Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
File: lRibFY2NYBG6X5YlLTAmanDT4GY.mft (raw, json)
Hash identifier: M/KLpqSJaY68kx25/nZoSkt94/SbLXXEDVoHASootHI=
Subject key identifier: 88:DD:E9:D2:97:2C:6C:74:DA:02:AF:8C:A9:18:2D:91:82:82:5E:CB
Authority key identifier: 95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
Certificate issuer: /CN=95189b158d8d6011ba5f96252d30266a70d3e066
Certificate serial: 019D9B5175CF4D0F55266D7361811FECC7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 12:01:40 +0000
Manifest this update: Fri 17 Apr 2026 12:01:40 +0000
Manifest next update: Sat 18 Apr 2026 12:01:40 +0000
Files and hashes: 1: RZP_EJvUPRy8N5V44f-ykW1wgg8.roa (hash: LUUspyCZgfPy/9PXdd/3xbh9XNVlKFlsig4SSBadF24=)
2: lRibFY2NYBG6X5YlLTAmanDT4GY.crl (hash: B+bqsLIk+GCPQPBDRlPUNT8MnbIMrgwcsdJjV43JWVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:75:cf:4d:0f:55:26:6d:73:61:81:1f:ec:c7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95189b158d8d6011ba5f96252d30266a70d3e066
Validity
Not Before: Apr 17 12:01:40 2026 GMT
Not After : Apr 18 12:01:40 2026 GMT
Subject: CN=88dde9d2972c6c74da02af8ca9182d9182825ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b3:89:e5:9d:5b:cb:46:c0:8f:96:2e:d9:42:
8a:f8:8a:30:b2:d1:eb:3a:6c:06:22:d1:35:0e:b4:
2a:4c:69:e6:ad:41:3c:91:e9:47:77:1b:94:09:77:
1c:2f:cd:fb:f0:7e:ec:9a:37:aa:4c:dc:36:fa:6d:
87:95:98:aa:f4:65:42:b4:32:6e:e8:5a:36:16:70:
16:e6:72:d1:c2:d1:e1:1b:e9:9c:fa:33:c4:ae:59:
8c:59:2f:11:6e:42:35:78:a9:4c:a2:3a:96:15:87:
de:23:08:c2:18:b6:00:b8:ce:de:ff:1e:a0:8a:63:
ad:ac:6c:91:a0:07:47:80:fb:80:e9:8c:a2:83:86:
c0:94:67:ed:e6:c9:88:ee:2b:20:d8:95:51:01:5e:
39:c5:37:ee:0e:69:27:04:12:fe:da:48:e4:d3:ce:
d2:5b:2c:9c:4f:9d:94:e0:29:fd:9f:a0:ef:06:d3:
fd:e3:47:b2:0b:34:a2:28:ba:c8:ed:55:23:09:0e:
c5:cf:91:0d:21:11:f5:35:48:18:db:64:3a:79:4b:
a7:70:9c:47:35:de:59:f3:d4:8d:33:31:35:c3:c6:
0a:a1:0d:8a:68:41:d1:5f:42:c4:53:a9:71:d1:a9:
a9:11:17:6c:ed:63:93:0e:4d:04:2d:25:7f:42:3f:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DD:E9:D2:97:2C:6C:74:DA:02:AF:8C:A9:18:2D:91:82:82:5E:CB
X509v3 Authority Key Identifier:
keyid:95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4e:2a:19:fb:7e:13:95:36:12:8a:10:99:72:1c:5e:cd:e7:
b3:d5:71:e5:07:4e:90:14:c3:21:b1:5d:b0:73:aa:47:14:91:
cf:49:8a:12:ad:2a:4a:02:02:db:b0:68:b3:56:d7:ad:b0:d5:
23:d2:ad:6e:3c:1e:e0:78:24:4b:cc:c3:4a:fe:93:5a:8f:3e:
4a:05:c6:fe:f4:52:41:be:54:5a:fb:c5:78:79:dc:7f:8d:39:
f0:f6:cb:b7:17:28:4f:c9:93:c8:8a:fa:24:6b:39:82:4b:20:
0d:92:1f:ad:4c:0d:87:82:b2:e0:47:6c:fa:d1:e5:de:92:25:
a0:9a:83:55:18:9e:40:7d:53:91:51:54:51:1f:af:9b:8a:80:
82:30:23:30:e0:c6:7d:6c:3c:be:75:e4:9a:a0:e7:80:46:85:
97:78:db:67:24:70:86:a0:5a:80:67:84:ac:a9:b3:9a:34:42:
2e:7c:ae:5a:26:f3:d6:4c:b7:b6:5f:47:56:61:07:79:ca:26:
da:6b:c0:59:bc:a9:fe:44:69:01:e4:1d:65:4d:99:0f:47:30:
14:9a:54:dc:ff:21:95:ac:ae:20:bc:ec:7e:6f:b0:38:f3:33:
e5:4e:cf:4d:58:7f:97:2f:d6:ff:47:2c:9a:0c:de:ad:c5:0b:
41:ff:1f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:16:05 2026 by rpki-client