:c7:09:7e:83:32:29:c2:ee:03:0c:
d3:92:b0:07:d8:49:c0:67:2b:d3:0f:6b:d7:3b:a3:a8:ac:e5:
e3:60:55:26:e7:be:73:32:58:8f:0d:8f:9b:d4:9d:b9:43:b6:
26:95:a4:4a:3e:69:78:2e:02:f8:d8:e8:ec:f7:93:84:78:fb:
59:eb:06:4c:d5:b4:2d:44:57:66:ad:41:4e:21:e2:91:43:ab:
e0:0d:e0:9a:74:ce:3d:4c:fe:a0:20:38:c2:70:98:44:b2:93:
be:ef:ce:26:2a:c3:ad:b2:49:2f:62:2a:a6:f8:65:53:14:65:
01:f4:6f:a0:82:d8:9c:63:8c:0e:3b:12:1e:34:12:7c:74:54:
7a:6d:c6:09:2c:bb:43:24:89:eb:c0:8f:1e:fb:5a:7a:d1:de:
67:bf:e7:50:b9:8e:98:65:c4:b2:1d:00:90:27:2f:67:89:84:
6b:88:bf:f5:5d:7c:c6:19:9a:8c:4c:44:95:5c:e0:1e:51:9e:
f5:ca:a0:de:fb:05:45:b8:06:b2:1b:7e:a8:d5:9c:09:fa:50:
39:e4:72:b2:aa:c3:2c:6d:a7:95:d0:4a:b7:e5:c6:1a:7e:d5:
d3:6f:af:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:55 2026 by rpki-client