Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
File: _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json)
Hash identifier: ZQmlHrzn2+gQdmrTzy1c/vR0Bw07b8lo/NkL7rDGscM=
Subject key identifier: 3D:CA:92:9A:7E:28:20:57:8D:3E:69:07:A9:5E:36:3C:0A:1F:1E:FB
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial: 019D98BDA9B5EA84C09DB8C4B270876A4C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 00:00:59 +0000
Manifest this update: Fri 17 Apr 2026 00:00:59 +0000
Manifest next update: Sat 18 Apr 2026 00:00:59 +0000
Files and hashes: 1: Ut1UIZXtvGvA8jqfjKx-zoSsSmk.roa (hash: 6WpPy4Xn98zqM430NxCO708hZN1RtW/qmGYYPyMXR+U=)
2: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: CKbxHc+4hw/VLisiveAxqkmrycq5DSFZgdNb1kCWkmA=)
3: mgP5YZ0JeZUMwTrpIOlo1p2fUnw.roa (hash: cQXWsVz483MH+u8vJNX4kMADAIEqmSIqmpJYaQ+Q26k=)
4: yfVS_2kk-uHktNjsFEZtdVuHL48.roa (hash: G0Cy8TBWtX3HCmdmOFr3FXRyCZ+xdfsoAZfGcB4o49c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:a9:b5:ea:84:c0:9d:b8:c4:b2:70:87:6a:4c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Validity
Not Before: Apr 17 00:00:59 2026 GMT
Not After : Apr 18 00:00:59 2026 GMT
Subject: CN=3dca929a7e2820578d3e6907a95e363c0a1f1efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3a:99:9e:da:b0:bc:8a:9e:a4:32:64:f2:5d:
d5:c7:11:01:f3:b5:bc:f3:3c:49:2a:86:86:a4:bd:
44:b0:a5:5a:a1:59:6b:e6:de:86:46:15:39:61:bb:
49:b3:f4:b1:0e:55:d1:e2:ae:4d:26:84:38:e6:64:
bf:56:4d:76:80:1e:6f:03:f6:c0:2c:1d:6c:f1:f3:
82:d4:54:24:b0:51:f5:26:0f:d6:32:d1:c4:fc:e4:
8f:d2:43:a5:48:dd:78:57:f3:dc:07:ef:4b:89:a0:
27:8f:ce:ef:ca:c9:09:0e:4e:91:6e:63:f5:7d:d9:
56:36:1f:47:ef:e4:e5:c2:b6:15:56:f2:e0:38:bc:
58:f7:5b:5b:e1:a5:e4:71:9c:37:a4:f6:bc:17:4e:
1b:ee:8f:d2:5f:35:a5:3b:1f:87:ed:15:26:30:e4:
64:31:a8:e9:f8:cb:7c:3a:4c:77:cd:c0:54:41:48:
d3:0c:d2:9f:8c:fc:d9:41:6b:93:bd:67:ed:86:f0:
cd:85:02:4a:d1:c4:ba:39:3a:9d:bd:fd:ca:1d:cf:
df:5e:bd:7e:99:40:e7:5d:ef:46:78:e3:6e:e4:c8:
1b:d6:37:0b:d6:c3:82:6f:1c:b5:22:d7:f9:60:19:
69:72:91:2d:95:e0:31:c2:01:72:e7:ba:9a:89:c5:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CA:92:9A:7E:28:20:57:8D:3E:69:07:A9:5E:36:3C:0A:1F:1E:FB
X509v3 Authority Key Identifier:
keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8e:22:d1:9e:c7:55:16:8a:f9:9b:15:a2:9f:f4:58:f1:db:
f1:19:e4:88:f7:20:4e:64:59:1c:36:6e:55:49:a2:f6:a0:7d:
a1:ec:02:29:6d:6c:ad:ae:79:f1:39:09:29:7a:f0:29:c2:04:
a1:8a:ca:4f:32:1d:c8:e4:2e:03:72:e0:0a:f2:00:70:24:5c:
3e:16:07:b2:33:b5:e3:5a:0c:b4:12:c7:63:eb:ff:f6:af:7d:
3a:54:46:69:94:a7:32:fe:fb:c4:ee:c8:a0:8c:89:3b:a0:70:
c5:3e:9f:57:f1:c1:56:df:b4:da:16:68:7e:62:fc:b9:11:3b:
ec:80:c3:76:96:4d:46:31:b9:cc:b5:b5:59:88:92:0d:61:fd:
fc:5e:61:21:1f:7b:c1:08:11:41:ca:7e:4b:23:20:3d:05:a4:
db:44:27:46:d1:06:87:7f:40:39:c8:6c:af:1c:c7:31:68:6a:
c1:6b:8e:86:a5:90:36:89:96:3a:49:d9:2d:54:13:e8:83:70:
0f:b2:37:60:37:12:a1:63:0f:70:4b:c4:c3:67:63:b8:73:c9:
26:57:31:00:e8:22:dd:f6:cb:c5:18:aa:3f:d8:bc:65:4c:80:
79:45:e3:ac:82:5e:90:5f:b0:8a:f2:29:9c:09:38:61:b7:5d:
27:2f:f6:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yvam16oTAnbjEsnCHakxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYjZiMTdiZDJlNWYxNGJkMzc1YTBjMGU2OWRmYzc3ZDk3
MDJmNGEwHhcNMjYwNDE3MDAwMDU5WhcNMjYwNDE4MDAwMDU5WjAzMTEwLwYDVQQD
EygzZGNhOTI5YTdlMjgyMDU3OGQzZTY5MDdhOTVlMzYzYzBhMWYxZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zqZntqwvIqepDJk8l3VxxEB87W8
8zxJKoaGpL1EsKVaoVlr5t6GRhU5YbtJs/SxDlXR4q5NJoQ45mS/Vk12gB5vA/bA
LB1s8fOC1FQksFH1Jg/WMtHE/OSP0kOlSN14V/PcB+9LiaAnj87vyskJDk6RbmP1
fdlWNh9H7+TlwrYVVvLgOLxY91tb4aXkcZw3pPa8F04b7o/SXzWlOx+H7RUmMORk
Majp+Mt8Okx3zcBUQUjTDNKfjPzZQWuTvWfthvDNhQJK0cS6OTqdvf3KHc/fXr1+
mUDnXe9GeONu5Mgb1jcL1sOCbxy1Itf5YBlpcpEtleAxwgFy57qaicUF4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3Kkpp+KCBXjT5pB6leNjwKHx77MB8GA1UdIwQY
MBaAFPy2sXvS5fFL03WgwOad/HfZcC9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWIt
MmM0OGNiMjk4NjQ2LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWItMmM0OGNiMjk4NjQ2
LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg44i0Z7H
VRaK+ZsVop/0WPHb8RnkiPcgTmRZHDZuVUmi9qB9oewCKW1sra558TkJKXrwKcIE
oYrKTzIdyOQuA3LgCvIAcCRcPhYHsjO141oMtBLHY+v/9q99OlRGaZSnMv77xO7I
oIyJO6BwxT6fV/HBVt+02hZofmL8uRE77IDDdpZNRjG5zLW1WYiSDWH9/F5hIR97
wQgRQcp+SyMgPQWk20QnRtEGh39AOchsrxzHMWhqwWuOhqWQNomWOknZLVQT6INw
D7I3YDcSoWMPcEvEw2djuHPJJlcxAOgi3fbLxRiqP9i8ZUyAeUXjrIJekF+wivIp
nAk4YbddJy/2/Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:53:15 2026 by rpki-client