Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
File: lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft (raw, json)
Hash identifier: /MnjYULf2mt3vFCJ5LFyaIuj2QCmq6dB8cR364iE48g=
Subject key identifier: 5C:A0:21:18:F9:BC:0E:4F:A4:04:F4:42:9C:F6:FC:8E:F5:8F:C0:D2
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial: 019DA3AEF1F9B3F85F1D08B0A44F974970D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
Manifest number: 15C3
Signing time: Sun 19 Apr 2026 03:00:44 +0000
Manifest this update: Sun 19 Apr 2026 03:00:44 +0000
Manifest next update: Mon 20 Apr 2026 03:00:44 +0000
Files and hashes: 1: 3N3x697PdBQfSoEa3ipvDa4IgGc.roa (hash: km/jt2nK2MZ3YgEOAe9PMTWQMqWp8onbkpGJJyxmD+A=)
2: guL1UhYmKCRQakOp74_jQ7ZHKiA.roa (hash: jSpnFus5fN8uZMH2l9dvvnq1nha+27Kc+Yx+n1wweXA=)
3: lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl (hash: Sv45WZgEbjzWWh1zM9quSCLUTBSmeZ40kXD/kv6jcNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:f1:f9:b3:f8:5f:1d:08:b0:a4:4f:97:49:70:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Validity
Not Before: Apr 19 03:00:44 2026 GMT
Not After : Apr 20 03:00:44 2026 GMT
Subject: CN=5ca02118f9bc0e4fa404f4429cf6fc8ef58fc0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:31:d0:2f:72:a3:12:41:70:b0:89:c5:c6:
b3:6c:54:a5:fd:13:1f:0d:07:74:fd:87:85:94:63:
74:26:a7:91:7a:e9:bf:68:10:e5:73:26:9f:f3:4b:
23:32:79:78:02:a9:99:e5:33:51:ea:d1:06:49:c5:
d9:52:a9:85:09:27:27:ed:48:02:68:7c:91:17:45:
0c:bc:74:d9:a7:1a:bb:ff:11:48:f6:eb:a7:01:b7:
e8:21:09:d6:34:07:66:ca:46:c4:19:6a:eb:7d:69:
9b:d2:03:b7:48:08:91:e5:c8:24:cc:74:f8:b2:ac:
92:d5:cc:18:85:2b:3f:ba:f7:07:0f:fb:96:aa:0d:
49:d2:34:dd:5b:e8:65:06:3a:3e:20:d7:77:6b:21:
2f:7f:b5:a4:5d:8b:2e:e5:ee:04:2b:4b:65:3a:ed:
f6:b6:de:88:c3:c5:8c:1d:d1:d7:eb:e7:54:91:d9:
a0:da:29:ac:c5:b2:c1:7b:ff:f0:c9:21:24:ba:6e:
a4:09:83:04:42:03:46:d7:5d:a2:5f:21:a9:e8:69:
0b:a4:20:04:2a:d5:d2:03:3b:e9:f7:f2:9a:14:ed:
59:73:c5:bd:79:d7:29:65:d3:1d:82:04:93:b8:00:
54:22:a8:2f:76:35:82:5a:73:8a:c6:41:91:3d:f9:
a8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A0:21:18:F9:BC:0E:4F:A4:04:F4:42:9C:F6:FC:8E:F5:8F:C0:D2
X509v3 Authority Key Identifier:
keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2f:33:19:4d:39:16:99:17:53:05:a3:3a:1f:65:5a:84:df:
a0:19:64:db:63:a8:b5:4d:53:8c:42:5f:a3:94:57:4f:f0:b2:
7c:a3:6a:d5:2c:d4:92:54:88:c0:b3:24:6d:7a:41:a7:c1:54:
3d:51:9c:50:ae:19:9b:86:9f:db:d6:b3:d6:28:bb:32:7a:42:
5d:28:f2:ba:0d:71:80:f3:c4:64:7e:4a:8d:78:4a:7c:f8:af:
1a:65:48:90:df:c5:f7:a7:8e:67:0c:05:ba:b9:9c:2c:ad:a7:
cf:33:3f:53:79:3b:5b:47:96:da:5b:d1:31:2c:9b:e4:cd:76:
02:c4:95:1f:16:de:53:80:7a:6e:e8:43:17:9c:08:b4:93:4e:
4c:31:52:6c:48:f2:7a:8c:82:5f:4f:9a:0e:03:f0:6a:1f:7d:
fc:b2:a5:d9:0b:94:71:22:f3:e5:74:8f:a2:89:73:61:48:55:
51:5f:2a:01:65:9c:5c:9e:01:e6:7e:0a:e3:3a:6e:81:02:ea:
d8:b6:53:34:9d:8f:e1:ea:19:01:5a:4a:b7:77:55:18:38:bc:
39:d8:fe:84:74:db:91:12:12:c6:e5:46:db:c2:93:10:96:80:
a9:5d:91:d4:07:6e:cc:2d:81:23:b1:af:f7:0a:8d:b0:c3:7a:
67:01:1b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:54 2026 by rpki-client