Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: 0W/bJK3x5Kt96Z0ULublybTDsqMqvOJxlgWhcM/XCdw=
Subject key identifier: B7:8C:14:DA:58:54:89:76:EA:BE:A5:80:71:11:D3:12:AC:32:0C:21
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 019D98BDDBF8737B9B1B98C80525E92A57C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:01:12 +0000
Manifest this update: Fri 17 Apr 2026 00:01:12 +0000
Manifest next update: Sat 18 Apr 2026 00:01:12 +0000
Files and hashes: 1: LWvq7pLhMy-PN5vUVHp1gTDrkpg.roa (hash: tizgLykrZfe0HsgjC7gUJhP13B/6k81gtOYYeh2hEWo=)
2: N3Nyt4Ek1PnmJMu7E3VIjuLxr70.roa (hash: Sn50iCRfjS3DuTRB7OzC5uLuhGadJioDHeYI0k2FZBI=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: FgLEXbmxjF6cQX67gA8rBsjIQNJP7ZlA4C3kLFK9qxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:db:f8:73:7b:9b:1b:98:c8:05:25:e9:2a:57:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Apr 17 00:01:12 2026 GMT
Not After : Apr 18 00:01:12 2026 GMT
Subject: CN=b78c14da58548976eabea5807111d312ac320c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:77:c0:76:7c:35:78:c5:28:8c:e9:2b:43:
d9:25:ae:61:fe:f3:c9:9f:6a:3d:1d:b0:d5:a8:25:
40:f5:63:ba:7a:fd:cf:62:0e:9d:8a:c2:38:a7:1a:
c0:43:41:2e:a1:f3:ee:9e:e0:71:23:0b:32:32:81:
f2:f5:fd:66:58:ec:d7:23:76:87:b0:22:a7:ee:0d:
40:57:c0:58:4b:95:69:de:c5:0a:f5:02:37:6a:fe:
da:73:ed:df:9f:ac:42:bf:83:40:4d:a6:10:37:76:
7f:80:3e:66:08:fa:5f:80:01:37:3b:b2:ba:8a:d7:
18:8f:26:f2:ba:4c:35:4d:18:c8:75:b9:fc:4d:d7:
e6:7a:74:d6:06:df:75:39:44:9d:bb:97:43:3f:2a:
ca:b1:6e:f7:87:68:6e:74:6a:0f:03:d7:68:25:4c:
17:90:39:68:4e:a1:b3:f9:d6:f5:6a:73:62:49:da:
64:54:7e:f8:ee:b4:5c:da:e2:c2:a0:ea:2b:bb:52:
4a:04:aa:f2:9f:8b:80:b3:af:72:e9:a6:6d:c4:9f:
59:f8:2a:8a:1e:ad:59:47:8b:41:aa:a2:42:18:00:
c4:c8:ea:91:1f:ff:93:e3:12:84:39:89:d3:07:5f:
72:ad:4e:e9:be:78:07:62:c4:e5:4d:b0:81:4f:e5:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8C:14:DA:58:54:89:76:EA:BE:A5:80:71:11:D3:12:AC:32:0C:21
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1f:94:c9:35:a5:4e:19:da:d9:f2:e3:13:22:fb:a6:c9:f9:
83:bf:12:a2:9a:f1:80:b8:96:fb:c8:69:3f:ab:28:2b:a5:86:
b2:13:78:39:6a:49:57:66:f3:02:4c:c1:d0:f7:83:ac:09:86:
da:ad:56:eb:2e:f8:0b:dd:50:00:67:00:df:10:b7:f0:2d:cf:
d0:83:e0:b8:32:f6:4e:4e:95:cf:14:c4:57:0b:ca:72:da:d0:
86:53:86:b9:35:8e:b1:31:99:0f:2a:72:24:18:ef:01:9c:16:
98:8b:55:b2:1d:55:f2:0b:d5:26:7e:1a:27:62:62:d0:6a:53:
46:1c:80:0d:c0:c0:80:fd:ca:dd:87:18:a1:b1:e7:b8:cd:72:
f6:b5:96:35:ca:90:ff:ea:d5:e2:ca:d4:63:43:7b:1a:8f:d1:
c2:8c:db:d9:85:bd:0c:c9:0b:a4:9e:85:48:43:b0:14:fc:12:
3d:05:9f:16:a2:cd:13:db:db:20:7e:61:2f:52:f8:05:c9:69:
06:ea:ac:fb:3a:90:37:79:c4:ea:88:7b:80:b9:5b:20:b7:fc:
68:a0:d5:b7:3d:b3:df:69:92:ff:b0:7d:03:82:0f:8c:3c:0d:
00:1f:5a:3e:d0:dc:f1:3d:cd:be:e3:e3:21:d9:ee:ce:4a:18:
09:a4:5a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:03 2026 by rpki-client