Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
File: lowsVdyOuZe_WRIdTC_9VESiLi0.mft (raw, json)
Hash identifier: +8vAQpzMEuBGfX48FYX63I6oigUy12BEWU2y46d2P/8=
Subject key identifier: 48:60:2F:1A:6A:B2:C3:1D:DC:2E:82:49:FD:7B:0E:BD:67:E8:B5:38
Authority key identifier: 96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
Certificate issuer: /CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Certificate serial: 019D9961FD7E3B8BF95783CA8AB73B4A9AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 03:00:29 +0000
Manifest this update: Fri 17 Apr 2026 03:00:29 +0000
Manifest next update: Sat 18 Apr 2026 03:00:29 +0000
Files and hashes: 1: lowsVdyOuZe_WRIdTC_9VESiLi0.crl (hash: qdZg28Yb42Lizz5NQbaGIGMuVHXpBj4+zz4IGdJCdmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:fd:7e:3b:8b:f9:57:83:ca:8a:b7:3b:4a:9a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Validity
Not Before: Apr 17 03:00:29 2026 GMT
Not After : Apr 18 03:00:29 2026 GMT
Subject: CN=48602f1a6ab2c31ddc2e8249fd7b0ebd67e8b538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:38:e1:13:49:4b:81:89:17:1c:fb:b4:f8:
81:d8:77:20:99:97:cd:0e:dd:e2:e3:90:22:7e:2c:
70:9a:cb:e0:eb:1a:39:02:29:34:9d:f7:1b:c0:7d:
3d:4b:d5:7f:60:5b:43:25:83:15:8e:1e:07:6c:b9:
42:b3:da:86:c6:e2:0f:8e:41:3f:8d:47:2a:bb:8b:
8f:d5:9b:d4:71:6f:70:ae:fd:03:3c:37:83:0f:47:
59:fa:5a:49:4e:ea:ea:ee:90:84:53:34:ab:b6:3d:
a0:d5:c6:b2:98:51:73:b3:c5:9d:f4:69:1a:72:67:
62:d7:a3:65:df:b6:93:f5:2b:53:c9:ae:4a:f9:45:
b1:77:4f:f5:1d:43:4b:a5:af:1a:db:a2:17:5f:3a:
ed:99:4f:93:5a:67:e9:cc:da:c7:9d:96:e2:72:bf:
b1:df:fc:60:9e:64:53:a3:2b:c4:3f:60:d7:b8:55:
9c:14:87:ed:cc:b7:b6:b3:04:b8:24:df:a5:78:da:
28:b6:c9:a5:32:02:bf:8a:6d:c9:4c:4e:c1:c1:4f:
c6:c8:20:a9:c7:8f:1d:7f:ac:69:52:c2:3f:99:bc:
29:81:e7:dc:2a:8a:90:34:1d:44:bc:eb:66:4f:c7:
6b:9b:63:de:a8:83:53:84:f5:7e:3a:41:77:10:ce:
d0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:60:2F:1A:6A:B2:C3:1D:DC:2E:82:49:FD:7B:0E:BD:67:E8:B5:38
X509v3 Authority Key Identifier:
keyid:96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f5:6b:b5:a7:9f:30:20:27:90:18:24:d3:71:72:08:05:36:
4c:49:2d:ab:7c:dc:bc:bf:a4:13:ec:1c:97:c3:aa:bd:4e:8e:
04:c2:70:13:e6:bf:ea:5b:b5:14:b1:c0:a7:9d:c4:a1:d9:f3:
04:a1:46:99:e1:45:a0:76:2f:c8:06:be:53:fa:94:1e:cd:11:
e5:5a:85:0d:11:b1:03:7c:a5:40:b6:e8:46:f8:5b:3d:97:de:
41:4a:4b:42:8a:9d:12:5c:54:c0:44:9d:09:95:19:d6:0b:fa:
e1:8b:48:72:89:af:5b:da:75:7f:7c:2f:68:df:ce:9f:a2:67:
86:b2:56:14:7f:d1:b6:d3:bf:3d:22:1c:03:9c:82:3b:48:82:
dc:f2:2d:c9:b4:32:65:38:cb:b6:11:65:fc:93:4c:ae:37:07:
48:1f:97:e9:d4:d3:b0:fa:a0:19:7b:c2:e1:d0:e7:7a:83:04:
77:c9:b9:13:70:c2:0f:e1:fe:7a:c5:69:15:9b:b1:2d:ad:23:
4f:5f:93:04:40:52:b6:9b:fa:14:15:cb:c0:f7:51:b8:7c:10:
16:c2:9d:f6:ee:c6:c8:b7:3b:59:32:87:5a:38:af:92:4d:ff:
dd:36:7d:e0:4b:6d:03:15:e0:97:a1:98:a9:9b:4a:40:a7:6d:
a5:1b:19:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:27 2026 by rpki-client