Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
File: LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json)
Hash identifier: v7rd+13FwtRwImlrlOsrz7le7Vi8K+QGVdmFGHqwAO8=
Subject key identifier: E2:9C:47:0E:21:AA:38:BD:1C:2B:3A:8A:F7:F5:64:DF:76:D8:B8:CA
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 019DA8D55A3E6D9851E0EB6C9BCBF2A096D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
Manifest number: 18CF
Signing time: Mon 20 Apr 2026 03:00:47 +0000
Manifest this update: Mon 20 Apr 2026 03:00:47 +0000
Manifest next update: Tue 21 Apr 2026 03:00:47 +0000
Files and hashes: 1: G2RDv2bQMM6VkTN7V-5M9yZ4tFE.roa (hash: vsyuYrOVDwT5WEpdCQyY3/LeFAhiTt0ioFA3ViytW0w=)
2: Gqk3HeaV0au9T4DEhe8Q6dNAwh8.asa (hash: sHOLc6rxic8mt40+Kc4tGFD0dGCTe4h6CEWIfcWi1Ak=)
3: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: vaGHzVMS7/BIZre450PANHeqEus8prU05bqeMBBHQPo=)
4: lK_21cfqHhmJDzSShJrfpf28gUs.roa (hash: kBqpwIbu+aOiILYXAzJqhtjAR9DT0AhDNrOMT8mT30s=)
5: mMjQwsKF24ZKL7c4zTHAfg4rumM.roa (hash: G+TwoGVMZse5gGI9aYgtJxQEsuU/r7y/8I2CjknEOrk=)
6: rhnuSlklAcRfdNDcijpokrlLKnY.asa (hash: fPv+G1Wx6OcUMrSLYnbyLQb9ZbCwNUGOah/2QiGmDMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:d5:5a:3e:6d:98:51:e0:eb:6c:9b:cb:f2:a0:96:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: Apr 20 03:00:47 2026 GMT
Not After : Apr 21 03:00:47 2026 GMT
Subject: CN=e29c470e21aa38bd1c2b3a8af7f564df76d8b8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:2a:0d:79:1b:89:88:e0:e4:20:35:8e:14:
79:3e:5c:8b:af:95:64:dc:58:e1:b7:7d:b1:3f:4b:
ec:02:44:b2:0b:b6:36:d1:f9:33:88:42:82:fd:28:
f2:47:08:51:4a:ed:91:ec:f4:ab:0a:7c:3a:3f:8d:
48:bb:aa:95:1f:16:fd:a7:04:bd:eb:16:67:45:4e:
d2:e7:bc:d0:96:ec:b9:79:ff:72:50:39:99:8d:ff:
21:44:7a:93:ce:a0:85:a5:5b:6d:9b:c4:a0:b5:0d:
d3:1b:79:31:f6:14:06:1a:98:7d:14:a0:93:b5:94:
26:83:ba:5e:d0:5e:65:31:d8:be:51:03:69:c7:78:
39:34:8f:5c:2e:a4:5c:4f:a8:04:dd:eb:41:f3:a6:
e3:5e:88:a5:03:37:f0:a5:b2:25:b7:9c:67:20:9f:
e5:4c:5c:8c:20:8f:b3:06:82:2d:00:e7:48:d6:cb:
07:b0:5e:2d:17:fc:4e:61:93:17:f6:03:eb:ab:b4:
6a:a8:b2:1d:ec:13:f7:1b:1b:6f:33:12:fb:b2:21:
ce:3e:4d:2b:d4:51:4d:c3:de:93:ce:7b:d6:13:20:
8b:54:e7:40:e2:e4:5e:05:e0:06:23:03:72:b7:db:
44:95:59:8b:e9:ed:e2:e1:41:12:90:b4:3c:c6:e9:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9C:47:0E:21:AA:38:BD:1C:2B:3A:8A:F7:F5:64:DF:76:D8:B8:CA
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2d:73:86:95:92:de:bd:0f:0d:e1:c9:39:d5:06:84:3f:d3:
a7:97:bd:cb:3d:d8:92:94:81:43:28:fa:b1:bc:1a:9e:bf:4a:
7c:42:98:65:a0:00:22:da:f9:8b:57:a9:d6:2c:b7:4a:bf:a4:
ff:e6:c6:af:83:bf:5a:c8:9e:22:3a:b6:7a:c3:46:71:a1:ae:
c4:cd:14:48:1b:b1:91:36:bf:42:82:41:13:94:60:e0:7f:ef:
6c:3d:83:38:33:04:c3:19:cd:50:01:75:f0:61:5c:3c:73:45:
a1:0b:e2:48:8a:fd:fe:a0:f1:51:89:d3:af:92:c2:6a:11:d8:
b7:e0:dd:dd:ca:50:f5:da:5b:84:3b:18:7a:a3:9e:a5:fd:21:
f6:cc:aa:fc:42:fb:1a:4b:2d:6f:9a:3a:56:fb:c0:1a:72:10:
cf:c0:33:3d:66:16:1a:f3:93:29:7d:97:ad:f7:36:4f:6a:c3:
c4:38:6f:24:cd:32:dc:a8:79:b3:0d:bb:47:41:91:09:b5:41:
3c:64:a7:a3:b6:70:e0:71:04:fb:dc:ee:ac:9b:47:db:35:18:
fa:e0:cb:90:12:ea:fb:74:ef:aa:44:22:26:47:f2:c5:e4:52:
e3:71:d1:b1:00:ee:f5:ad:5f:ce:df:18:2f:59:7e:90:e1:c3:
80:eb:df:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 09:39:32 2026 by rpki-client