Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
File: _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json)
Hash identifier: 8z+hgHY8McalrKuXf1f4QzQPMTBZV73CbSX/UPpmgYk=
Subject key identifier: BF:B8:51:17:92:C9:01:B9:F5:3B:52:C7:3E:34:45:AF:EB:6F:CD:A1
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial: 019D98BDA7D399EE30E57C1DF1DE942AEFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
Manifest number: 1014
Signing time: Fri 17 Apr 2026 00:00:59 +0000
Manifest this update: Fri 17 Apr 2026 00:00:59 +0000
Manifest next update: Sat 18 Apr 2026 00:00:59 +0000
Files and hashes: 1: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: h1YpDSi3ypB3F9vWopb06dvTgLekUvGa4yMUpOhbSFc=)
2: aZfqaIa_bktc0XTanoEHKkOjRso.roa (hash: mjs8YYHIWn4rHP7Qb2KDD/bwrim/6L1hngAF7LoemgM=)
3: p-AfH-TKOfnhGj7blmBf1Eou-vY.roa (hash: zP2xRRGKuJXHvcRgKn99qh8Cqni6s2W90yR9ji222a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:a7:d3:99:ee:30:e5:7c:1d:f1:de:94:2a:ef:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Validity
Not Before: Apr 17 00:00:59 2026 GMT
Not After : Apr 18 00:00:59 2026 GMT
Subject: CN=bfb8511792c901b9f53b52c73e3445afeb6fcda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:d1:d4:35:55:6a:d2:b1:86:fc:bc:5a:ee:
d4:66:1e:64:85:85:e1:af:f0:df:b9:4a:f5:29:f3:
7a:bb:19:60:eb:75:c7:17:56:99:27:0d:cf:11:97:
af:20:a5:58:f3:78:d5:3e:46:22:4a:71:90:62:b6:
fa:00:19:81:ae:87:37:05:77:15:fb:fb:9c:48:33:
39:2f:0f:dc:7c:ae:7f:c4:35:b2:16:72:66:6d:cc:
f6:0d:cb:a3:f9:4d:5a:91:60:1a:cc:b5:dd:95:b9:
16:bc:1a:7b:13:a2:66:74:95:0c:c3:bf:6d:3e:1b:
dc:a3:85:4d:40:32:d1:31:91:3b:a1:88:58:e2:ed:
65:61:ea:85:0d:4a:cc:91:c8:4b:51:eb:0d:15:bb:
7c:1d:15:34:73:18:a1:7e:22:0e:b2:15:46:4c:1a:
6c:31:3f:b1:f0:02:d8:3f:59:3b:4e:d6:71:29:59:
fb:21:23:96:c6:80:1b:73:44:08:97:9c:0d:b9:39:
cc:5b:d9:a2:9c:35:ff:03:64:91:de:4a:12:52:0a:
28:6f:04:d7:de:04:56:4b:5f:da:b5:67:4a:be:39:
45:35:3b:2f:ee:53:41:66:cb:ae:ac:7e:e2:cc:45:
9e:f9:ad:12:dc:36:37:62:81:e6:98:92:f3:72:89:
63:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B8:51:17:92:C9:01:B9:F5:3B:52:C7:3E:34:45:AF:EB:6F:CD:A1
X509v3 Authority Key Identifier:
keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f4:6c:97:c1:b4:54:26:e1:c7:3e:78:8d:2b:b9:0e:22:c7:
8c:f9:1e:e2:56:ef:44:e8:54:e8:97:98:92:50:9d:84:cc:d0:
cb:78:0f:48:c5:c5:d1:b9:0c:18:58:13:62:e8:ee:d5:10:2c:
74:6e:66:84:f3:5e:af:83:61:19:65:ef:12:23:a3:5a:a4:06:
a0:b5:a8:f9:dd:30:b6:d9:a8:b6:f0:ff:88:23:d9:ed:d4:57:
3b:6e:e1:be:be:4e:88:03:c3:7c:c4:60:1e:ea:b9:d4:2b:ef:
5b:22:24:8d:97:6f:4a:5f:d1:a8:1a:50:39:0d:43:29:36:d7:
90:34:a4:ff:58:46:73:77:b5:f2:5e:28:00:d1:d2:73:cd:d0:
d7:ac:cd:e0:e8:b4:d4:74:8a:4d:31:62:34:fa:fb:09:fa:df:
3d:f0:d7:41:55:46:9e:17:54:2f:6c:4b:57:f0:9d:7a:7e:2e:
a6:d0:f5:6b:29:c9:82:3f:2a:5e:dc:fc:89:b3:c9:4f:d6:42:
e0:04:4e:32:32:c8:3c:4f:75:53:b2:39:94:fa:36:96:12:0f:
58:a4:14:a2:46:8b:22:64:7e:78:b1:8f:81:f3:03:bf:5d:9e:
f4:35:53:b4:7a:d2:7a:49:f6:63:f3:08:58:d8:b7:8c:54:98:
02:07:89:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:08 2026 by rpki-client