Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: rkT4O+0ZVDFHPjxv2UEKn2fHvCYxKIIHju18O27IIYo=
Subject key identifier: 62:C1:65:E6:FA:17:79:E5:BB:18:35:E2:8B:77:1A:ED:27:F3:A7:53
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 019D98F44409498BDA4E051BFA5EEA9325CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 01:00:37 +0000
Manifest this update: Fri 17 Apr 2026 01:00:37 +0000
Manifest next update: Sat 18 Apr 2026 01:00:37 +0000
Files and hashes: 1: LSPYdHWOrzjzMpezGhhKeAopRDI.roa (hash: 6BFI+idpDJu59Bp+c/vo26t3qsjR1ad7pcSlb8AZ7Qs=)
2: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: FCWM3fA8WDZY+WxZzQg8Ua30/sEuJUur7KX4750i7Rs=)
3: qxNtM6lXc-IHu0RFMi09jBOcq44.roa (hash: lGaxRvwWm1pfHeT9l+8KNnzK2furIDbOHauCtS0rIJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:44:09:49:8b:da:4e:05:1b:fa:5e:ea:93:25:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Apr 17 01:00:37 2026 GMT
Not After : Apr 18 01:00:37 2026 GMT
Subject: CN=62c165e6fa1779e5bb1835e28b771aed27f3a753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1b:87:37:2a:96:f0:34:bd:b1:67:70:42:53:
8b:08:80:df:a7:77:99:9b:87:8d:a3:e8:ba:5e:67:
da:7a:17:a5:29:04:b7:6d:29:01:74:2c:6a:90:0d:
d5:99:85:eb:ab:93:ae:0a:19:be:3f:30:12:10:c3:
12:c6:10:c4:0a:8b:ca:88:fb:b3:60:46:b1:d3:f7:
a6:7a:a3:05:7b:9c:17:cf:5f:9a:86:8d:53:20:62:
bd:57:ab:4b:7a:78:c2:bd:63:70:7a:75:30:50:28:
45:02:94:a7:b4:fd:98:1a:52:38:b1:23:89:f4:39:
d8:a9:37:6e:c2:12:7a:51:6a:56:70:df:a8:f5:a9:
ec:46:fb:9f:3b:90:b9:cd:1a:11:fd:d1:64:13:f1:
dd:b4:0b:41:3b:ee:0c:73:34:fe:33:80:68:5f:a5:
8b:83:d6:69:ca:67:1e:74:4e:5c:cc:71:d9:e1:c4:
cf:c2:c4:e8:b9:9b:46:37:8d:68:49:d2:87:15:c9:
69:c3:5d:f6:e9:d1:cc:7b:f7:51:44:7e:a4:ed:cb:
08:c5:83:e2:50:23:57:9b:89:d5:a6:7a:05:3e:38:
4f:43:38:8a:8d:1d:c5:ec:d4:20:1b:80:b9:ed:d9:
37:f1:d2:7d:1b:95:1a:63:78:27:64:19:12:00:e9:
5b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C1:65:E6:FA:17:79:E5:BB:18:35:E2:8B:77:1A:ED:27:F3:A7:53
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fe:34:c8:b9:45:c2:64:ca:71:9a:6a:30:f4:08:22:1b:de:
4d:40:2d:47:6b:74:6d:b8:c6:b9:f2:4f:f3:82:83:ba:d4:f0:
d4:3a:45:1a:e8:85:d0:5f:5f:e6:6e:97:11:fc:0f:f6:2c:0c:
d3:4b:68:87:c6:98:27:07:83:8a:91:ec:7e:01:ed:77:e6:32:
8a:22:38:20:d5:83:75:f5:4c:56:67:11:8b:90:fc:e6:27:07:
59:e8:25:11:22:f0:28:00:21:12:41:98:09:ab:16:55:5b:7a:
90:f6:1d:30:da:ff:7d:1d:4a:ea:13:c0:bb:4c:f9:c4:fe:6b:
a4:2a:99:c8:f4:5a:c1:9d:7f:96:ff:b8:0f:49:58:48:44:59:
7f:9a:dc:8e:f9:d7:0e:ec:2d:84:75:ec:4f:10:3d:bc:f9:b5:
58:6d:a8:58:13:69:1e:6f:c0:47:01:0a:fd:db:d6:85:e7:95:
f3:70:e7:be:b3:81:cc:59:13:7c:e6:a6:4c:43:bc:b1:a8:9d:
d6:ae:05:34:53:7e:76:78:b4:68:bc:96:49:6e:a3:f4:6f:c0:
f4:eb:35:76:1c:3d:73:e9:0f:45:97:df:bd:b4:1a:b0:ee:cb:
ff:c1:e2:71:c5:60:01:1e:c0:2f:1d:33:db:b9:33:94:96:c8:
c3:50:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:22 2026 by rpki-client