Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
File: rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft (raw, json)
Hash identifier: Knu8qqq68Ve0LLxYbWOD9mgfZ0NnN+sF1CqWm57/prQ=
Subject key identifier: D8:2A:E0:10:2E:EC:CF:96:D7:25:73:A4:BF:79:56:D0:22:C9:F8:93
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Certificate issuer: /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial: 019D988640A402EC50A3D414B2F039718E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
Manifest number: 0572
Signing time: Thu 16 Apr 2026 23:00:28 +0000
Manifest this update: Thu 16 Apr 2026 23:00:28 +0000
Manifest next update: Fri 17 Apr 2026 23:00:28 +0000
Files and hashes: 1: Pq9ZuZBzVIXXjgHCRmaDImbQg2Y.roa (hash: 11bzHyr21wFIMkaSiukQigkPWPjefTdm2bknAq+/9g4=)
2: rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl (hash: 91w2bRQmaiIJb6gWhA5upwWGhSBFGGfXKTZfEf/7wEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:40:a4:02:ec:50:a3:d4:14:b2:f0:39:71:8e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Validity
Not Before: Apr 16 23:00:28 2026 GMT
Not After : Apr 17 23:00:28 2026 GMT
Subject: CN=d82ae0102eeccf96d72573a4bf7956d022c9f893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:e0:a2:9a:14:db:8c:c9:d0:a9:a2:7a:13:
4f:3b:7d:8c:c0:c9:7e:93:78:80:c7:bd:06:da:ea:
51:47:6e:6d:64:c7:75:68:5d:0c:27:ae:a2:ec:45:
45:73:a9:f5:94:62:09:49:28:60:a0:e0:ad:2b:6d:
77:60:3f:10:2c:c9:9e:79:ff:21:61:c0:1d:07:b9:
25:ae:cb:e9:0b:8f:2a:70:77:ad:df:d3:57:c0:89:
23:97:40:ff:78:95:01:16:d0:3f:07:32:17:0c:2d:
af:d1:bf:86:2f:3f:12:8d:bc:a7:6a:d3:53:32:2d:
84:f1:34:a5:c7:fb:ed:92:3c:b6:d9:46:d0:3d:dd:
dd:15:d6:21:ce:3c:7b:80:76:e7:f1:1c:a1:1c:cf:
af:a9:1e:bc:8e:32:fa:6b:67:a9:d4:bc:78:42:d3:
64:fc:57:15:67:f5:fa:06:c6:8e:e7:3f:60:b1:f9:
ea:e5:94:80:ed:2e:44:22:98:9e:0b:3c:71:e4:95:
a9:2c:92:95:68:5c:95:68:a2:0a:7a:3d:bb:b4:6e:
2a:80:fd:ac:a1:8f:e4:00:58:4c:b0:2f:e2:92:02:
5f:c5:ee:c5:65:31:d2:2c:9b:cc:9d:04:fc:58:92:
25:da:95:59:1b:06:71:ff:ab:6d:64:8c:cf:a8:c2:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2A:E0:10:2E:EC:CF:96:D7:25:73:A4:BF:79:56:D0:22:C9:F8:93
X509v3 Authority Key Identifier:
keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6b:8b:1a:4e:57:4b:0c:47:f5:27:f5:ba:78:c8:b6:1d:b9:
99:2a:c6:f7:a0:60:d5:c0:26:c3:80:43:b4:40:b1:9f:75:92:
d8:a0:db:c5:39:ea:65:f8:ec:fa:55:50:d0:8e:25:64:15:af:
c5:24:6a:cf:2c:34:72:89:29:78:cd:f4:ae:16:2a:ea:17:1a:
c7:a2:1f:35:6c:fd:50:b0:5c:c1:cd:0d:6b:a0:38:22:ba:d6:
55:3c:a4:d1:b1:dc:4b:01:77:e9:79:50:d9:8b:93:69:67:7b:
44:04:2e:34:0b:ab:48:17:8e:b5:3e:db:ad:d5:dc:d4:cb:11:
5d:9f:5b:c0:97:44:dd:fa:8d:b1:88:33:03:24:40:b2:8f:e0:
b5:87:c8:f5:f2:a5:97:a6:9c:02:6c:8c:de:29:d3:21:c4:f4:
fb:61:fa:4a:8c:84:fd:2e:e1:ad:84:b5:19:9f:34:c1:88:83:
e6:de:6a:19:bf:8d:04:29:e4:5a:11:c9:d9:0c:06:f9:cb:13:
97:d6:0d:96:de:3f:f9:8d:82:7c:52:e9:0b:51:20:1a:94:01:
35:e0:da:b9:74:67:19:78:f9:91:65:52:a3:b9:e8:d8:55:4b:
b5:9c:dd:57:3a:f5:09:02:98:9b:2d:89:b4:1e:4a:72:b1:28:
ce:ba:5c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:30:34 2026 by rpki-client