Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
File: lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json)
Hash identifier: SxcEZWhqAoWGSskygay/RPcYe5pFBZc7af9LzHAofGg=
Subject key identifier: D6:76:D8:71:02:52:56:32:43:3B:68:FB:03:AE:49:39:6E:B4:4A:58
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 019DCCAABEDFA8381CB127F1059A4A2F80B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
Manifest number: 18EC
Signing time: Mon 27 Apr 2026 02:00:35 +0000
Manifest this update: Mon 27 Apr 2026 02:00:35 +0000
Manifest next update: Tue 28 Apr 2026 02:00:35 +0000
Files and hashes: 1: 1J8iJjDshk0K5lYg4l_c2ofYegs.roa (hash: qSMx+hDj/RyqV4hBcH75SbfZI3k3bmyUJ0HCop3PjC0=)
2: 6SfBDoyfsTmm1mRpfbVHUgPIiO0.roa (hash: mhMaDP22Cm+kaRi3w+odof2fSxz3QNCIZTnea/2LJgc=)
3: GLowxEJyGBp1nEMdWvtqSz0VZiY.roa (hash: ML4E9JdDZZwBbJSqUGhG3KgDDzmdzocsJW0UdpRnOpY=)
4: KpxXMtTi-pZ0mh1UsPIB5GCC_VA.roa (hash: DFWENcijqgC7xsryWlbw+k7LPwKlKMpaUsREr9258uo=)
5: VrsyNZBxGyfOA3YVVpgqeIcESVM.roa (hash: c4qHeMt/gTBhla4MWGpV3XvJ5hr3kuLWCCMFzUqgBBk=)
6: ip5vS9fNHon-mqXtQ-q53u5FWlI.roa (hash: Fs/iN9Gd0AJYsYcUoU48tZmbjn+IsjIvYWzIldNyw9A=)
7: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: NUQqxwrstmc7Ya+KGDsKlPqlNjYjaNuwCBVdviPzavw=)
8: o3zw5qxbUQAN4ngJ04Ua6I_EVso.roa (hash: R6H99VUdlL3VQQMNsfOEfD5tZa5hySUkiaztWdwSB/8=)
9: sdp3C8CB4fN9rVfwq3cSWXaBt2Y.roa (hash: Pc4iJgvyu3odfRJruIllViWmrmTVoSgp0uUpk5XKRjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:aa:be:df:a8:38:1c:b1:27:f1:05:9a:4a:2f:80:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Apr 27 02:00:35 2026 GMT
Not After : Apr 28 02:00:35 2026 GMT
Subject: CN=d676d87102525632433b68fb03ae49396eb44a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:ff:96:9d:db:ac:29:85:8d:74:f5:28:24:
f1:e5:d2:48:60:47:14:34:9d:00:31:7f:50:e7:1a:
2d:4b:ee:d5:6f:21:29:2d:f3:8a:cd:11:1d:70:94:
0e:c4:8a:1f:b2:7b:13:d7:40:11:d2:4b:e8:42:a3:
c4:3c:5d:9c:a1:76:52:78:73:19:95:94:57:1a:3c:
01:af:8c:22:d1:69:29:de:3f:dc:93:18:ce:4d:c9:
0b:f9:32:b5:06:0b:80:6f:3f:9b:7c:16:22:5d:ec:
ee:bc:a2:6a:4f:1e:6d:72:16:75:f8:14:c3:e9:d2:
a9:e7:ef:7f:5f:a3:49:7c:2a:4f:86:44:15:27:7a:
49:2f:5e:b6:ad:63:81:b7:5a:e9:26:fa:9b:d3:45:
f8:c4:48:e4:02:c2:f2:9d:64:e0:7b:5d:d5:7c:d9:
73:4d:52:8a:24:5d:f9:7d:09:63:f9:7a:a7:c8:73:
02:56:10:db:cd:16:42:12:3e:c0:d3:67:9c:c2:ec:
3f:6a:63:ec:81:d0:97:8d:f8:9f:43:64:81:34:71:
ee:bd:91:50:ef:91:14:dc:c9:eb:61:59:8b:2e:8d:
af:12:5a:7a:af:3e:e2:ee:ef:29:b4:51:3a:e2:87:
05:63:1c:f5:09:19:c5:7f:c1:e4:35:b8:5a:df:ae:
df:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:76:D8:71:02:52:56:32:43:3B:68:FB:03:AE:49:39:6E:B4:4A:58
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e1:95:81:a7:4f:d5:0b:dd:23:c1:c5:db:d0:6c:4d:35:de:
ef:a3:a4:11:86:89:4a:7f:a4:b3:ba:d5:e4:59:01:b0:54:ea:
44:e1:ca:0b:fc:13:f9:6b:b4:87:30:5d:8d:ee:de:7d:97:68:
e2:dd:8b:2c:ac:9a:b6:6f:54:a2:d1:e3:4b:15:ea:9b:8e:3b:
a8:ee:fa:aa:fc:90:2d:95:7f:b6:e2:c7:b4:cb:37:aa:c6:2f:
d1:32:b9:07:fd:c3:44:fa:10:83:87:6b:b3:8f:8f:a5:13:75:
46:4d:87:31:cf:2e:1c:c5:e1:cf:12:1a:21:7d:49:8c:b9:b5:
df:59:3c:c6:a2:54:10:86:68:d4:99:24:f8:b1:0b:11:35:9c:
e7:15:f1:85:bc:f3:92:67:48:9e:0a:09:66:77:1c:1c:5f:86:
1e:9a:ab:20:71:c0:3a:ae:75:e5:ff:17:cf:02:50:60:fb:74:
0b:9a:9e:6e:2e:1e:86:11:09:56:d2:73:18:a0:fd:7a:ee:3e:
dd:ab:5a:e7:e2:c2:1e:7b:77:89:19:b0:cd:4b:a2:b2:30:9c:
b7:47:90:fd:9e:b6:04:13:0c:e7:38:ae:f1:3a:1d:40:f3:da:
7b:5b:56:f0:fb:82:5c:95:ff:1c:5e:59:6e:ba:e7:73:fa:3c:
4f:6c:a0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:45:03 2026 by rpki-client