Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
File: lRZkUh1QOVkhL1WypZrsbSB7Cig.mft (raw, json)
Hash identifier: UWyZL+q65e47r0/+KY7vi/+KJw6bvQZPozH7b31ibbA=
Subject key identifier: 65:DC:DC:26:81:23:C2:D6:1C:EE:22:F2:E9:B6:10:86:A3:1F:D6:39
Authority key identifier: 95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
Certificate issuer: /CN=951664521d503959212f55b2a59aec6d207b0a28
Certificate serial: 019DA378BAAA8E23DD32B25B16F88D821CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 02:01:31 +0000
Manifest this update: Sun 19 Apr 2026 02:01:31 +0000
Manifest next update: Mon 20 Apr 2026 02:01:31 +0000
Files and hashes: 1: COjqaYnsYuyAQnOfRow1LSaHRvU.roa (hash: OG1wPC551mpOORC3dI+5e8bO42vNDHRLBsbdrz/BicA=)
2: lRZkUh1QOVkhL1WypZrsbSB7Cig.crl (hash: OSJrIWFZMXFc0beT6a+W7+w2Y0fBTb7u8tRdUqFPJYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:ba:aa:8e:23:dd:32:b2:5b:16:f8:8d:82:1c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951664521d503959212f55b2a59aec6d207b0a28
Validity
Not Before: Apr 19 02:01:31 2026 GMT
Not After : Apr 20 02:01:31 2026 GMT
Subject: CN=65dcdc268123c2d61cee22f2e9b61086a31fd639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:09:e8:b3:f0:53:e9:97:b9:39:84:89:b8:fb:
67:ee:fe:d8:47:e5:4d:43:10:d0:fd:b9:6e:aa:85:
e7:0f:ec:a0:fc:ad:88:a7:63:75:2c:8b:8d:0a:5d:
5e:99:2d:8b:5f:51:67:86:c1:16:be:e4:eb:a6:67:
81:73:07:36:e0:e4:76:20:11:7c:39:f0:1c:ba:91:
e0:31:8a:cd:52:96:05:4c:63:13:48:a5:f9:3c:25:
6a:66:40:10:05:33:86:66:b8:20:3c:a6:65:53:07:
d2:6e:01:f0:be:13:33:36:a3:ba:42:66:b5:16:57:
0b:2b:19:a6:88:34:f1:9c:e0:25:c7:67:33:e7:50:
cd:6e:ec:f7:9a:34:d4:3e:07:0e:22:a5:15:92:8a:
21:0d:e5:1a:3e:29:02:31:2c:93:68:ca:74:34:84:
2d:9e:af:62:48:80:12:f8:17:05:ce:a1:60:28:87:
5a:5f:b4:86:ba:93:3c:f3:4c:01:57:24:66:27:5f:
6f:c4:33:71:fc:33:62:ba:11:8d:d9:6e:8c:0d:e3:
11:40:91:10:81:1f:bf:3b:2a:b1:dc:79:23:9c:98:
ed:31:ae:8d:df:a2:e4:5e:e0:b4:d5:c2:3c:71:50:
bf:45:c3:1f:e9:15:94:ff:79:3f:6c:c0:45:2b:80:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DC:DC:26:81:23:C2:D6:1C:EE:22:F2:E9:B6:10:86:A3:1F:D6:39
X509v3 Authority Key Identifier:
keyid:95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f7:19:a9:24:71:65:e1:20:1c:05:4c:45:a0:eb:a3:31:8b:
7a:76:23:25:ef:44:45:d3:08:87:1f:57:08:27:10:c9:29:b9:
2c:9e:5d:74:c6:1f:25:80:4d:2f:9e:93:66:82:c5:2a:1e:12:
ab:5a:19:3b:99:35:d0:44:cd:df:ac:9e:98:a2:a3:ed:75:5c:
1d:7e:bd:c8:1c:1a:b5:45:58:f8:f5:b5:8e:19:2c:ec:51:35:
96:67:1a:6e:2d:9b:f4:e5:8f:8a:28:d0:7a:d9:ad:3b:79:38:
db:73:ec:d9:b4:c8:3b:6f:14:c6:75:62:8a:09:97:10:ea:c5:
19:e2:ac:34:80:8d:41:35:db:78:9a:b8:28:6c:11:fb:57:6a:
74:44:12:6f:5d:df:6a:f5:47:1a:2f:97:34:13:92:60:31:0e:
cc:14:84:4a:49:11:c2:41:78:c2:44:19:32:c4:14:3c:6f:f0:
d2:7c:46:ab:38:b9:92:14:55:b4:25:00:66:dd:cb:3d:84:fe:
66:66:4e:6e:d8:0d:21:87:81:2e:9f:5e:9e:5f:cc:78:1b:fd:
e3:f7:e7:ae:0a:50:b6:79:40:6e:6f:22:aa:81:d9:f8:a6:fb:
d7:b0:1e:52:d8:fa:4e:0a:6c:3e:b0:70:8b:ab:c4:a8:33:61:
ae:df:7b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:15 2026 by rpki-client