Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: KMgsF4e8SR/rQtx3TPXlOiqQN2pSSSBpl0EgayEfIa8=
Subject key identifier: 2D:63:2C:67:58:6E:CA:95:02:7A:79:FD:11:9C:A2:F2:81:5D:FA:3B
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 019D99998A19483FE5FA93153F28858E7A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 04:01:09 +0000
Manifest this update: Fri 17 Apr 2026 04:01:09 +0000
Manifest next update: Sat 18 Apr 2026 04:01:09 +0000
Files and hashes: 1: BSE98FzK5j337SGXcJiqoMH_kF4.roa (hash: xTUQIPRKlSvAwXtZUqS4ipgxLNyVd2NotYhIujM5Dgk=)
2: IYDcWXVOin0X4eF-OQ1Vti4U54Q.roa (hash: nqLHyjeiC0RivLdIbTbmn4gjwwFAxF1g54vATpHiW9s=)
3: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: vlPX45XXMMpP/EW8yP0EzVp1FnYhbxqYx18XlammtKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:8a:19:48:3f:e5:fa:93:15:3f:28:85:8e:7a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Apr 17 04:01:09 2026 GMT
Not After : Apr 18 04:01:09 2026 GMT
Subject: CN=2d632c67586eca95027a79fd119ca2f2815dfa3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:93:46:67:4e:a3:b0:67:ce:d2:71:cf:20:81:
05:e4:c3:1c:99:fe:83:cb:02:62:9a:f1:e1:33:1d:
cd:07:44:c5:a3:9d:8d:a3:60:9a:b2:ca:ff:c2:b9:
ec:4b:2a:23:7f:10:53:5d:29:98:76:ac:e2:d7:bc:
f2:2a:2f:e4:c6:32:83:d5:a8:eb:ce:08:aa:ab:fe:
e6:c6:ae:46:5a:e7:ac:77:59:d4:7a:8b:7b:83:06:
5b:dd:f3:b7:ce:67:5f:a3:9c:dd:e1:61:8f:cd:90:
d4:4c:8d:de:e1:20:6a:0d:c3:62:80:78:f5:40:98:
6f:fa:f2:31:e8:2c:51:be:78:36:1b:fd:79:62:ad:
fb:a8:78:9e:b0:31:f5:93:2b:fa:fa:4d:cd:19:36:
62:ba:86:4d:75:0b:17:ae:c1:fe:62:10:73:36:fe:
cb:ba:9e:06:47:7c:95:10:20:02:36:ca:1a:c2:99:
50:bd:ce:45:16:1a:e8:09:b7:b1:b7:b4:5b:df:f2:
89:2c:3a:f4:94:ed:c8:58:a8:a5:64:42:6e:e2:03:
91:2b:44:98:41:68:3b:96:a5:3f:6f:41:40:f0:28:
83:a0:eb:03:e4:37:ac:00:9a:f3:cc:01:17:41:b4:
76:21:ac:6a:6b:22:1b:b6:b0:18:4c:17:ea:8f:20:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:63:2C:67:58:6E:CA:95:02:7A:79:FD:11:9C:A2:F2:81:5D:FA:3B
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a2:40:63:98:19:0e:0b:f0:34:09:e7:76:26:2a:87:4e:1e:
c6:ee:c5:65:e6:b5:a4:c4:3e:b1:33:d1:3b:d9:47:55:8c:83:
80:99:46:9d:5f:bc:a0:b5:9e:9c:c6:fe:04:d0:51:82:da:9a:
25:45:1f:41:06:05:18:fe:6a:a5:13:91:4a:72:92:87:31:b3:
69:11:08:f8:6c:b6:8c:fd:46:0f:62:28:30:8b:3f:bf:59:eb:
17:63:75:83:6a:05:60:3f:c8:bd:12:2b:3b:24:b4:cb:c1:c5:
ad:04:06:4d:9c:ee:da:e2:b7:83:81:bd:ed:08:f6:4b:03:d5:
f2:45:44:79:b0:28:6b:fb:eb:8c:e2:f7:b1:90:44:9b:eb:50:
05:09:15:8f:23:95:46:e5:6e:3f:5b:c6:77:c2:8a:13:89:f5:
92:fa:d3:30:fa:b4:32:6e:38:52:1f:e8:25:19:ab:a8:a4:a3:
cf:b4:bb:b7:7f:2d:ce:32:d6:6c:14:24:79:40:2d:19:ca:cb:
72:8c:c1:f5:14:bf:c2:f8:df:66:52:83:37:8c:d3:e3:87:c7:
9d:cf:60:1c:02:8a:7a:93:e1:5c:ad:64:fd:fe:79:90:8f:1d:
0b:94:26:a0:f7:43:f8:1e:e0:9e:bb:e3:44:f4:38:e7:34:04:
0f:1f:e0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:02 2026 by rpki-client