Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
File: L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft (raw, json)
Hash identifier: 74s3+pfp+fPeJIS5zy2Wfhb7J9FcvddeNxsiKwK1XIM=
Subject key identifier: E3:0E:AB:F9:36:F8:9A:C2:11:92:66:23:6E:A2:98:31:F3:C8:53:21
Authority key identifier: 2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64
Certificate issuer: /CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064
Certificate serial: 019D99D0843F2F680712E6DAD4DA0CFE5A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 05:01:12 +0000
Manifest this update: Fri 17 Apr 2026 05:01:12 +0000
Manifest next update: Sat 18 Apr 2026 05:01:12 +0000
Files and hashes: 1: BcdnvgFk_BPjfJay48B0cMIpc0w.roa (hash: XfisUF3xoeDRYkIvVZku+7kk1qU1c+uuDUdRONEZgfE=)
2: L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl (hash: 83DROInh3ZJI5flyvQ/kDDXfDjaEZdxOGANqcHi1pKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:84:3f:2f:68:07:12:e6:da:d4:da:0c:fe:5a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064
Validity
Not Before: Apr 17 05:01:12 2026 GMT
Not After : Apr 18 05:01:12 2026 GMT
Subject: CN=e30eabf936f89ac2119266236ea29831f3c85321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:54:3b:72:8c:e0:8b:a9:b1:23:ba:86:ba:
a4:6a:9f:6b:04:fe:79:7b:b3:f2:fb:b0:d3:ca:ad:
56:e3:10:ce:92:28:ff:fa:6c:3e:bc:fa:08:ea:4d:
97:43:5e:da:07:98:28:27:fd:ec:25:9e:83:80:a0:
a7:97:24:c8:05:cf:f0:cf:ae:8d:85:9e:1b:95:25:
a0:f1:63:bd:d6:70:25:92:0b:5d:d2:72:e1:f4:ea:
de:75:5e:1d:4d:a1:22:de:3c:4b:ef:7e:1b:4e:ba:
c5:ec:40:61:8c:99:98:a9:80:54:51:ba:51:18:1f:
84:9f:4f:f7:36:db:98:75:d4:f0:d3:47:f5:79:80:
97:b4:52:22:d2:84:2c:76:04:b4:d4:04:3d:9e:ce:
db:7e:e4:39:58:27:49:cd:38:b2:c3:64:61:73:73:
b9:cb:68:09:87:3a:52:36:c4:ab:7f:fa:86:1a:d8:
79:74:f8:74:13:a7:61:b1:3c:0e:f3:1f:a3:18:0d:
3b:9e:3b:e1:80:49:6d:35:56:a3:99:bd:77:63:3f:
05:2e:5a:5d:32:c4:a4:f8:9d:02:5a:03:48:94:a3:
0c:e1:39:c8:52:e2:34:b5:0a:16:5b:b7:dc:25:c0:
98:80:94:51:da:29:e6:25:30:47:3f:c8:87:51:2b:
8b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0E:AB:F9:36:F8:9A:C2:11:92:66:23:6E:A2:98:31:F3:C8:53:21
X509v3 Authority Key Identifier:
keyid:2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:47:77:99:3f:a1:76:6a:4f:bf:cf:4d:f9:c4:7b:c8:fa:0b:
df:67:1b:20:ed:c7:cc:62:22:b4:ec:a3:26:61:fc:ec:6d:fc:
64:c7:c3:99:c5:26:34:fe:6f:de:c5:73:f5:19:fc:36:9b:e2:
f8:cf:73:b5:8d:ab:f0:66:c7:ec:2e:61:73:b4:21:c7:a5:eb:
0d:c6:41:62:38:0b:75:4c:c4:90:1c:af:68:e8:11:50:8a:35:
34:c3:95:fb:7d:3c:1b:13:45:54:8c:f8:21:d9:7b:0a:9f:11:
b1:d7:72:60:fe:35:0a:08:af:3b:45:09:d8:d5:ea:69:6e:c7:
d8:5d:2a:20:3a:f6:9a:af:28:a9:42:4f:48:af:58:70:bc:a5:
24:37:86:d5:e3:a7:1c:1c:f5:67:f0:4a:4b:2b:62:b8:de:0d:
8e:bb:55:49:1a:9a:b8:3f:d2:c6:eb:00:d4:93:d5:0b:69:ec:
73:ad:d8:b4:10:88:53:8f:7d:79:bb:0f:fa:0d:5d:e7:bb:e4:
7e:92:ee:52:7f:a0:e8:b0:52:b1:c0:ac:55:3b:6a:19:ce:bc:
ac:2e:9f:08:cb:9f:ae:85:5e:24:2c:a1:b9:0d:64:a6:a2:0b:
92:74:e4:9b:53:19:88:ff:60:f6:76:fd:2f:a2:55:31:67:2f:
c7:54:d8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:20:24 2026 by rpki-client