Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
File: L6e3lEVZi0Luy76CjdiU368d_Ko.mft (raw, json)
Hash identifier: dxB9l7i0MEWIxHP3VI1Jdj44jb6+UOEilLDL0gwc/Yk=
Subject key identifier: 3E:CF:95:AE:4B:68:FC:8A:E3:D0:73:BD:A4:9E:F1:7E:DE:1C:AD:54
Authority key identifier: 2F:A7:B7:94:45:59:8B:42:EE:CB:BE:82:8D:D8:94:DF:AF:1D:FC:AA
Certificate issuer: /CN=2fa7b79445598b42eecbbe828dd894dfaf1dfcaa
Certificate serial: 019DA453F69DA937D1DFE199C6E78FF2FF79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
Manifest number: 56
Signing time: Sun 19 Apr 2026 06:00:59 +0000
Manifest this update: Sun 19 Apr 2026 06:00:59 +0000
Manifest next update: Mon 20 Apr 2026 06:00:59 +0000
Files and hashes: 1: L6e3lEVZi0Luy76CjdiU368d_Ko.crl (hash: W96vejYl1Er/y5lNXDt9eCq1/BOjwmbKY3dy5tBdx34=)
2: y9EmBnlrUJ5TJDgeHtlan8Tczq4.roa (hash: 2erRWv6redCBPjuOhVB00JAgnjJTYsHMgDSbesnXn8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:f6:9d:a9:37:d1:df:e1:99:c6:e7:8f:f2:ff:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa7b79445598b42eecbbe828dd894dfaf1dfcaa
Validity
Not Before: Apr 19 06:00:59 2026 GMT
Not After : Apr 20 06:00:59 2026 GMT
Subject: CN=3ecf95ae4b68fc8ae3d073bda49ef17ede1cad54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:53:20:7a:60:2f:6c:c4:d7:82:d3:12:c6:
23:24:87:81:3b:8d:67:06:29:38:39:d4:df:6b:46:
3e:ea:e8:75:0a:ec:fe:12:f4:ab:d2:f3:e7:ff:6c:
34:53:29:88:fc:21:d6:83:8c:22:97:21:48:e3:4f:
36:17:ce:9f:4a:80:b8:ad:1a:27:99:88:63:3b:fa:
92:80:5a:d7:ff:05:b1:f2:02:55:32:bf:1f:6f:f3:
a2:97:64:6e:1d:c6:f1:8b:5b:c4:44:a6:61:55:c0:
cb:55:88:e0:25:4e:42:56:ad:fe:a9:de:dd:a7:38:
88:5f:0f:ef:24:43:92:0b:ce:74:df:4c:9a:8a:20:
fd:4d:e3:1b:f4:1d:68:81:6a:c9:22:71:a2:0d:8f:
ef:3f:ad:00:fa:4b:f2:51:19:c1:1f:03:b3:7a:3b:
7c:df:61:a6:6a:7a:6e:ef:e3:28:9f:34:ba:d2:37:
7c:7f:4a:50:90:c5:74:9a:0c:ad:12:26:41:50:af:
4e:80:61:ad:27:78:93:ab:6e:dc:d9:8a:f1:f7:52:
9d:a8:e3:bf:f2:26:48:8d:99:ce:06:d9:09:3e:3a:
15:db:17:5f:0f:74:7a:93:ba:64:5e:fa:34:cd:11:
18:d3:da:5a:c2:16:2d:28:3e:b7:9c:81:d8:40:da:
67:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CF:95:AE:4B:68:FC:8A:E3:D0:73:BD:A4:9E:F1:7E:DE:1C:AD:54
X509v3 Authority Key Identifier:
keyid:2F:A7:B7:94:45:59:8B:42:EE:CB:BE:82:8D:D8:94:DF:AF:1D:FC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a3:c4:cf:5e:ac:94:97:b9:3c:33:65:6a:d2:ac:94:01:82:
