Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
File: 1LkIqddLShCqH0wOiu1qhKO3kAU.mft (raw, json)
Hash identifier: 2LCfe5FM0MuswnwQutB2Q7lHrw3qcalFhAn4Rp3ogyw=
Subject key identifier: 21:42:6E:D7:92:71:26:C8:13:F6:E2:1E:D1:77:53:87:AF:D7:A5:EB
Authority key identifier: D4:B9:08:A9:D7:4B:4A:10:AA:1F:4C:0E:8A:ED:6A:84:A3:B7:90:05
Certificate issuer: /CN=d4b908a9d74b4a10aa1f4c0e8aed6a84a3b79005
Certificate serial: 019DA59D38E9230EDC495CE2875AC009E8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LkIqddLShCqH0wOiu1qhKO3kAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
Manifest number: 5A
Signing time: Sun 19 Apr 2026 12:00:37 +0000
Manifest this update: Sun 19 Apr 2026 12:00:37 +0000
Manifest next update: Mon 20 Apr 2026 12:00:37 +0000
Files and hashes: 1: 1LkIqddLShCqH0wOiu1qhKO3kAU.crl (hash: d9XLBTzTw3TwrFjfjtP1OTitHN19XNsmben4lE5QXzM=)
2: FEgeYcFLPGsn_DF04vy60HLH3eU.roa (hash: mvXQQ+TxCYuDnGKabkqj9L+d+yyQb/h/Oz4Zigg1PAE=)
3: oMAU4cDFxFwhA1NEpG0dXZO6zCQ.asa (hash: WY020cbiNFXtPn2WDWywnrSUq7C1vkRuGv5i2lQyac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LkIqddLShCqH0wOiu1qhKO3kAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:38:e9:23:0e:dc:49:5c:e2:87:5a:c0:09:e8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b908a9d74b4a10aa1f4c0e8aed6a84a3b79005
Validity
Not Before: Apr 19 12:00:37 2026 GMT
Not After : Apr 20 12:00:37 2026 GMT
Subject: CN=21426ed7927126c813f6e21ed1775387afd7a5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:ae:45:c0:bb:d9:d7:23:52:3e:76:ff:fa:
b7:06:56:79:1f:d3:1d:e3:cd:c6:e6:f0:2b:dd:e1:
d2:3d:ac:ca:89:10:c3:95:25:b6:91:d3:a1:25:a9:
2e:20:71:02:06:5a:ba:97:76:44:0e:12:75:3e:0e:
c3:b5:57:45:83:8d:c1:49:06:18:98:55:bb:7d:47:
c7:67:ee:45:76:97:cd:7a:1f:ea:4c:45:1b:d7:7e:
fa:36:f8:c8:6c:3f:4d:10:7b:ee:87:e0:c4:03:29:
93:57:c1:21:48:fe:50:01:8f:e3:0f:5c:1c:03:f7:
c7:cc:7c:a0:b5:a1:fc:3b:46:57:a3:e9:04:9f:08:
09:26:70:74:0b:01:e4:99:99:ff:4e:19:f4:89:3a:
73:71:38:fe:b5:6a:c9:e2:e4:7f:a6:0f:79:a2:20:
62:97:8f:b1:c0:78:57:af:d2:f8:3c:66:ae:ae:48:
d5:3c:b6:44:70:7b:99:f7:5c:04:7c:d2:a5:a3:5b:
17:6e:fa:f9:da:f2:ab:22:f5:16:29:a3:2c:ee:e9:
be:f3:31:30:e0:09:f2:5a:e1:d2:eb:bc:6c:42:d5:
72:3e:d3:82:20:d8:44:84:0a:a7:a3:f0:00:d4:8b:
34:a9:66:5f:26:b0:d7:4e:94:ee:38:af:d2:2c:ef:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:42:6E:D7:92:71:26:C8:13:F6:E2:1E:D1:77:53:87:AF:D7:A5:EB
X509v3 Authority Key Identifier:
keyid:D4:B9:08:A9:D7:4B:4A:10:AA:1F:4C:0E:8A:ED:6A:84:A3:B7:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LkIqddLShCqH0wOiu1qhKO3kAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:76:72:21:69:90:78:8b:32:4e:d7:92:5f:74:36:70:21:e3:
76:51:d9:85:8c:e6:e2:f0:bf:1c:ed:9c:36:b5:9a:8f:3a:ee:
32:4c:42:5a:bc:6b:74:c3:b5:86:e5:f5:b5:52:0c:ed:54:39:
25:c4:02:13:bf:ea:20:99:2b:e5:13:17:47:7b:70:fa:10:38:
a5:31:17:32:30:63:44:92:12:a8:5c:a3:c5:fa:23:53:b8:fe:
a7:21:a7:3b:58:05:74:91:2b:ef:4c:48:39:42:8d:09:0b:bd:
d9:6f:fa:12:f1:75:fa:cd:28:23:67:f9:12:27:21:7e:94:a1:
94:85:d7:a3:27:60:8f:67:73:1d:d1:1c:88:6b:56:24:5a:e0:
9c:16:cd:11:4e:0b:9d:f2:79:8b:58:f0:cc:54:b2:ea:09:ae:
12:cc:1b:69:ae:ed:47:fa:d7:6c:21:ea:30:76:9e:54:12:67:
aa:0c:ce:06:08:4d:40:a7:f0:01:c1:30:61:bf:e0:d1:27:50:
6c:0b:a7:fb:e7:0e:74:dd:5c:96:40:4f:f3:2e:dc:5a:70:4f:
a3:8c:e6:75:4d:f9:5b:99:8b:ea:e4:42:0c:3a:0f:b1:5e:38:
50:fb:e6:6a:98:e1:16:7e:94:2c:ec:14:04:f3:32:0b:18:40:
66:cc:e4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:41:55 2026 by rpki-client