Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: HikLcNNtSgJKsB3zjh+xDLEd0Lts7xWC4ORsas5hWfQ=
Subject key identifier: 86:D0:2B:3D:44:88:C0:2D:34:F2:04:CC:F2:90:E7:E5:A4:9D:A4:32
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 019D8725884B3BEB61B8FDDA1FE444D390EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 18B6
Signing time: Mon 13 Apr 2026 14:01:16 +0000
Manifest this update: Mon 13 Apr 2026 14:01:16 +0000
Manifest next update: Tue 14 Apr 2026 14:01:16 +0000
Files and hashes: 1: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: L1nzT86fCbpjIoAhXOp+tCv3pU0BU5vC0wh1/61wFoI=)
2: jCsyE7PeO8MwI0WSmbdCicVhzBc.roa (hash: tv7EyDQ+IoB8bLb4GNx3/nwZP+BAJaSjfG7GlSBQTM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:87:25:88:4b:3b:eb:61:b8:fd:da:1f:e4:44:d3:90:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Apr 13 14:01:16 2026 GMT
Not After : Apr 14 14:01:16 2026 GMT
Subject: CN=86d02b3d4488c02d34f204ccf290e7e5a49da432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:15:37:a7:10:b3:ee:07:21:a1:f0:ba:fd:
86:8d:42:a6:29:b3:4b:48:51:c5:51:ee:d7:9b:4f:
dd:ba:77:b3:cf:65:1d:a5:7c:72:98:a5:fa:02:7f:
e5:25:6c:e6:df:b5:49:c6:75:4d:43:b1:28:63:cd:
97:26:47:cd:63:7f:64:a9:26:5b:78:70:c6:f3:11:
7d:c4:05:dd:66:b7:2a:c5:fd:2c:f8:b9:a5:1b:52:
38:6d:ec:f1:e0:fd:a5:04:60:13:c2:e4:c5:cf:6d:
52:91:c8:f7:3d:10:cc:1a:77:16:db:ff:09:40:9d:
3e:47:cc:29:25:a1:15:80:ca:dd:e9:cc:5f:cc:72:
4a:d9:4d:a3:15:0e:d4:bb:38:1f:fe:db:99:97:fa:
c2:45:12:a3:4b:e0:3d:90:2f:1f:48:31:b2:d2:92:
9a:59:7c:1e:b2:1b:b7:03:a9:7a:50:2f:a1:e7:81:
08:4f:37:d7:26:d3:b9:96:eb:9d:e8:41:1f:80:2f:
d7:49:58:d6:09:ba:c8:b6:a8:30:41:c0:9c:3a:9d:
d4:ba:c9:6f:42:85:f4:17:df:f6:3e:a8:0f:0d:51:
49:19:38:11:5d:cb:26:41:c8:5d:a8:d3:a5:d0:c6:
1f:09:c0:92:6b:e7:a1:45:50:dc:24:eb:8b:12:f3:
e1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D0:2B:3D:44:88:C0:2D:34:F2:04:CC:F2:90:E7:E5:A4:9D:A4:32
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:87:82:a5:8e:e2:9b:f3:fd:1e:09:33:fe:e8:64:32:2c:03:
f3:3c:bc:ac:25:94:4f:16:dc:c5:e5:fd:b9:51:96:64:8a:e8:
fa:31:11:54:52:40:4f:58:bc:6a:da:7b:ea:fe:92:c9:27:63:
85:60:96:3b:f4:9c:d7:a7:56:04:0b:8c:c8:06:0c:ba:e9:ce:
1b:62:80:5c:a1:20:f8:d5:82:23:14:c6:39:be:75:30:52:98:
d2:a8:59:85:39:85:a0:6e:72:f2:bd:da:99:94:41:2d:fb:ad:
ca:49:34:a1:71:97:5c:18:af:53:d4:b2:40:e2:72:51:4c:83:
01:63:0f:a3:3f:02:cd:f9:2f:06:cf:ea:2b:10:ac:36:17:c2:
84:ba:dd:e3:ca:62:df:03:ea:25:11:b5:a3:e0:62:4e:5b:63:
09:92:f0:93:8c:ce:c9:36:df:61:14:5a:d5:df:a6:30:8d:1c:
a2:4b:81:50:cc:72:fa:b0:13:d5:91:6b:55:fe:ca:89:dc:a6:
2e:06:67:c1:43:79:02:1e:4f:45:cc:28:4f:4d:a0:39:2a:39:
c6:e9:0c:cf:f9:21:c8:9d:0e:1a:2d:4f:d5:44:ef:91:dd:d2:
81:4b:ef:cf:8e:85:6f:9d:38:cd:6b:c5:cb:a9:64:79:b4:06:
b9:16:2c:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2HJYhLO+thuP3aH+RE05DvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYzIwYmU2MTY3ODkwMjQ3MzAzMjE0MTk3NjU4Y2E3Yzk2
NzYxNTAwHhcNMjYwNDEzMTQwMTE2WhcNMjYwNDE0MTQwMTE2WjAzMTEwLwYDVQQD
Eyg4NmQwMmIzZDQ0ODhjMDJkMzRmMjA0Y2NmMjkwZTdlNWE0OWRhNDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/kVN6cQs+4HIaHwuv2GjUKmKbNL
SFHFUe7Xm0/dunezz2UdpXxymKX6An/lJWzm37VJxnVNQ7EoY82XJkfNY39kqSZb
eHDG8xF9xAXdZrcqxf0s+LmlG1I4bezx4P2lBGATwuTFz21Skcj3PRDMGncW2/8J
QJ0+R8wpJaEVgMrd6cxfzHJK2U2jFQ7Uuzgf/tuZl/rCRRKjS+A9kC8fSDGy0pKa
WXweshu3A6l6UC+h54EITzfXJtO5luud6EEfgC/XSVjWCbrItqgwQcCcOp3Uuslv
QoX0F9/2PqgPDVFJGTgRXcsmQchdqNOl0MYfCcCSa+ehRVDcJOuLEvPh6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbQKz1EiMAtNPIEzPKQ5+WknaQyMB8GA1UdIwQY
MBaAFC/CC+YWeJAkcwMhQZdljKfJZ2FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYt
MjQ0OWEzZWM5MjNlLzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYtMjQ0OWEzZWM5MjNl
LzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIeCpY7i
m/P9Hgkz/uhkMiwD8zy8rCWUTxbcxeX9uVGWZIro+jERVFJAT1i8atp76v6SySdj
hWCWO/Sc16dWBAuMyAYMuunOG2KAXKEg+NWCIxTGOb51MFKY0qhZhTmFoG5y8r3a
mZRBLfutykk0oXGXXBivU9SyQOJyUUyDAWMPoz8CzfkvBs/qKxCsNhfChLrd48pi
3wPqJRG1o+BiTltjCZLwk4zOyTbfYRRa1d+mMI0cokuBUMxy+rAT1ZFrVf7Kidym
LgZnwUN5Ah5PRcwoT02gOSo5xukMz/khyJ0OGi1P1UTvkd3SgUvvz46Fb504zWvF
y6lkebQGuRYsBg==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:56:36 2026 by rpki-client