83:f8:47:49:22:50:1a:f9:8f:38:34:5f:99:e7:0a:7b:4d:d8:
a6:91:9d:8b:cc:06:39:89:27:89:c9:b6:f8:44:66:b5:1c:71:
83:dc:4d:c3:c1:b7:cb:35:c9:74:7d:06:1f:1e:c4:d4:12:8a:
02:23:c1:af:a5:2e:a0:d3:c1:ee:4f:8e:58:4e:ec:08:04:d6:
68:be:81:7c:47:f2:04:cb:0f:79:0e:a9:42:19:ad:8e:3a:5a:
0c:e9:41:f4:79:26:2a:b5:97:d0:52:82:ee:44:85:8d:5a:12:
51:c0:05:a1:e1:b2:28:38:3c:74:07:93:78:45:af:5f:2c:18:
53:fe:31:74:91:13:c8:e5:ea:92:f0:48:2e:fe:7f:e0:d5:cd:
f6:53:86:8d:f9:6c:01:64:38:d0:84:69:c2:c7:82:20:02:53:
f3:63:62:c6:9c:44:46:e7:98:fc:40:8a:5b:e9:3c:ed:8d:7c:
c0:e3:a5:af:91:28:8e:7c:e9:8c:d5:f2:98:51:a3:f3:d3:d9:
54:31:c7:3c:91:85:8f:f1:64:7e:fe:0f:f6:be:7c:4e:c3:a4:
16:d8:5e:39:91:82:f6:ea:c4:6b:02:5b:75:2a:15:02:b6:46:
b7:3c:fd:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU/adqTfR3+GZxueP8v95MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTdiNzk0NDU1OThiNDJlZWNiYmU4MjhkZDg5NGRmYWYx
ZGZjYWEwHhcNMjYwNDE5MDYwMDU5WhcNMjYwNDIwMDYwMDU5WjAzMTEwLwYDVQQD
EygzZWNmOTVhZTRiNjhmYzhhZTNkMDczYmRhNDllZjE3ZWRlMWNhZDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNpTIHpgL2zE14LTEsYjJIeBO41n
Bik4OdTfa0Y+6uh1Cuz+EvSr0vPn/2w0UymI/CHWg4wilyFI4082F86fSoC4rRon
mYhjO/qSgFrX/wWx8gJVMr8fb/Oil2RuHcbxi1vERKZhVcDLVYjgJU5CVq3+qd7d
pziIXw/vJEOSC85030yaiiD9TeMb9B1ogWrJInGiDY/vP60A+kvyURnBHwOzejt8
32Gmanpu7+MonzS60jd8f0pQkMV0mgytEiZBUK9OgGGtJ3iTq27c2Yrx91KdqOO/
8iZIjZnOBtkJPjoV2xdfD3R6k7pkXvo0zREY09pawhYtKD63nIHYQNpnsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7Pla5LaPyK49BzvaSe8X7eHK1UMB8GA1UdIwQY
MBaAFC+nt5RFWYtC7su+go3YlN+vHfyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZlM2xFVlppMEx1eTc2Q2pkaVUzNjhkX0tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81Y2FlMjYtNDViNS00ZmQ4LTlkZTUt
NGI0NDA4M2Q2MTIyLzEvTDZlM2xFVlppMEx1eTc2Q2pkaVUzNjhkX0tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81Y2FlMjYtNDViNS00ZmQ4LTlkZTUtNGI0NDA4M2Q2MTIy
LzEvTDZlM2xFVlppMEx1eTc2Q2pkaVUzNjhkX0tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKPEz16s
lJe5PDNlatKslAGCg/hHSSJQGvmPODRfmecKe03YppGdi8wGOYknicm2+ERmtRxx
g9xNw8G3yzXJdH0GHx7E1BKKAiPBr6UuoNPB7k+OWE7sCATWaL6BfEfyBMsPeQ6p
QhmtjjpaDOlB9HkmKrWX0FKC7kSFjVoSUcAFoeGyKDg8dAeTeEWvXywYU/4xdJET
yOXqkvBILv5/4NXN9lOGjflsAWQ40IRpwseCIAJT82NixpxERueY/ECKW+k87Y18
wOOlr5EojnzpjNXymFGj89PZVDHHPJGFj/Fkfv4P9r58TsOkFtheOZGC9urEawJb
dSoVArZGtzz9rw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:27:46 2026 by rpki-client