Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
File: lB47mlO74C4stDl6bRoB2Aym5Bg.mft (raw, json)
Hash identifier: Y9SLob4q864dS4mtPICcWhxWWMnLmT54Kc6ThCeHG3Y=
Subject key identifier: 37:4B:89:04:DE:BB:CD:1E:97:D3:76:71:0C:55:C3:1D:3A:B1:5D:1A
Authority key identifier: 94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
Certificate issuer: /CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Certificate serial: 019D97745B621D12F3B58817BAE8E7176BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
Manifest number: 18BE
Signing time: Thu 16 Apr 2026 18:01:18 +0000
Manifest this update: Thu 16 Apr 2026 18:01:18 +0000
Manifest next update: Fri 17 Apr 2026 18:01:18 +0000
Files and hashes: 1: lB47mlO74C4stDl6bRoB2Aym5Bg.crl (hash: GLzRF1JB+0LECUw7kVXsERb+ooLnJ7ZBuo/4mm+s5Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:5b:62:1d:12:f3:b5:88:17:ba:e8:e7:17:6b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Validity
Not Before: Apr 16 18:01:18 2026 GMT
Not After : Apr 17 18:01:18 2026 GMT
Subject: CN=374b8904debbcd1e97d376710c55c31d3ab15d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:f9:e9:5c:6d:e4:e7:8e:ad:a0:bc:a8:8e:
89:69:6d:41:f0:e3:2e:4f:f0:2d:83:b6:a1:d8:0f:
56:9b:b5:fb:07:87:80:fc:a1:10:ee:66:e4:4c:f9:
47:6d:8e:2b:6e:9a:a9:65:ee:1c:f7:4b:29:dd:52:
f3:23:51:bf:8b:f9:fa:08:55:ea:a8:42:02:74:82:
24:d6:1f:ab:97:37:c9:ea:49:4c:8a:a3:75:27:d6:
30:6f:99:c4:67:46:3a:2c:9d:e0:e6:23:06:2f:61:
b3:1e:6d:12:ca:d3:d9:e5:f4:8c:60:be:0d:25:bb:
32:12:a3:3d:ea:e3:dd:f8:3a:d6:ef:30:4d:a1:82:
34:4f:11:c6:d5:14:c3:43:72:b1:5b:b8:4d:3d:9c:
09:1a:aa:b9:0c:6a:ad:06:3a:5f:3e:91:53:4b:32:
1e:5e:a8:7c:f1:e6:a2:3b:ae:81:79:41:70:5c:2c:
93:c9:e8:b5:73:49:15:c1:66:47:de:90:e3:68:70:
ef:25:fc:b6:cb:bf:a1:7f:0a:8c:5a:f5:7e:43:05:
84:e0:8c:c8:17:af:a5:2f:9b:bb:c0:eb:ff:03:ac:
2d:53:ba:b9:cd:0f:8d:76:28:58:ee:65:dc:c9:c7:
66:85:40:ab:ec:17:b2:37:1b:5d:bd:bf:f7:da:46:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4B:89:04:DE:BB:CD:1E:97:D3:76:71:0C:55:C3:1D:3A:B1:5D:1A
X509v3 Authority Key Identifier:
keyid:94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:31:69:89:9c:3e:cd:72:d8:4f:4c:1a:21:04:4d:3c:88:e7:
3c:e1:e7:ef:54:c9:ba:09:97:b0:cc:ba:a1:b3:7c:88:9a:1f:
51:ac:50:a4:d6:2e:3b:3b:77:89:67:a7:22:f9:33:5d:48:4f:
9a:65:a2:ce:fc:3b:91:c9:5e:d6:0e:f7:d8:bb:7c:aa:b8:e3:
28:f1:59:e3:a7:cd:86:98:a1:23:98:59:8f:cc:c8:9b:f4:32:
99:56:f9:e8:5c:bd:4d:0d:f6:6c:da:53:d7:aa:21:ed:b5:ad:
d5:54:44:5e:74:2e:b9:4a:a6:78:2d:3d:e4:90:e7:f9:57:aa:
1b:f8:c8:07:6b:59:39:9c:fa:36:ff:bc:49:0e:73:b7:b7:c5:
83:24:ae:d1:e8:84:84:01:52:72:85:e5:14:bf:cb:f7:80:42:
7e:3c:f8:06:c9:cc:d5:94:3c:b4:e7:21:d7:e2:bf:de:fd:17:
3b:3d:fb:e1:55:41:19:b4:ff:5d:7c:db:6a:81:57:3c:1d:8b:
a2:93:ce:9d:93:20:92:0f:4c:60:df:c8:e7:e3:87:cb:a2:b9:
0f:86:bd:93:4f:75:e9:6f:c6:32:28:90:d1:73:0d:06:53:9d:
79:1f:52:a6:48:1b:6b:65:40:74:f3:72:76:64:77:6c:a2:d3:
c3:1f:98:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:40 2026 by rpki-client