Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
File: L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json)
Hash identifier: 2AM7OS5gAR2Q06WxNKfcYevvq0M8sUpDHVHCRn5e5oQ=
Subject key identifier: 31:AC:5F:24:C3:A0:A5:62:6E:CF:77:DB:33:B3:FF:37:BB:FC:03:47
Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
Certificate issuer: /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Certificate serial: 019DA3E69225714920FC5D65C06186522218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 04:01:30 +0000
Manifest this update: Sun 19 Apr 2026 04:01:30 +0000
Manifest next update: Mon 20 Apr 2026 04:01:30 +0000
Files and hashes: 1: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: 0fOsVVbAyVNdgEKTXGqbsXgiAqw9g0dBCotGvIrT4eM=)
2: rQp0KtrZ2vEnGo7a2SDmUAvFVx4.roa (hash: uy4FLHEMk8dBagqU7F42mpSaD+FcR8r9kkARIXcPG1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:92:25:71:49:20:fc:5d:65:c0:61:86:52:22:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Validity
Not Before: Apr 19 04:01:30 2026 GMT
Not After : Apr 20 04:01:30 2026 GMT
Subject: CN=31ac5f24c3a0a5626ecf77db33b3ff37bbfc0347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:c7:64:5a:a4:29:3c:3d:18:c0:40:fc:1f:
46:6c:bd:aa:f8:ef:17:80:3c:f8:35:48:57:e3:c1:
14:62:98:f6:f2:f3:33:62:34:71:ea:27:fa:8e:43:
9b:cd:17:4b:6e:01:65:18:b2:41:fb:32:d1:1c:24:
4c:2d:7b:ef:ff:52:ee:7c:fb:c1:31:c9:9e:d5:a4:
e7:2a:e6:d8:82:2b:d1:de:81:7b:8b:db:2b:1e:1c:
90:6b:67:43:27:42:21:ed:e9:d0:ab:f3:81:56:d4:
4d:47:66:1a:93:6e:a1:2d:ed:65:a2:f7:61:52:6b:
d3:bd:bf:36:b0:b7:8c:87:29:ef:9b:3e:8b:6f:e2:
9f:fc:bf:59:01:38:3f:2f:bc:9a:79:c4:5b:b7:74:
d7:b6:04:7f:a1:19:65:0c:6d:62:cb:2e:a0:75:94:
81:38:27:fe:e9:bd:2e:d2:5d:65:0d:58:cc:3a:51:
dc:c1:5d:5a:92:e1:71:fb:6b:10:e5:0c:04:8b:d0:
3f:f6:f8:98:c3:cf:43:e9:72:0b:2c:a4:ec:98:cf:
3d:49:44:57:5f:ac:bf:e1:33:b2:ef:ba:7b:be:1c:
34:d4:25:35:d7:01:06:5e:bf:fd:fa:45:a9:95:2e:
fb:67:98:55:a9:a2:76:79:cb:38:8f:8b:0a:43:8d:
03:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AC:5F:24:C3:A0:A5:62:6E:CF:77:DB:33:B3:FF:37:BB:FC:03:47
X509v3 Authority Key Identifier:
keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e7:66:dd:11:bb:02:2b:94:70:bf:64:9b:38:c9:e0:3d:f9:
ea:28:c7:db:1a:6c:74:59:9d:ff:ff:ef:1f:ee:2d:58:23:c9:
9f:a4:85:a3:a2:18:38:04:30:b3:0a:83:da:5d:80:1b:1a:ed:
82:f3:78:c2:f8:b1:e8:94:04:73:7f:44:1e:1b:61:43:fe:a3:
2b:b2:d6:0b:e1:c5:c9:de:fa:62:8b:1d:bc:ae:be:70:a9:c6:
27:d8:83:c9:77:98:0e:72:5a:2b:d4:6f:ea:23:c2:64:58:1c:
ac:2d:54:9d:31:6d:9c:4a:f8:38:95:31:bf:40:18:f8:2d:8c:
e8:85:39:cb:cc:98:5c:5e:c2:b0:bc:89:96:2d:cc:19:bc:07:
35:70:8a:f8:32:b4:53:aa:91:c0:10:fc:52:2a:d2:2e:cf:1b:
ae:d3:b4:8d:3b:77:54:f0:17:91:12:60:ee:62:04:83:07:72:
fa:e5:e3:30:fc:3e:b0:7d:ee:a3:10:45:f0:61:4f:4e:ee:3a:
4d:ec:68:b0:f8:15:93:84:a0:0a:10:33:91:a3:35:37:31:da:
71:86:a7:af:19:2d:72:74:36:0a:5f:d4:73:19:26:e0:4c:1e:
0e:f4:63:ef:ed:9f:27:96:1e:47:6e:dd:bd:62:5c:2a:03:9f:
0f:dd:16:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:51 2026 by rpki-client