Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
File: lRibFY2NYBG6X5YlLTAmanDT4GY.mft (raw, json)
Hash identifier: PZ7dG0Mw1YWIzeqWWmFeleKMev99qkbo3M1EuNEjo5Q=
Subject key identifier: 12:3C:C6:3B:A1:7E:E1:BF:FE:FE:26:41:82:B7:3D:27:F6:DA:CC:8E
Authority key identifier: 95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
Certificate issuer: /CN=95189b158d8d6011ba5f96252d30266a70d3e066
Certificate serial: 019D9D3F39E64C9EE7C90954F8AA905639AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 21:00:59 +0000
Manifest this update: Fri 17 Apr 2026 21:00:59 +0000
Manifest next update: Sat 18 Apr 2026 21:00:59 +0000
Files and hashes: 1: RZP_EJvUPRy8N5V44f-ykW1wgg8.roa (hash: LUUspyCZgfPy/9PXdd/3xbh9XNVlKFlsig4SSBadF24=)
2: lRibFY2NYBG6X5YlLTAmanDT4GY.crl (hash: 6FBGLRqecsqeVoMHfG1AQkAk9t7fRx4J/MH1/txzLAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:39:e6:4c:9e:e7:c9:09:54:f8:aa:90:56:39:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95189b158d8d6011ba5f96252d30266a70d3e066
Validity
Not Before: Apr 17 21:00:59 2026 GMT
Not After : Apr 18 21:00:59 2026 GMT
Subject: CN=123cc63ba17ee1bffefe264182b73d27f6dacc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:2b:d7:81:06:34:34:bf:51:0a:e8:6d:8e:
24:30:25:16:75:a9:08:5b:12:3b:fe:79:7f:4a:dd:
11:8b:9e:f6:85:44:0f:d5:94:53:46:e4:76:d0:63:
c1:19:7b:42:8d:e2:b7:c5:06:6b:02:56:2d:a2:8b:
f6:fa:cc:ec:d1:34:e5:b7:32:44:b5:90:60:d2:0b:
11:95:0c:38:2f:a9:c0:b3:92:6f:bb:99:60:a0:ed:
bc:3c:d6:b1:99:c3:30:b2:36:a1:ae:bf:c6:72:c5:
79:93:cf:a8:4a:63:9d:a5:f6:43:e4:d2:9a:a5:fc:
74:93:79:aa:b5:25:14:ae:fa:58:b9:5d:0e:7f:cd:
7b:15:2c:07:62:36:85:de:d0:63:6b:f1:7f:88:7c:
48:4c:54:0d:c6:94:cc:4f:5f:60:34:50:9b:ca:5c:
b4:01:f5:8b:56:0a:b2:54:21:69:af:f9:b3:01:02:
9f:7c:b0:3d:10:48:cd:71:2b:b9:9a:01:63:8d:15:
a6:d4:26:a1:5a:9d:db:20:9e:0b:52:2a:df:33:83:
8d:1e:3d:31:e7:94:b6:69:1a:94:90:26:96:b0:fe:
5b:10:a4:1a:e3:34:3f:2e:82:5f:c5:e6:cb:66:47:
0e:bf:3b:96:c7:5c:a9:5c:43:8c:64:f2:a9:ae:69:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3C:C6:3B:A1:7E:E1:BF:FE:FE:26:41:82:B7:3D:27:F6:DA:CC:8E
X509v3 Authority Key Identifier:
keyid:95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:04:2a:50:e4:22:59:f0:d0:34:96:21:c8:61:ad:68:f6:b6:
8e:e3:dc:23:ea:98:30:69:18:83:48:bb:31:8b:b6:f8:70:ae:
b4:36:a0:82:62:8c:66:f8:37:ca:d5:50:41:ae:a3:f0:b9:69:
f2:ce:e3:6c:1c:38:57:c0:1d:bb:ec:25:20:03:19:75:9b:9a:
de:0a:d8:1c:b6:ad:47:7f:d7:94:60:03:80:e3:38:de:03:f4:
4f:f1:92:8b:90:11:99:ae:1b:0c:f1:ad:8a:ba:d8:f1:96:3c:
e3:a2:d4:00:39:bf:87:ea:48:76:06:b5:a5:9b:2d:91:ee:f1:
ae:98:61:df:32:d0:42:1d:ca:a6:32:a7:3f:c7:fc:c7:39:0f:
b5:66:ac:3a:ff:a9:8a:c3:6f:f4:0d:c8:7f:9f:ce:64:13:ad:
77:bb:a8:c1:d5:c8:83:40:a6:20:5e:d1:b9:fd:00:16:7c:e4:
a1:b1:d9:1b:08:91:6b:37:74:d4:d6:80:8c:7f:ed:d1:90:c0:
12:45:48:c7:8e:fb:b2:1e:68:16:de:ba:29:8b:ff:4d:d0:7c:
83:be:1f:30:bd:96:b2:fd:81:ec:33:7e:10:dd:29:e2:25:56:
fb:3c:b4:d3:ce:28:54:34:47:43:fe:5c:c4:b9:19:ce:e6:4e:
fb:26:6c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:37:18 2026 by rpki-client