Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
File: lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft (raw, json)
Hash identifier: xSi81Eo43hBz8cTEcxAKmt0FZlzb+aAuAyGJvIv3/90=
Subject key identifier: 3D:DD:E7:56:B6:31:7C:B2:71:EE:B5:FA:8D:D1:0A:45:1B:F7:21:80
Authority key identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
Certificate issuer: /CN=94472e859957355da5ddd13496d70d70773491f9
Certificate serial: 019DA30A36706FCADC5A904F72FA0B2862FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
Manifest number: 11E9
Signing time: Sun 19 Apr 2026 00:00:48 +0000
Manifest this update: Sun 19 Apr 2026 00:00:48 +0000
Manifest next update: Mon 20 Apr 2026 00:00:48 +0000
Files and hashes: 1: lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl (hash: /2JireC9AZWATZrS4HPkDnUYiNJxqiE76WrWnb4YUkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:36:70:6f:ca:dc:5a:90:4f:72:fa:0b:28:62:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94472e859957355da5ddd13496d70d70773491f9
Validity
Not Before: Apr 19 00:00:48 2026 GMT
Not After : Apr 20 00:00:48 2026 GMT
Subject: CN=3ddde756b6317cb271eeb5fa8dd10a451bf72180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fb:39:84:ba:84:c9:2f:99:23:72:41:3f:46:
a3:9f:57:fa:09:7d:91:90:8f:ba:b5:87:3d:a3:61:
a3:90:e5:4d:5a:52:9b:72:6e:28:ca:9d:ea:3f:ee:
36:cd:0c:ae:5b:05:d3:55:8d:05:f3:45:c4:e3:ea:
70:f6:a7:c5:07:f1:5d:cc:3b:c0:c9:25:10:19:30:
45:09:25:b1:e8:b1:43:7f:41:6e:be:f3:fe:b7:2a:
d4:75:3f:a2:a5:48:94:20:8b:aa:60:b6:3b:ae:99:
fe:ac:e1:6c:9b:59:6f:bb:1c:a3:92:d7:09:8b:24:
b9:6e:5c:9e:e7:81:a9:75:11:71:4a:81:d5:cf:97:
2c:55:d9:88:0f:41:27:02:0f:89:dd:56:48:f3:52:
a6:51:7e:fc:d2:9d:b4:e2:cf:4d:d3:1f:96:a7:7b:
cb:c6:53:82:76:6b:f5:0b:3b:79:60:8a:a0:48:e5:
c1:b9:7d:0d:58:59:97:ac:35:bb:39:7e:9a:f7:9f:
85:78:6a:22:86:d2:71:72:9b:4b:6d:b5:39:fd:df:
96:43:1b:b4:a4:17:e4:ae:c7:a1:a2:d1:4a:a7:ce:
d6:28:d4:7a:b6:21:22:ac:2d:f7:d4:35:79:f0:21:
07:e7:ae:44:97:25:de:87:b5:a1:ea:23:92:d4:ea:
d4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DD:E7:56:B6:31:7C:B2:71:EE:B5:FA:8D:D1:0A:45:1B:F7:21:80
X509v3 Authority Key Identifier:
keyid:94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fe:de:16:72:d0:4b:8a:8e:b1:30:b7:9c:05:5e:ec:6e:13:
68:24:4b:1c:66:2f:ec:7b:67:e9:a2:d9:03:46:6c:c8:33:38:
04:d3:22:63:50:6e:2d:16:aa:c6:70:bb:f8:09:9c:a1:ce:8b:
5d:c0:08:f2:25:51:cb:9f:9e:fb:5e:0c:3f:fe:dd:a9:e6:b6:
46:d8:fd:8b:32:02:d5:ad:c3:bd:ae:14:69:16:eb:76:6b:6a:
d9:21:e1:f9:f4:c8:fd:a4:a9:fe:be:f9:71:bc:e6:be:a8:42:
86:2d:3f:c4:70:02:09:a4:00:21:6f:49:24:cf:c7:09:5e:c6:
19:07:b8:be:4d:f3:87:dc:65:2e:94:fe:1b:be:ca:3b:7a:a1:
36:2f:74:2d:11:86:3a:37:17:d9:db:94:23:d1:d2:f2:2c:a8:
26:34:a9:d8:b5:f8:8e:d8:8c:3c:74:39:e8:b1:3f:1f:be:f8:
0a:4b:f2:eb:d5:85:fd:f0:2e:b4:c2:2c:ce:fd:8f:88:41:8e:
96:95:e9:3c:2a:4f:79:01:11:f8:13:5e:bd:8f:27:e7:99:72:
5d:a8:b8:18:5c:3c:13:fe:9c:26:e3:3e:59:c4:11:6d:a6:a1:
3c:1d:5a:dd:eb:1c:6c:7d:b9:f8:40:96:77:8a:09:d4:0e:40:
a2:c4:62:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:00:53 2026 by rpki-client