Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
File: D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft (raw, json)
Hash identifier: 7MaZ55zO0k2OQyDN/wczWxX3HRZqjatpQMBZ2hA3dp8=
Subject key identifier: 40:DB:8B:65:14:E7:65:79:3A:5D:80:12:FF:B7:08:E5:0B:C0:50:D8
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial: 019D9AE2B8356DB8696C39A258041E8C750F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 10:00:42 +0000
Manifest this update: Fri 17 Apr 2026 10:00:42 +0000
Manifest next update: Sat 18 Apr 2026 10:00:42 +0000
Files and hashes: 1: D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl (hash: +inWFM5QXI8UlKg/FvkLF0K44wba1RTLrFZ798YPi7I=)
2: MXQ5fKgl8ZsaQZNHO6pbBu5IdxA.roa (hash: pI/grpKRBsBNOQ0aspRfRJgjD1ZrwmmpLNeau2QbWVA=)
3: Zx5o8v2ZCe9pK1Sbhq2vLi9k9J8.roa (hash: YgGRcc+fQUbTuFLOD9KlYqEbp3CkMEvOBhBenJB52Ic=)
4: jjZr6ibloVwf3j-xPGaypuYc1To.roa (hash: JuRrRALm0fnkDTSDsHBV/GbEKFpe95uRtT0ysTR3ENk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:b8:35:6d:b8:69:6c:39:a2:58:04:1e:8c:75:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
Validity
Not Before: Apr 17 10:00:42 2026 GMT
Not After : Apr 18 10:00:42 2026 GMT
Subject: CN=40db8b6514e765793a5d8012ffb708e50bc050d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a1:dc:01:4a:ca:39:01:b3:03:44:f9:0a:c1:
82:16:1c:8e:35:12:af:29:32:9b:02:2c:54:d6:87:
7a:0c:47:33:97:c5:39:13:1d:ac:69:7b:94:34:aa:
14:9e:12:73:94:28:97:95:c5:be:f2:ef:4b:03:8a:
6d:78:66:dc:4f:e8:1a:2a:23:c6:41:1d:9f:fc:67:
c1:22:ed:95:2b:68:3b:4a:e2:a5:32:06:4c:e1:e6:
48:69:81:74:b7:3d:05:27:de:8d:8d:83:e6:60:b6:
92:13:97:f1:10:20:0d:c8:99:be:27:2d:d5:ef:cc:
cc:f7:6b:e6:2b:f0:28:3c:93:65:17:a8:ac:89:b8:
34:d3:f4:c6:e3:30:51:e5:af:01:b2:7f:2f:8f:6e:
3f:37:36:c4:fd:ec:b8:d4:96:e5:f4:95:ca:78:d4:
18:30:a3:f0:b1:c5:a0:64:28:5b:ab:92:41:52:b3:
b4:30:0e:7d:73:bc:54:75:8e:a6:d2:9f:92:39:42:
0c:dc:ef:89:b8:0f:7f:5b:f4:e9:20:3c:3b:c6:05:
ab:bc:82:34:09:6f:90:ab:9b:bc:8f:43:13:a6:4e:
63:81:54:f3:c0:9e:a8:9d:6c:34:63:7e:3a:33:4c:
84:ff:8b:a5:e1:c5:5a:59:b9:05:c8:cd:1e:d1:19:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DB:8B:65:14:E7:65:79:3A:5D:80:12:FF:B7:08:E5:0B:C0:50:D8
X509v3 Authority Key Identifier:
keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:27:23:61:35:5b:0e:6a:37:66:ea:61:dc:6b:f3:40:ec:f0:
57:3e:a0:86:de:6b:cc:c6:ca:4f:81:45:4d:91:11:d0:30:54:
50:ec:57:f2:db:66:f8:b8:e6:35:29:f5:9f:1d:82:e8:33:49:
65:4f:9b:24:65:2f:8d:8e:cb:52:79:77:64:9f:05:d4:42:e7:
50:f9:1b:9e:02:6e:c4:ae:be:df:e2:78:79:75:34:e0:fe:0e:
e8:d8:f7:bf:89:1c:d3:80:ab:d9:71:53:f8:05:24:e1:8f:a4:
4e:4d:06:7e:d3:00:ab:02:a8:2c:fa:de:0d:07:56:95:bd:bb:
a2:cc:84:fa:29:51:c0:19:dc:7c:d6:36:5d:a9:4b:c0:81:9d:
40:f4:98:ef:bd:60:44:57:61:9e:e3:60:45:c1:22:bc:63:46:
53:d2:94:d5:5f:5b:d9:3c:23:94:42:9a:eb:a3:ff:de:de:0b:
28:74:a6:eb:c6:94:33:6d:2d:e5:a1:4f:da:5e:b7:a9:6a:c4:
ca:c4:17:85:92:e5:5e:5f:6a:b5:80:34:54:1d:a5:3a:5d:ca:
dd:9f:90:6c:46:32:d0:2e:d7:b9:bb:b1:33:2a:05:a8:57:6e:
2a:c4:09:d6:77:c0:66:58:37:dc:44:c6:97:94:8d:d7:51:ef:
22:43:8e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:05:47 2026 by rpki-client