Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier: cLTjzYJ9wTULmxQmDkirLnVzPnZl3NCrAt+6hbyMssQ=
Subject key identifier: 54:AF:C1:32:E5:A1:95:59:F0:7A:EC:66:C8:C3:F1:19:7B:19:54:2C
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 019D9C63AF6DA4321EB723EF2DA4D50D745E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number: 18D6
Signing time: Fri 17 Apr 2026 17:01:11 +0000
Manifest this update: Fri 17 Apr 2026 17:01:11 +0000
Manifest next update: Sat 18 Apr 2026 17:01:11 +0000
Files and hashes: 1: 9l4eTxQiJdfwsUpte57Ojwmqkt8.roa (hash: emeHHUrFvsDMnCrOVZjdq3feYW1b8D0yrHBj07czvhI=)
2: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: w0JNawoDljuRWTiw/Q4q4y4owzy5y3ATpjlWadsKsbg=)
3: cAVdSGytSyux4FQsZuWB3TVoUN8.roa (hash: RAtVEud/Ywx68w73bvy2E2uTPg4lltVhihmdYUF5drI=)
4: grtZ88A4ab4V_GiK5bfawAFeBik.roa (hash: Gok5HzoG6ye09AxYK0QJqUuAYdVlePP8eXldni6wygU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:af:6d:a4:32:1e:b7:23:ef:2d:a4:d5:0d:74:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Apr 17 17:01:11 2026 GMT
Not After : Apr 18 17:01:11 2026 GMT
Subject: CN=54afc132e5a19559f07aec66c8c3f1197b19542c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:25:17:95:d3:3c:92:3e:00:f6:fc:49:b0:d8:
76:20:2a:a6:21:09:3e:f8:1b:9d:22:3c:d1:41:e5:
22:5f:a6:50:96:f3:62:88:9d:3e:f4:ab:d2:77:a6:
7d:73:4e:22:f6:b7:7d:5a:11:1f:c3:42:30:b1:9d:
35:6e:9e:68:9e:0c:6f:ab:dc:f7:4b:17:f3:be:c9:
ac:be:cf:ae:df:7f:a6:a5:ff:c8:08:ba:4c:f9:a7:
7a:62:07:1c:a0:e8:0d:61:c1:aa:f9:78:12:3a:ef:
c5:30:3e:2b:0d:8b:89:25:9f:7f:bb:6d:70:f8:27:
d6:8f:8a:b9:eb:43:e6:46:c3:be:0d:09:ed:45:d8:
14:3c:00:1f:0a:b3:b8:ec:20:21:15:4f:ef:5d:7a:
26:ab:28:d6:1b:a9:ef:7b:85:da:55:55:4f:a1:1d:
57:f2:3a:b1:8f:ec:36:a8:55:0e:29:35:87:44:92:
80:a0:60:a3:31:49:d7:e8:30:1b:33:21:69:fb:5c:
03:11:60:63:90:25:4f:79:db:ff:ae:b8:32:07:25:
23:a9:54:57:31:a2:8b:2a:f5:a8:eb:40:06:b5:bb:
98:d1:26:49:6a:90:19:f0:fb:65:bf:18:31:1c:2f:
4d:07:46:64:1c:9e:36:86:8b:2c:c6:29:43:51:af:
b4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AF:C1:32:E5:A1:95:59:F0:7A:EC:66:C8:C3:F1:19:7B:19:54:2C
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:2f:f2:3f:94:7b:48:fe:96:9c:75:90:63:83:5c:65:97:14:
1f:33:ee:7b:94:a4:dd:51:43:13:8c:76:ba:15:ad:15:e1:a9:
17:89:a3:be:c7:93:4c:bb:95:01:de:a6:c6:6f:72:ac:9c:14:
ef:f6:f1:6a:97:1d:f0:c7:80:d1:0a:43:84:a6:c2:7e:c1:9d:
49:1f:5e:cf:61:0c:f1:68:ea:8a:df:05:47:42:81:95:4e:7c:
6c:74:83:34:ae:de:df:9d:10:b5:bb:37:ab:d3:f2:7d:95:30:
6e:18:b5:fb:81:63:ff:14:f2:18:74:f5:6a:69:cb:65:01:5b:
3a:75:96:f6:61:92:ee:4c:9f:8f:99:d8:11:2d:3e:f0:9d:46:
47:a4:e7:94:0e:12:d0:15:1f:1d:56:db:c9:a2:35:d6:6e:ec:
0e:15:02:ac:06:84:fb:19:e6:8b:ce:32:94:28:b1:55:ad:fe:
24:8c:fd:53:ec:bd:be:3c:d8:74:b4:e5:de:4b:59:69:19:7a:
0f:5c:7e:32:7b:3f:8d:39:cf:15:09:36:55:98:eb:fd:45:0f:
9e:fe:ec:cd:89:c6:e6:40:72:00:ed:4d:ca:44:f4:1a:c1:a9:
22:bc:7d:06:ac:d1:1a:e9:7c:db:33:dd:62:fd:d3:04:55:8a:
c7:e6:e2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:23:33 2026 by rpki-client