Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
File: lHjtPq1if84WxRgCUMRmIXMY1lw.mft (raw, json)
Hash identifier: 0kbPIBn/iVCeopM/TU+0/roQGeARA3PVoZs8eWj1OBA=
Subject key identifier: 00:CB:EC:59:43:36:09:B9:AD:06:39:F8:FC:E8:6C:21:60:34:FE:02
Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c
Certificate serial: 019D988697368A609A80174D7F92B995A6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 23:00:50 +0000
Manifest this update: Thu 16 Apr 2026 23:00:50 +0000
Manifest next update: Fri 17 Apr 2026 23:00:50 +0000
Files and hashes: 1: 3El05iYRSjjsnnMmSgg5UzcIJzI.roa (hash: lu4N0zTDe8PsZfTOKcSd8MPmVfa3fQOGOtCh01kU1Ak=)
2: lHjtPq1if84WxRgCUMRmIXMY1lw.crl (hash: rWkCTwfCJ1ICt3CubvpO9XH0TPw8xiKTRSyyzNDw8xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:97:36:8a:60:9a:80:17:4d:7f:92:b9:95:a6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c
Validity
Not Before: Apr 16 23:00:50 2026 GMT
Not After : Apr 17 23:00:50 2026 GMT
Subject: CN=00cbec59433609b9ad0639f8fce86c216034fe02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:59:dd:e7:ba:9e:9c:25:66:ee:f7:e1:9c:
8a:37:67:ad:25:08:a9:3f:82:0e:a4:56:eb:55:58:
a0:bc:bd:fe:2e:6c:b8:5d:38:4e:26:20:7e:6c:64:
28:dd:f2:d8:57:f8:32:c8:da:0f:8e:6f:26:c2:5d:
0b:48:5f:9a:bf:af:2b:e6:fa:14:c3:8f:b8:ed:25:
bd:17:f7:fe:e9:43:42:71:0b:89:81:5c:47:c1:3c:
67:67:ac:8b:d8:66:ad:53:a2:2f:80:f0:4a:c0:53:
9c:93:5e:83:b5:a7:c9:40:62:f1:49:7a:f7:32:95:
e0:98:2b:b5:7f:64:01:04:66:a9:8e:a6:15:16:97:
9c:fd:56:34:26:78:39:57:c9:d2:fc:44:49:1c:77:
71:39:e8:90:8a:22:89:26:74:64:16:17:54:e9:1f:
28:d4:92:0d:c1:08:5a:6c:e4:7d:f3:ef:f6:d4:48:
7b:be:aa:53:c1:9a:54:bb:9b:09:66:1e:0a:29:f7:
0f:38:94:09:24:ff:89:b8:ba:70:3c:80:bc:4d:d8:
5d:6d:80:a7:85:43:a5:9d:89:40:65:82:b9:e0:03:
b0:42:1b:b4:96:14:89:79:db:cb:04:86:77:d7:6e:
e5:34:fc:54:14:45:53:a5:e1:48:26:d2:5a:d0:8d:
46:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CB:EC:59:43:36:09:B9:AD:06:39:F8:FC:E8:6C:21:60:34:FE:02
X509v3 Authority Key Identifier:
keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:34:3a:63:5a:c0:ad:ca:ad:e2:0c:11:4d:77:be:53:3f:32:
2b:bf:b2:76:9c:70:80:10:85:00:51:4b:af:20:45:a7:19:ac:
25:9e:2a:fb:f3:95:8d:26:af:34:6e:be:3b:a9:69:c3:ff:0c:
a3:6d:18:97:78:56:1f:67:f1:5a:36:e2:8e:54:6d:a7:62:bc:
b3:45:8d:1b:7d:ef:40:4d:f5:53:99:4e:d5:ac:a8:93:e6:18:
3e:1d:6b:3e:69:a4:a6:07:63:36:7a:c0:61:64:57:6e:e6:69:
4c:f7:0c:74:7a:83:d8:de:b8:12:3f:91:56:6a:44:99:b0:81:
78:3c:b7:e9:b7:ca:a3:09:cf:f7:ed:c5:1a:7d:13:ff:43:61:
53:ac:aa:01:0c:37:58:05:48:cb:f3:66:74:c5:41:0d:d6:6a:
56:98:18:25:37:a7:42:9c:4e:55:92:d3:66:15:48:79:f9:52:
12:e0:b1:43:04:89:15:99:e0:66:87:68:c3:d1:17:9c:be:13:
52:5a:27:50:07:65:01:5f:b5:19:ad:62:70:b0:0a:38:60:4c:
a7:c1:25:e9:40:b7:b0:8e:25:e3:1e:e3:d0:59:a0:75:66:6a:
a1:1b:eb:fa:d9:6f:89:65:63:c1:2e:24:ce:4a:b5:36:34:25:
fa:10:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:04 2026 by rpki-client