Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
File: l0417CGA2uvRvz3URAOp4L_LVso.mft (raw, json)
Hash identifier: 1esBnXiBM/eBcPcGqDk0aasOpGqb/MNcnE2nU7nRtI4=
Subject key identifier: 49:D4:D4:FD:CA:23:6F:CC:27:C4:C1:29:88:6C:A0:99:DA:32:0F:37
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial: 019D99622DE6CCD34B40ACC1296D0ECC5A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
Manifest number: 0834
Signing time: Fri 17 Apr 2026 03:00:41 +0000
Manifest this update: Fri 17 Apr 2026 03:00:41 +0000
Manifest next update: Sat 18 Apr 2026 03:00:41 +0000
Files and hashes: 1: ktuOQpvhIVshzEh1AKVHwjETmDQ.roa (hash: RkFBt5jBdqM9V+vWsmvf1KhOIAy1CQTkom8d2viWOuc=)
2: l0417CGA2uvRvz3URAOp4L_LVso.crl (hash: 0tqT6Sm0UKd5jjq/UWVKTmp7ndh+E5PxqCrO/K1ux5Q=)
3: ly4jAghIqZcQUeWo_GsyRA8lugc.roa (hash: hPss/Kqk0zlga1lABVmDknuY7c7zTOu7Fb+2VoC/L1Y=)
4: o_HyBkikAR9w1apxuJDVKF2p-3Y.roa (hash: elrFF3wLFffPqJSdmbrmGaLjv6ONKW+nsnV6avvP20k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:2d:e6:cc:d3:4b:40:ac:c1:29:6d:0e:cc:5a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Validity
Not Before: Apr 17 03:00:41 2026 GMT
Not After : Apr 18 03:00:41 2026 GMT
Subject: CN=49d4d4fdca236fcc27c4c129886ca099da320f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:53:f3:0e:e5:09:68:88:68:63:89:db:31:b2:
f2:1c:d4:96:01:1b:36:99:a9:39:1b:7e:ae:c7:c0:
3f:6b:dd:c9:68:b3:74:f6:7a:d7:f9:43:4d:d2:a8:
42:1f:7e:f3:c0:05:64:ff:cd:a6:5c:9a:e5:9b:52:
3d:b1:6f:2c:e9:41:68:16:6c:40:b7:6c:4b:fe:d5:
e9:35:44:8b:8d:ad:75:77:be:4d:58:22:e1:18:2a:
6e:16:87:4e:6e:48:b1:99:fc:8d:cf:94:d1:25:ca:
01:6c:b3:a3:c0:ee:ab:10:63:e0:f9:e5:4d:7f:b2:
7b:e8:6a:4d:7e:28:7e:b4:fa:2f:e3:bd:3d:84:ba:
2b:5b:5a:db:55:13:1e:2c:7f:51:57:44:d9:a3:c2:
90:4c:b5:de:3f:f6:b7:36:c4:a9:c2:2b:0f:c3:bb:
48:10:22:1a:79:72:56:00:f8:c4:4c:ab:20:b0:63:
2e:71:ef:b6:8f:ae:a0:67:2d:4a:5e:69:49:eb:c9:
77:7d:19:69:56:70:fa:cb:86:c2:a0:cf:bc:dc:f9:
07:0a:32:a9:3c:85:aa:eb:31:05:28:cb:67:31:5a:
6a:2b:12:8a:0e:fb:66:56:18:f3:ca:31:25:c8:60:
05:6a:bd:9a:88:a4:82:e7:73:a6:35:d5:61:7e:4d:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D4:D4:FD:CA:23:6F:CC:27:C4:C1:29:88:6C:A0:99:DA:32:0F:37
X509v3 Authority Key Identifier:
keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a0:6c:6f:83:4e:8f:cc:7b:21:5e:50:6f:f1:f9:15:ff:21:
a3:92:d3:2a:86:ad:85:3c:eb:0a:e3:ef:c4:1b:da:a1:7e:7d:
41:d5:54:d8:57:df:90:a6:dd:a7:c5:35:c5:0a:dc:7b:1c:cb:
36:a7:e6:98:94:38:b9:bc:20:5e:24:c2:ed:83:f6:28:db:65:
24:90:27:99:2c:29:be:31:ee:be:db:ad:3d:5c:d4:6c:d9:80:
7a:d0:bd:4f:d4:e0:d3:72:3e:94:e2:a4:c3:da:57:97:11:fa:
c7:43:b8:f0:70:21:39:8a:6a:dc:ca:bd:bb:2f:6e:05:cb:17:
38:3e:95:03:05:19:91:90:35:62:9d:bc:a4:ec:f2:95:96:d5:
8d:38:b4:4e:b4:3e:6c:89:3f:ff:93:03:f3:09:b6:e9:46:30:
40:15:6c:34:c3:47:bc:0e:f9:4a:11:74:ba:e9:5d:dd:02:53:
2c:7a:15:e4:fe:2b:6f:87:bc:f7:f0:10:ba:94:6b:75:2e:dc:
fa:08:bf:b4:be:a4:55:96:c3:af:c9:23:83:e8:ee:47:c3:a5:
fe:7b:0c:86:02:e2:92:40:fc:64:49:65:39:fc:a9:32:ed:81:
02:08:b3:09:5c:5d:c9:2c:d6:71:60:40:30:89:50:1a:dd:b9:
67:74:71:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:17:40 2026 by rpki-client