Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
File: lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json)
Hash identifier: 0e2bXkGVVhn3zrupyYesgvvoyrrAqmBaQgiH4h3QAkE=
Subject key identifier: DB:EA:66:4E:85:32:72:CF:0E:23:FB:E8:DF:5E:D1:C3:20:93:6E:2D
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Certificate issuer: /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial: 019D9A3DF3F29FB95C5BD01B76BAB33B9AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
Manifest number: 12E9
Signing time: Fri 17 Apr 2026 07:00:44 +0000
Manifest this update: Fri 17 Apr 2026 07:00:44 +0000
Manifest next update: Sat 18 Apr 2026 07:00:44 +0000
Files and hashes: 1: XA0hanAouJl2ycFS_6jOkWOebDo.roa (hash: A3fTkPkEhBhccpT47iyF3/WYn8UVXxPajs9rFRIKGYs=)
2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: cLNxxbID4dbfo6ltJrASoMuH1Vk7kiqxpvj1U0ulwEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:f3:f2:9f:b9:5c:5b:d0:1b:76:ba:b3:3b:9a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Validity
Not Before: Apr 17 07:00:44 2026 GMT
Not After : Apr 18 07:00:44 2026 GMT
Subject: CN=dbea664e853272cf0e23fbe8df5ed1c320936e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:ac:f1:65:5c:76:b9:9e:cf:52:cd:b6:5f:
ae:ad:b1:9c:e0:16:88:b7:38:7d:f8:6e:b9:dd:48:
75:99:29:ef:c2:ba:ff:af:eb:c6:73:28:97:d2:28:
33:fa:bf:91:ba:31:07:d9:39:5b:cd:0a:86:44:d4:
b4:b0:69:6e:d3:6d:9a:0a:39:bf:e3:b4:79:59:2f:
9d:e7:83:20:71:42:d5:90:c0:32:b3:19:6e:94:67:
67:52:cf:97:f9:34:e6:3a:2c:9f:c2:9f:34:b5:0a:
3b:1b:48:8f:6b:78:ab:42:eb:f1:2e:e1:aa:dc:e1:
1f:db:94:a9:49:09:c7:0e:6e:d6:44:34:ef:58:38:
6c:f8:fc:73:f7:1b:fe:a9:9d:0e:c2:18:ed:58:92:
e8:46:25:0b:ff:91:73:06:da:eb:21:39:23:04:fd:
b5:1b:53:d5:f9:dd:a3:19:d6:e8:a8:c2:fc:f5:f8:
a4:72:16:b9:2e:ed:aa:ee:ed:05:83:63:d2:e3:c4:
0e:2f:25:c6:ff:32:1c:5a:fa:56:6d:71:f0:6a:75:
05:53:d4:99:fd:b8:d1:7e:19:09:aa:b7:da:fe:54:
aa:f1:f3:38:ee:6b:a1:d6:01:a7:f9:07:ad:5a:ee:
b6:e0:a3:16:45:d7:79:84:f7:70:dd:01:7b:34:b5:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EA:66:4E:85:32:72:CF:0E:23:FB:E8:DF:5E:D1:C3:20:93:6E:2D
X509v3 Authority Key Identifier:
keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:69:c4:47:ae:0f:05:0c:a0:5b:d6:0c:e1:a2:bb:78:49:1f:
b1:4c:07:fa:9e:08:f7:c6:8f:a4:ac:82:e0:37:dc:9a:5b:fc:
d8:ed:50:56:01:be:eb:16:eb:85:b1:86:1c:6c:24:00:86:e9:
1b:4a:8f:48:50:ef:3a:63:fe:50:a5:2a:46:f7:c3:14:7c:c0:
5c:2d:fb:4b:92:1b:e4:45:f6:ae:e6:5c:69:24:32:49:74:90:
8c:85:50:28:e9:16:39:da:6e:ea:d1:c1:d1:7c:53:42:87:10:
ec:47:53:bc:ce:bf:a0:ff:25:95:55:c8:57:2b:79:7e:04:c6:
14:c8:16:5d:08:67:a7:f6:b3:98:0d:a4:d7:d4:df:14:9e:93:
d5:8a:98:65:ee:88:76:21:12:f5:f5:f5:f8:ee:ca:16:d3:14:
a7:c4:60:21:b3:c0:4a:84:83:92:07:ee:0b:2b:ef:3d:53:63:
6d:45:2f:20:78:e9:96:06:1c:52:3b:ce:cf:04:7c:c1:76:03:
50:b4:43:fc:1b:da:b4:93:0d:62:88:57:9c:08:30:06:87:38:
9b:63:92:65:0d:b1:7a:33:f6:15:f3:19:6c:cb:8c:44:76:7c:
3a:78:98:99:8f:ad:db:dc:82:d9:88:7a:f1:bf:54:e3:a2:b9:
90:42:9b:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPfPyn7lcW9AbdrqzO5qxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0M2JjNTc2NzMyMzc0ZThkODlkNzAxM2FiMzYzMGI2ZTBh
OWYxOWEwHhcNMjYwNDE3MDcwMDQ0WhcNMjYwNDE4MDcwMDQ0WjAzMTEwLwYDVQQD
EyhkYmVhNjY0ZTg1MzI3MmNmMGUyM2ZiZThkZjVlZDFjMzIwOTM2ZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIWs8WVcdrmez1LNtl+urbGc4BaI
tzh9+G653Uh1mSnvwrr/r+vGcyiX0igz+r+RujEH2TlbzQqGRNS0sGlu022aCjm/
47R5WS+d54MgcULVkMAysxlulGdnUs+X+TTmOiyfwp80tQo7G0iPa3irQuvxLuGq
3OEf25SpSQnHDm7WRDTvWDhs+Pxz9xv+qZ0OwhjtWJLoRiUL/5FzBtrrITkjBP21
G1PV+d2jGdboqML89fikcha5Lu2q7u0Fg2PS48QOLyXG/zIcWvpWbXHwanUFU9SZ
/bjRfhkJqrfa/lSq8fM47muh1gGn+QetWu624KMWRdd5hPdw3QF7NLU+9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvqZk6FMnLPDiP76N9e0cMgk24tMB8GA1UdIwQY
MBaAFJQ7xXZzI3To2J1wE6s2MLbgqfGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iOGQwNjUtZWQ4MS00MDllLWIxZjEt
NzZhYjNmY2ExZjMyLzEvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iOGQwNjUtZWQ4MS00MDllLWIxZjEtNzZhYjNmY2ExZjMy
LzEvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWnER64P
BQygW9YM4aK7eEkfsUwH+p4I98aPpKyC4Dfcmlv82O1QVgG+6xbrhbGGHGwkAIbp
G0qPSFDvOmP+UKUqRvfDFHzAXC37S5Ib5EX2ruZcaSQySXSQjIVQKOkWOdpu6tHB
0XxTQocQ7EdTvM6/oP8llVXIVyt5fgTGFMgWXQhnp/azmA2k19TfFJ6T1YqYZe6I
diES9fX1+O7KFtMUp8RgIbPASoSDkgfuCyvvPVNjbUUvIHjplgYcUjvOzwR8wXYD
ULRD/BvatJMNYohXnAgwBoc4m2OSZQ2xejP2FfMZbMuMRHZ8OniYmY+t29yC2Yh6
8b9U46K5kEKbsw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:04 2026 by rpki-client