Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
File: lN7qVibZ6DJkDx7N9_i7clckCEc.mft (raw, json)
Hash identifier: VnHOpBSKwbSp2nRDUrvyxLAfDebLi7ivZU7+j7XlEcI=
Subject key identifier: 5F:1F:2A:AA:4E:50:ED:92:C1:3B:7E:E6:97:32:1F:E3:68:C3:43:B5
Authority key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
Certificate issuer: /CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Certificate serial: 019DA3AF0B40A5BB8E248F398EED58127980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
Manifest number: 0DBB
Signing time: Sun 19 Apr 2026 03:00:51 +0000
Manifest this update: Sun 19 Apr 2026 03:00:51 +0000
Manifest next update: Mon 20 Apr 2026 03:00:51 +0000
Files and hashes: 1: lN7qVibZ6DJkDx7N9_i7clckCEc.crl (hash: iSjsQKe2un6Gmb1SubqDE77yhAG1E1dJoBWE2aHcAI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:0b:40:a5:bb:8e:24:8f:39:8e:ed:58:12:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Validity
Not Before: Apr 19 03:00:51 2026 GMT
Not After : Apr 20 03:00:51 2026 GMT
Subject: CN=5f1f2aaa4e50ed92c13b7ee697321fe368c343b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:a5:fa:76:73:40:3f:f5:24:b4:7d:4d:86:
9c:d3:0a:a2:5e:82:a5:73:b4:bd:62:d7:9b:7a:0d:
f8:0a:25:44:9b:25:5a:39:f2:ad:a7:00:8b:a3:46:
79:59:15:e9:0a:a5:47:d1:ec:96:cf:36:82:0a:5b:
19:9e:c5:e7:4e:b3:67:a0:c9:d6:64:be:b4:79:9e:
1d:70:8d:10:d3:74:99:31:60:01:e2:d2:87:10:e5:
f9:88:44:a0:2a:e1:5d:9b:b0:56:87:54:4d:53:68:
81:30:20:e6:08:dc:08:fb:9e:17:76:54:34:12:4c:
63:f2:9d:ca:2e:80:8c:fb:a4:03:60:6e:a7:8e:5d:
3d:75:ec:2b:5c:3b:37:bc:f5:1c:89:2a:75:19:80:
3e:4b:37:40:3a:0a:54:87:66:15:d9:76:36:84:78:
ad:39:a3:db:67:9e:87:84:44:b3:fb:16:c8:78:f4:
69:7b:6a:fd:43:71:a1:d1:47:42:5f:9b:a1:88:f2:
00:a5:a9:fe:59:19:ef:c9:7b:1f:0f:e8:31:39:59:
40:d7:62:0d:b0:bf:06:c5:96:73:57:cc:ab:c3:12:
8b:61:35:44:8f:04:99:18:cf:5f:6d:f0:5a:f4:39:
60:97:58:91:3c:25:3f:1f:75:5b:5b:aa:6f:bf:54:
55:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1F:2A:AA:4E:50:ED:92:C1:3B:7E:E6:97:32:1F:E3:68:C3:43:B5
X509v3 Authority Key Identifier:
keyid:94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8f:91:9f:80:5f:43:50:76:8c:ff:aa:82:58:a2:3b:9d:d9:
23:02:8d:b5:6a:50:ab:a8:8a:44:a4:0a:e0:4f:a0:76:d5:f6:
70:74:d3:c7:45:ed:70:33:3f:db:b8:ec:9e:25:93:d0:49:d0:
fa:33:a9:ef:8b:3a:d5:e1:84:e1:97:7d:98:63:b9:14:58:53:
dd:37:41:cc:bc:5d:14:fc:23:bb:6e:1f:fa:e6:69:3f:4e:a8:
5d:93:ab:b5:aa:41:2b:17:57:1f:b9:ee:1b:38:a4:17:15:bd:
85:e9:a9:49:63:2c:d0:17:66:ea:5d:bb:96:a3:3c:36:ca:1a:
65:a5:73:75:07:52:39:c3:c2:a7:9f:7e:68:d7:fd:70:cd:5c:
c8:04:5e:a5:6a:57:83:09:29:a7:f6:62:67:17:4c:6e:28:60:
a7:29:a5:0b:9d:34:05:11:b3:b2:4e:1e:d5:21:fd:8a:96:2f:
8a:a9:5e:77:9e:6f:92:a3:7e:fc:3d:ef:8c:97:12:54:be:0a:
1e:90:db:40:2b:9c:20:f8:ed:fd:f7:1c:09:93:29:fa:4f:f0:
b2:cb:cd:b7:02:3e:5c:ca:97:3b:8a:12:55:59:c5:0e:0f:58:
64:c1:6b:a5:13:3c:c4:70:63:88:4f:5b:61:2e:da:f6:f9:74:
58:f6:9b:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrwtApbuOJI85ju1YEnmAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZGVlYTU2MjZkOWU4MzI2NDBmMWVjZGY3ZjhiYjcyNTcy
NDA4NDcwHhcNMjYwNDE5MDMwMDUxWhcNMjYwNDIwMDMwMDUxWjAzMTEwLwYDVQQD
Eyg1ZjFmMmFhYTRlNTBlZDkyYzEzYjdlZTY5NzMyMWZlMzY4YzM0M2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCWl+nZzQD/1JLR9TYac0wqiXoKl
c7S9Ytebeg34CiVEmyVaOfKtpwCLo0Z5WRXpCqVH0eyWzzaCClsZnsXnTrNnoMnW
ZL60eZ4dcI0Q03SZMWAB4tKHEOX5iESgKuFdm7BWh1RNU2iBMCDmCNwI+54XdlQ0
Ekxj8p3KLoCM+6QDYG6njl09dewrXDs3vPUciSp1GYA+SzdAOgpUh2YV2XY2hHit
OaPbZ56HhESz+xbIePRpe2r9Q3Gh0UdCX5uhiPIApan+WRnvyXsfD+gxOVlA12IN
sL8GxZZzV8yrwxKLYTVEjwSZGM9fbfBa9Dlgl1iRPCU/H3VbW6pvv1RVNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8fKqpOUO2SwTt+5pcyH+Now0O1MB8GA1UdIwQY
MBaAFJTe6lYm2egyZA8ezff4u3JXJAhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE43cVZpYlo2REprRHg3TjlfaTdjbGNrQ0VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zNDQ3ZGQtOGRjNC00MDVkLTljMGIt
NmZmYzVkOWUwZmVkLzEvbE43cVZpYlo2REprRHg3TjlfaTdjbGNrQ0VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8zNDQ3ZGQtOGRjNC00MDVkLTljMGItNmZmYzVkOWUwZmVk
LzEvbE43cVZpYlo2REprRHg3TjlfaTdjbGNrQ0VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu4+Rn4Bf
Q1B2jP+qgliiO53ZIwKNtWpQq6iKRKQK4E+gdtX2cHTTx0XtcDM/27jsniWT0EnQ
+jOp74s61eGE4Zd9mGO5FFhT3TdBzLxdFPwju24f+uZpP06oXZOrtapBKxdXH7nu
GzikFxW9hempSWMs0Bdm6l27lqM8NsoaZaVzdQdSOcPCp59+aNf9cM1cyARepWpX
gwkpp/ZiZxdMbihgpymlC500BRGzsk4e1SH9ipYviqled55vkqN+/D3vjJcSVL4K
HpDbQCucIPjt/fccCZMp+k/wssvNtwI+XMqXO4oSVVnFDg9YZMFrpRM8xHBjiE9b
YS7a9vl0WPabzg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:32 2026 by rpki-client