Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
File: _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json)
Hash identifier: WL4ECZoY5cROY0QWiT7vmEYPv7MBUrY9Zil+3EHvgpE=
Subject key identifier: 0B:C1:BF:20:54:C4:0F:BA:3E:D4:DC:3A:3A:94:B0:5B:FE:EF:0C:FF
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial: 019DD019C845191F6A9F525074A1C85EF431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
Manifest number: 18E4
Signing time: Mon 27 Apr 2026 18:00:43 +0000
Manifest this update: Mon 27 Apr 2026 18:00:43 +0000
Manifest next update: Tue 28 Apr 2026 18:00:43 +0000
Files and hashes: 1: 1-ijVMFl6GCcC6GGP7jpRptAbkME.roa (hash: 6WwqDb4fLLuH7fqrOWTiw7oz+ZLJGp2PJoPRlWydUCs=)
2: 41PdyGaqWfuZrGCiI7A6Pe8er08.roa (hash: fqabz9d9YrXMSNvuc4clJBMP1zUaniqoWE3YHtZWSoc=)
3: RpRW9hgIjPMfAZ842QdrIrNI7fk.roa (hash: 3sOUZl0+LvcVI79+33YVuGWAx3JxO70FfZgzplNUMc0=)
4: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: t3al0XduRZs/BslI/toUMdyQDF0Y6dHw3sp0xVcfzNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:c8:45:19:1f:6a:9f:52:50:74:a1:c8:5e:f4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Validity
Not Before: Apr 27 18:00:43 2026 GMT
Not After : Apr 28 18:00:43 2026 GMT
Subject: CN=0bc1bf2054c40fba3ed4dc3a3a94b05bfeef0cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:25:5e:58:3b:1a:4d:83:a8:a5:c3:7e:00:
ca:56:a8:62:35:3a:6f:ad:83:1b:e0:82:21:ce:06:
92:c0:e6:c8:00:0b:46:7d:a3:a7:95:e1:2a:4e:d9:
44:10:c5:7a:06:ab:b9:7d:d1:fa:d3:c8:17:ea:08:
ae:fe:0a:4b:31:1e:fb:12:e2:0b:21:c3:34:f6:f0:
1a:34:cd:cd:95:5d:c2:b1:b9:d3:03:0b:41:b9:04:
46:07:cd:33:da:61:d0:bf:40:84:ca:de:5a:f9:f4:
8d:81:c6:74:23:a3:05:8a:88:d2:d8:75:e1:27:73:
cb:ed:82:67:b9:5d:91:a9:5a:aa:71:4f:18:49:ee:
70:70:11:95:c8:9f:aa:aa:1e:39:8b:ac:99:42:a8:
13:c2:81:1b:9b:8e:fa:6b:6c:03:d9:d3:bf:a4:86:
6f:ce:dd:04:a6:d7:00:b3:a8:1b:75:fb:60:fb:36:
56:88:a8:a6:9c:c9:bb:51:75:9c:a3:6a:dd:59:6e:
a9:cf:e4:54:2f:03:ba:9e:f0:ff:d0:9b:14:b8:79:
21:07:c7:3c:66:e5:22:27:89:4d:02:0b:87:79:22:
f8:17:15:0b:b0:3e:48:d7:5b:94:02:15:34:ae:b3:
52:95:0d:04:c4:66:96:5a:11:8f:be:e2:e4:a9:87:
75:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C1:BF:20:54:C4:0F:BA:3E:D4:DC:3A:3A:94:B0:5B:FE:EF:0C:FF
X509v3 Authority Key Identifier:
keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:00:dd:6f:30:8b:7e:8b:b0:b5:c3:1c:cd:5c:3d:6a:95:b5:
d7:2b:89:06:49:d9:97:57:4e:75:0c:39:e5:87:25:db:08:16:
bf:d2:49:65:bf:e9:4c:f6:af:44:9b:1d:f8:7a:d1:78:c4:7d:
89:1f:9f:90:9b:0f:d2:1e:78:60:12:ed:3a:94:f8:d9:b7:74:
8d:c3:0a:a4:3d:41:bd:af:3f:3d:08:e9:9d:8f:22:04:24:b4:
8a:e7:50:92:93:da:ae:0a:b4:5e:4e:d8:a5:7b:a3:cc:bb:f8:
88:d4:8d:e0:b1:46:ec:82:dc:d1:86:ab:a8:56:b8:3a:0b:1c:
52:65:30:c1:71:bc:8c:3b:1e:84:95:19:c7:c6:92:77:02:2f:
ee:5c:68:a1:bb:1b:99:d2:d1:78:d8:3c:a9:3e:b4:d9:25:6c:
2e:49:ae:30:f6:07:e2:72:5d:71:39:20:a8:e0:d6:e6:09:f5:
d8:1f:2f:0d:28:48:b4:6c:7f:d5:3f:e7:c7:4d:53:f3:fb:1b:
b0:0d:e5:25:42:f7:44:bc:04:e1:d7:c0:3a:8f:ef:8a:59:0b:
be:0b:52:5c:67:d6:f1:1c:fc:68:92:a8:8c:20:19:c5:87:56:
f8:de:24:8d:8a:5e:8d:85:7f:4e:f6:83:00:f3:3f:ea:62:bc:
e8:f0:ac:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:24:41 2026 by rpki-client