Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: HlK8dM6ZMZRNo8w7zZjOlsJ9qqei4eyyOxfadeS1DxQ=
Subject key identifier: CC:0D:9D:7E:A7:E4:A8:51:D4:CC:A2:93:CE:D9:75:2B:58:39:34:7C
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 019D99994B275189DB81C7CD07FC8F967F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 18D2
Signing time: Fri 17 Apr 2026 04:00:53 +0000
Manifest this update: Fri 17 Apr 2026 04:00:53 +0000
Manifest next update: Sat 18 Apr 2026 04:00:53 +0000
Files and hashes: 1: 3rInZjWK_OrArZZOM2bV6e4iorQ.roa (hash: zuQXjoQYRWkqfCz+15TulpJjZN3HgFJdjfwCUHW+tCo=)
2: Iy-fgALALz7shq-7VeACuB3oDEw.roa (hash: /ZLR7Dr5uoDlsEeoz+iCL0uuXTI/ziU5PN5IasP3K4Y=)
3: JFsH7hJEf4fR68_Rwwa85U3cMZU.roa (hash: zN27rSTTGBjpRviupdHHxSulEg0HbXzHmYCyhdHFOcw=)
4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: 30iFpm4Wh6KWYjGejOsN0dWSO3zaKc4l7gOe3XAHK3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:4b:27:51:89:db:81:c7:cd:07:fc:8f:96:7f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Apr 17 04:00:53 2026 GMT
Not After : Apr 18 04:00:53 2026 GMT
Subject: CN=cc0d9d7ea7e4a851d4cca293ced9752b5839347c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:51:65:b1:3b:65:c6:9a:cc:da:98:c3:04:f3:
4f:43:3e:ee:87:ba:c0:56:ae:09:33:9f:00:1c:87:
39:cc:2d:c5:29:5d:24:52:75:ca:ee:fc:01:9f:35:
fd:0f:19:1c:8d:98:0a:8b:6e:b1:bd:2c:c7:2d:f9:
ce:80:e1:3e:b3:01:77:a6:82:ae:79:a2:1c:03:b8:
4e:dc:64:fd:c3:b1:69:a6:1e:d7:5f:1c:e3:8f:72:
79:ac:e4:fd:f9:90:c0:46:75:87:ba:77:8f:25:90:
23:59:3a:05:ff:da:d7:e2:ba:12:45:b4:2f:8d:bd:
aa:a1:64:61:32:d4:69:ed:bc:ed:c7:9d:42:4d:68:
e6:e7:62:1d:4b:ae:d6:bc:e8:6d:ef:ee:30:c4:b2:
ca:a6:b7:79:f7:34:b8:2c:ec:91:16:6b:46:61:20:
b1:ad:1f:7d:85:4d:74:81:bc:81:d6:4f:a7:f8:fd:
4d:d5:11:66:ef:70:c0:3a:e7:db:d2:40:cc:d3:a9:
5e:90:12:7b:d5:b2:5b:d9:77:97:72:de:eb:aa:49:
b1:9c:7f:ff:b0:7a:3d:d5:08:ba:a8:ae:32:e7:82:
b8:55:cc:89:e4:96:e8:4d:c5:8c:7b:93:3b:18:2d:
c9:6c:40:8c:f5:e8:eb:c5:a9:41:1a:ca:39:a6:8c:
94:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0D:9D:7E:A7:E4:A8:51:D4:CC:A2:93:CE:D9:75:2B:58:39:34:7C
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a3:21:2e:fa:18:fb:2f:e7:d2:04:00:ba:69:a5:19:e1:aa:
c0:cf:ff:dc:e2:45:55:ad:12:51:c3:01:46:6b:aa:27:5b:0d:
58:72:2a:4b:1d:72:13:65:cc:7a:ab:80:ae:60:1d:c3:4b:2d:
51:89:67:ba:75:cd:16:be:42:65:c4:f2:28:32:1a:fb:da:27:
d6:f6:97:57:b6:c5:ab:a9:56:7c:bf:8f:53:43:90:ef:e0:d2:
21:a1:19:46:ce:ee:80:4a:02:64:c2:ca:e9:e1:e9:15:ce:29:
19:76:f3:2a:a0:17:68:a7:ed:68:f8:2a:ea:d7:42:10:a1:40:
26:21:01:5d:51:fb:ca:be:27:c8:b6:1d:f6:be:bd:0f:b5:a1:
07:d4:2c:9b:ce:39:2f:55:be:e1:fb:67:a1:ba:53:50:f3:11:
2f:14:b6:ae:80:b9:d4:f3:41:ce:02:c9:87:b8:58:26:d2:36:
2d:6c:cd:81:7b:34:97:47:aa:ed:c9:07:3c:2d:e4:90:e2:9f:
c6:f1:1a:59:05:d1:36:88:6a:7e:31:7d:32:15:bc:1e:ea:38:
9f:04:4d:af:9e:a6:9f:11:93:1e:65:0c:8a:3f:5b:69:0e:83:
46:d2:32:6e:38:e8:df:3d:e9:4a:be:32:8d:d7:1b:c1:66:b2:
1b:cb:5e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:44 2026 by rpki-client