Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
File: q8Legg4C88P4bluMnEndxJMlEj8.mft (raw, json)
Hash identifier: a5N70zpAKcmuZTb8YsYJiSrSN01Aozf74NIU5zRCP6Q=
Subject key identifier: E4:EB:12:D6:E9:82:DD:AA:AE:23:91:36:C5:57:F4:22:FA:49:6C:39
Authority key identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
Certificate issuer: /CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Certificate serial: 019DA48A5534E95B77ACAC2119C1AB90145F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 07:00:22 +0000
Manifest this update: Sun 19 Apr 2026 07:00:22 +0000
Manifest next update: Mon 20 Apr 2026 07:00:22 +0000
Files and hashes: 1: WIk_614l7j76lNt4fSXO-ozoUZ8.roa (hash: xKI6sYZCOkO3AbE0x/y4vnowWaer7MuoYMEigmVZOYg=)
2: q8Legg4C88P4bluMnEndxJMlEj8.crl (hash: ZVEeksNoJ0/faEtR5rMgPDLWc2BN1at2ex0RhTvH274=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:55:34:e9:5b:77:ac:ac:21:19:c1:ab:90:14:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Validity
Not Before: Apr 19 07:00:22 2026 GMT
Not After : Apr 20 07:00:22 2026 GMT
Subject: CN=e4eb12d6e982ddaaae239136c557f422fa496c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0a:13:b3:a8:7a:42:aa:f7:09:79:7d:d0:21:
0a:5d:cf:34:fd:6c:80:40:48:c9:af:5d:2f:f8:a9:
ee:ae:38:ee:2c:7d:93:69:f6:2a:cd:85:de:12:6e:
d4:d5:23:53:01:7f:3d:1f:bc:dc:d4:5c:8b:70:aa:
73:15:bc:0e:da:9e:b8:54:21:94:ac:89:bb:34:f6:
34:1c:a8:37:fc:a7:e2:c9:d0:32:e9:df:10:ad:df:
b5:b3:12:63:3c:d7:48:cb:6c:6f:c0:fe:23:9d:81:
7d:74:5b:71:ab:64:d1:d1:2c:85:54:d5:b8:b8:16:
4d:b7:c0:04:72:1e:3e:44:06:96:d4:79:0b:8f:66:
39:a0:00:21:a0:6c:9a:9d:36:b1:98:3a:7e:db:3a:
1a:5a:e4:b0:bf:62:da:f6:5d:bf:79:26:0e:28:86:
af:28:31:e6:ba:57:b2:a7:8e:69:9b:ec:51:68:82:
d4:3b:fb:b3:0d:b6:1e:23:45:27:1e:d8:5a:d7:68:
b5:41:94:38:89:6c:46:e3:19:18:e7:49:80:4b:30:
d8:e3:3e:07:bc:7d:ef:9b:02:93:87:57:4c:ac:d6:
dc:d6:fe:79:96:a3:b8:72:f3:2c:5b:05:d4:4d:82:
8d:65:2e:e5:bf:57:ad:cb:47:a6:a4:a8:32:c4:66:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EB:12:D6:E9:82:DD:AA:AE:23:91:36:C5:57:F4:22:FA:49:6C:39
X509v3 Authority Key Identifier:
keyid:AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4e:96:d4:2a:13:06:86:a5:d6:86:2d:8a:db:4e:f3:1c:d1:
24:d4:16:56:1f:95:fc:f3:43:00:e0:da:a3:84:90:0c:46:f3:
df:6c:7a:1d:3f:1c:82:62:e1:3a:4e:58:bd:20:e2:49:3c:2a:
fb:c5:88:ec:df:c2:f1:57:b6:5a:3a:e6:a3:bc:70:ec:5b:1e:
44:18:e8:73:ac:dc:8c:b6:64:e6:cb:25:38:97:66:5c:8e:4b:
49:69:ec:6d:56:16:de:50:56:d2:d5:93:24:e1:e9:03:9f:87:
1b:96:4e:34:a6:1e:17:d5:e2:cc:96:37:71:d4:b0:62:8e:bb:
55:ef:da:5a:3f:75:37:9f:32:d1:82:e6:85:90:d2:f5:6c:ae:
07:dc:2c:80:ca:30:51:ae:e1:6e:8b:d8:06:7b:93:29:ea:e9:
b6:55:d3:d3:25:20:1d:62:ba:18:a7:cd:7d:6a:31:61:24:f6:
bd:a1:70:92:16:b5:1e:c0:42:ca:da:a2:72:6a:6c:87:72:78:
f1:cd:89:8a:1c:84:31:11:b0:ad:4b:5a:3a:c7:b4:ce:c3:29:
2b:5c:7b:e4:a6:40:10:fe:d4:a1:2a:a4:cc:65:95:e0:08:1a:
58:78:95:52:08:7e:5a:49:8a:e8:8e:8c:fb:c5:3b:fd:2c:e4:
58:ed:d4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:00 2026 by rpki-client