Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json)
Hash identifier: zZtcivIJcf0irONdcnyxLegn7UKAU3rGwMd+B8nHQJ4=
Subject key identifier: D6:88:6A:46:A2:99:87:21:38:68:2C:0D:9B:02:AC:B5:06:9F:FC:E6
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial: 019D9A06CD5587A84F35FAAA7B14293673D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 06:00:30 +0000
Manifest this update: Fri 17 Apr 2026 06:00:30 +0000
Manifest next update: Sat 18 Apr 2026 06:00:30 +0000
Files and hashes: 1: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: xc63a415uaQnH9Mv3eb00GqRZXFjSIX4qr1fUxoChbw=)
2: SdYBPf9hyZeCBZ0CXzRVluMGnGU.roa (hash: hgdsfyjTVsGnv4VajpzC0ZJUGOBghoLM7l+xd5EQZGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:cd:55:87:a8:4f:35:fa:aa:7b:14:29:36:73:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Validity
Not Before: Apr 17 06:00:30 2026 GMT
Not After : Apr 18 06:00:30 2026 GMT
Subject: CN=d6886a46a299872138682c0d9b02acb5069ffce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:d9:ed:c7:69:fe:93:a7:79:cd:34:1f:83:
24:8f:53:dc:18:cd:e9:da:37:e1:0c:a3:5e:69:b8:
6d:13:b8:bf:db:03:df:83:69:27:62:e6:2b:03:fd:
87:4a:de:1e:4f:bc:be:f6:89:d1:65:d2:53:df:57:
75:f4:60:79:aa:c6:0b:5f:2a:ca:a1:55:f3:aa:50:
38:67:b1:da:60:af:d9:4b:ed:04:c9:f9:f6:e0:2c:
70:8d:f6:a3:ec:13:bc:ee:5a:3c:91:09:18:36:5a:
11:3b:06:bc:33:b4:00:95:33:ad:63:01:f3:43:36:
4b:43:81:12:20:cf:0e:17:2e:2e:e8:00:de:00:5b:
6c:7b:31:64:aa:96:c0:99:03:07:49:da:18:dd:5b:
55:83:27:d3:3b:b4:ae:a4:4b:35:eb:74:d3:ce:17:
f4:90:6f:1a:7a:29:3e:63:8e:54:48:0d:78:07:e0:
97:e0:7f:5d:c8:92:04:fa:78:2b:9f:e8:a5:fa:b3:
a4:84:cf:9f:5e:d1:6a:51:0e:2a:03:ed:c8:fd:18:
de:65:fa:f3:c1:b5:d5:ab:46:bf:1b:37:0a:fc:4d:
eb:e3:26:17:46:be:33:32:4b:37:b7:ee:b8:40:9b:
32:32:ce:ed:61:8e:60:fe:8a:35:5a:9b:fa:f6:e6:
18:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:88:6A:46:A2:99:87:21:38:68:2C:0D:9B:02:AC:B5:06:9F:FC:E6
X509v3 Authority Key Identifier:
keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:b7:8a:e0:a4:43:5f:74:27:07:a6:b9:78:fc:53:25:1c:63:
2e:45:d6:d8:0c:77:fc:0e:0f:96:df:d0:0e:12:6f:14:ea:8e:
8e:6a:54:64:65:dd:af:65:1b:3d:5f:e1:67:65:7c:58:dd:69:
46:59:77:43:f4:43:56:52:f4:8a:d2:be:7d:39:68:17:87:fd:
8b:1b:2c:fb:a0:b0:99:4b:55:69:0f:92:e4:5a:98:b0:8f:e3:
85:51:85:f8:f5:37:d2:07:26:6d:b7:ef:5e:78:f9:bf:20:87:
80:cd:02:62:64:8d:a6:61:44:60:c2:22:72:6c:79:da:85:96:
21:63:43:0e:a4:cf:c9:6b:be:8e:2f:ac:5f:ef:d7:eb:5e:b5:
42:4b:d4:7f:ce:f4:2c:73:28:77:a1:b4:a5:0b:4d:76:3a:84:
3b:57:bb:55:5f:78:68:51:cb:fc:ad:b3:75:aa:0d:da:c6:80:
0b:9a:f9:9e:15:a7:1a:ec:9d:c0:d0:f6:fb:ef:0b:ea:47:5d:
e1:97:4d:02:76:36:7f:ff:6f:61:bb:76:ca:fb:c7:fa:fb:ae:
fe:4d:47:30:fb:bc:18:e7:ba:27:60:16:ff:5b:e5:73:3b:a4:
11:f7:38:06:fa:cd:9f:b2:f4:57:68:24:02:51:61:7f:35:44:
a0:15:01:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:34 2026 by rpki-client