Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
File: lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json)
Hash identifier: rLwl0lssgPuPlFKGg4tBcu0aIJumjn8kFXRDUr6FyMQ=
Subject key identifier: C8:6C:55:D2:3C:A9:F7:D1:5C:DE:25:89:F5:FC:04:97:1A:FA:64:E1
Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
Certificate issuer: /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Certificate serial: 019D99CFFCE72B18C506604A99E09068FF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 05:00:37 +0000
Manifest this update: Fri 17 Apr 2026 05:00:37 +0000
Manifest next update: Sat 18 Apr 2026 05:00:37 +0000
Files and hashes: 1: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: 3Rbtgl7ZavbxCDrstVmzzS1IE8e+F9U+dCDCQjYuTXQ=)
2: mggCybH0JuN-k6cQXNUomWKiBlI.roa (hash: FIDIgF+E4Eu8exw8u8XVBLqad5rC9fwdXSSTO7cnhZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:fc:e7:2b:18:c5:06:60:4a:99:e0:90:68:ff:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Validity
Not Before: Apr 17 05:00:37 2026 GMT
Not After : Apr 18 05:00:37 2026 GMT
Subject: CN=c86c55d23ca9f7d15cde2589f5fc04971afa64e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:5b:b8:f9:42:c6:7d:03:57:3f:fc:71:8a:
81:e4:3d:2e:5f:bd:a0:59:6b:a2:26:57:fa:85:15:
6d:ad:6d:9d:f4:e5:55:47:0b:2d:c6:c4:a6:91:2b:
b3:b1:1e:e0:8c:e3:b4:a0:a1:2c:35:6e:03:9b:ee:
47:e6:06:04:14:97:ab:79:50:72:8e:23:cd:76:41:
dc:ef:3d:18:0a:a2:ee:9c:ae:5b:a7:e7:51:5c:e8:
fa:cf:2b:70:57:93:76:8d:1d:5d:37:71:c1:14:cf:
63:b3:53:ea:46:19:f3:1e:5d:e5:8a:b4:9f:86:c4:
50:07:57:69:8c:83:e4:9f:c2:e6:86:d5:2b:6e:de:
6d:21:3a:fa:c8:49:bf:c8:8a:38:59:0b:70:8c:7d:
00:07:0d:5e:34:cc:69:e4:7c:42:c7:4b:06:3b:c9:
54:a9:b2:27:d3:14:c1:a9:a2:f9:19:c7:b8:99:4d:
d9:0c:cd:91:47:28:9a:e3:0e:6e:87:fb:11:fa:2c:
e0:94:81:ac:0c:af:60:6f:c3:a6:f3:72:81:7a:bc:
27:53:95:f2:9b:34:44:ee:2a:08:bd:4c:da:c9:6e:
8a:47:14:82:84:22:0f:8f:e2:96:0f:90:39:3f:1a:
66:38:20:aa:5b:19:92:ba:7f:87:c8:02:16:71:6c:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6C:55:D2:3C:A9:F7:D1:5C:DE:25:89:F5:FC:04:97:1A:FA:64:E1
X509v3 Authority Key Identifier:
keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2b:5f:40:0c:d4:e7:92:96:84:d7:21:5e:ee:1d:a5:2f:e8:
cf:bb:7b:26:a2:6e:22:7e:4d:50:b3:f6:af:45:40:d3:73:8a:
4c:0d:17:13:11:80:59:b4:4a:c5:76:c2:30:72:a6:0c:92:3e:
f7:b6:47:ba:ce:c3:78:68:e3:45:12:8a:0a:28:81:bf:0d:cf:
c0:26:7a:3b:60:13:e3:ac:c3:2e:02:1b:b9:eb:83:a8:81:d2:
88:2a:8a:79:91:13:26:98:d5:e8:0a:35:54:51:15:52:90:7d:
c5:61:ae:c4:40:6b:7b:1f:27:4b:9c:9f:fe:2a:37:a4:03:3d:
15:66:80:cc:a7:18:fc:1b:27:23:fc:c0:ca:36:b2:b6:5a:ec:
e9:cc:1e:26:6d:db:5d:15:cf:b4:9c:c0:17:42:d5:f1:6e:46:
eb:c4:63:4f:5c:06:5f:bc:c5:74:7d:1a:88:81:eb:bb:26:7f:
ae:21:b8:e0:3b:03:e4:83:ca:dc:41:16:73:68:c8:99:f6:c4:
9e:a3:49:4a:5c:28:d2:70:b1:a2:64:09:5f:b6:1c:1a:32:03:
2f:62:e8:03:f8:49:97:e2:18:5b:b0:48:ac:8e:8a:c5:96:ba:
c3:21:7b:b5:74:fa:0e:fd:d7:04:46:e3:26:01:2c:bb:5d:1d:
62:b5:b1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:55:29 2026 by rpki-client