Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
File: LViUkjuwAqQ0EogQYH37UmciAE8.mft (raw, json)
Hash identifier: TBNVV1vAUTI2Ccxrp/PUt8TmQhLWSOeyOW8+whl1VJk=
Subject key identifier: D5:F5:33:A4:96:2B:FC:08:E6:D9:11:87:22:FA:E5:17:65:F3:30:14
Authority key identifier: 2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F
Certificate issuer: /CN=2d5894923bb002a434128810607dfb526722004f
Certificate serial: 019D9BF52EA9A79059571FAFFF0BDEB96E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 15:00:29 +0000
Manifest this update: Fri 17 Apr 2026 15:00:29 +0000
Manifest next update: Sat 18 Apr 2026 15:00:29 +0000
Files and hashes: 1: F8ssCXzm5DlQ97WN2xVb9wJjA_g.roa (hash: RedzK3Q4KVLEhYDQGEu2AFOE8F+deCMqCtqno/fcLrc=)
2: LViUkjuwAqQ0EogQYH37UmciAE8.crl (hash: Y2wGcM5m+7tWl52CJOB/f0Wbj05SyUUJ4o5rGprbOoI=)
3: Vdh3_1j9N9qxue8CD8c8TlPKZXA.roa (hash: DKeEzZKgIArxoLoLfWTEY4XadPn2TLkkEnTA5gJhx7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:2e:a9:a7:90:59:57:1f:af:ff:0b:de:b9:6e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5894923bb002a434128810607dfb526722004f
Validity
Not Before: Apr 17 15:00:29 2026 GMT
Not After : Apr 18 15:00:29 2026 GMT
Subject: CN=d5f533a4962bfc08e6d9118722fae51765f33014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6f:8e:65:89:82:72:5f:62:62:7f:11:29:82:
d6:0c:c9:30:bd:7a:a6:13:f1:7d:dc:ad:09:a6:4e:
ab:b8:0e:d3:7e:32:71:6a:f9:94:f0:8d:5d:75:ce:
2d:e1:6a:30:5d:60:26:d8:a3:e3:5f:da:21:97:44:
7f:65:3a:45:0a:34:68:70:7b:11:45:ba:18:42:eb:
ef:8e:32:1b:4c:ba:79:69:48:57:8c:e3:cf:fc:11:
b7:b5:84:f1:60:35:f6:5a:59:3c:09:16:08:73:6c:
9f:e1:2d:47:96:b4:62:0e:8e:75:a4:d3:15:2d:f6:
47:c9:2e:77:05:11:b6:fe:05:1a:d0:b4:fd:bf:f5:
85:74:5d:9f:1f:13:57:df:0a:15:46:a9:bd:b9:ea:
bf:82:7f:7b:c1:cd:d3:d5:5b:d1:5f:3c:08:98:ea:
35:32:bd:76:dc:08:a0:41:03:4b:eb:f8:d4:9b:5c:
36:a7:c9:67:67:b0:b5:4d:be:78:93:cb:e5:be:12:
ea:cf:14:33:11:3f:8c:17:3b:a3:ea:04:b1:67:7f:
b6:32:13:30:60:29:37:25:25:04:8a:8d:bf:1e:fa:
42:9c:5d:1c:60:1c:1d:5c:17:ae:3a:00:e1:98:7b:
ac:4a:5a:8e:07:91:24:36:0b:a9:aa:c9:5c:f7:10:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F5:33:A4:96:2B:FC:08:E6:D9:11:87:22:FA:E5:17:65:F3:30:14
X509v3 Authority Key Identifier:
keyid:2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f2:ba:c3:0f:a3:46:95:a8:f6:58:83:15:c9:29:e7:a1:e7:
44:5e:b0:c2:97:7d:e5:07:38:f4:ad:ba:7a:8e:1e:46:b6:e6:
25:7b:58:b4:5a:51:a2:b4:95:41:c7:34:91:67:5f:9a:65:c3:
a9:27:60:1d:5c:39:b3:80:50:13:11:c4:e6:f6:0b:56:ae:c1:
b6:20:6b:90:a7:d8:30:3d:c7:7e:9a:22:6e:23:07:a0:59:26:
6a:c1:b2:44:d4:f1:40:f9:e2:d8:24:bf:23:8c:6b:a3:a6:02:
bb:b9:fb:0f:b3:27:26:41:f1:30:ff:f6:28:03:9a:29:de:00:
4a:31:3d:8f:26:38:ba:85:09:3c:ec:6c:4b:4f:47:52:f4:d2:
50:94:ab:84:5a:69:a2:9d:b3:a0:22:9b:ad:c4:8d:eb:f6:f5:
68:49:a4:97:b4:03:ed:6d:ae:62:e9:f6:2a:e1:c2:2b:c7:13:
96:ce:d4:64:f4:1a:f0:6e:d4:59:df:f1:c1:55:63:c2:fa:0c:
d1:d6:b6:8b:83:e8:18:16:3e:fd:0a:f3:7f:3b:a6:59:c5:4d:
8c:fe:37:ec:ff:4d:c7:db:78:54:e5:6c:2d:94:72:d7:17:e1:
d6:d8:af:07:8c:e6:12:7b:de:9f:9a:6a:bd:80:bb:88:b2:04:
da:f9:d3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:42 2026 by rpki-client