Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: a9ux8U+qnp+yJW6VQ5nadJhVVFblZQrdFNRDPg3c8DM=
Subject key identifier: 12:18:43:23:08:F0:43:6B:DE:D2:CB:6F:D6:1A:04:0B:89:30:85:63
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 019DD0BF0CF24C0F85FFF402362D0FA76185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 21:01:14 +0000
Manifest this update: Mon 27 Apr 2026 21:01:14 +0000
Manifest next update: Tue 28 Apr 2026 21:01:14 +0000
Files and hashes: 1: LWvq7pLhMy-PN5vUVHp1gTDrkpg.roa (hash: tizgLykrZfe0HsgjC7gUJhP13B/6k81gtOYYeh2hEWo=)
2: N3Nyt4Ek1PnmJMu7E3VIjuLxr70.roa (hash: Sn50iCRfjS3DuTRB7OzC5uLuhGadJioDHeYI0k2FZBI=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: nfOpFEFX0/Bzh58FpV6+jPiTN6hSyMs/2e/w3+lE+ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:bf:0c:f2:4c:0f:85:ff:f4:02:36:2d:0f:a7:61:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Apr 27 21:01:14 2026 GMT
Not After : Apr 28 21:01:14 2026 GMT
Subject: CN=1218432308f0436bded2cb6fd61a040b89308563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:de:c0:f8:db:f1:52:c2:8e:6f:e4:6b:64:17:
79:d8:81:bf:85:b9:f2:33:4e:3c:1e:bc:5c:c4:46:
ea:d4:b5:d5:49:bb:02:f4:6d:c3:9d:7e:74:6e:1a:
7d:2a:c7:df:d8:1b:36:f6:7d:e2:28:b1:fe:30:a6:
ef:5e:a7:3a:d1:bb:70:53:0c:60:98:83:84:c0:9c:
d2:1d:09:68:d8:ea:7c:5b:dd:c5:d0:c4:72:01:a4:
2c:7d:3b:bb:4b:ed:5a:e2:bd:ae:4b:78:07:f4:f5:
2a:2f:16:cd:75:cd:8d:48:1a:65:44:64:fb:d1:7f:
c2:db:c5:47:81:8e:53:76:d3:e3:ef:92:d8:e5:ff:
47:fb:21:49:3a:91:02:31:39:2c:11:f9:7f:aa:ec:
2d:d8:3c:f5:36:8d:2c:bb:47:98:72:a1:e9:85:9f:
3c:ec:3a:28:90:8d:00:04:34:37:c5:d7:6b:50:fe:
e8:62:0c:63:2c:fe:c4:b2:46:b0:71:02:77:3d:9a:
09:4d:8e:e6:8c:7d:7a:10:5b:fd:f1:dd:82:5d:a9:
07:8c:4d:24:38:3b:86:d2:57:12:b3:6a:21:ab:7d:
df:c5:4f:f3:90:d8:8e:e4:e0:b0:31:ca:cb:bd:1b:
86:8d:10:6f:6c:34:1b:77:ca:3a:0a:d7:5c:ef:98:
4e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:18:43:23:08:F0:43:6B:DE:D2:CB:6F:D6:1A:04:0B:89:30:85:63
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5d:49:89:4a:cd:79:7a:32:a6:84:6c:e1:09:40:8e:03:08:
9c:45:25:75:e0:08:c6:fc:7c:d5:12:26:dc:e3:ba:4a:82:df:
c0:06:f4:2f:2e:20:90:33:82:04:30:de:e9:a6:d5:b8:0a:f3:
a0:39:f8:2c:87:29:2f:f0:23:50:1d:a7:3d:c7:9f:8b:5a:88:
7d:98:35:c4:b1:39:01:6e:cd:68:19:88:38:3d:3a:26:43:07:
79:5a:20:29:47:a9:01:45:17:18:69:29:76:1c:7f:bb:5f:ab:
20:b2:2e:13:2c:e5:ff:0c:46:e8:5a:c3:f8:2d:67:c9:e1:1d:
ce:3d:55:53:1b:ef:85:79:87:a7:c8:a3:f4:11:ad:98:62:bd:
c4:00:4f:cb:4d:d5:19:7c:c9:65:f0:2b:b3:82:7a:a3:81:62:
b2:2a:47:78:a7:ff:11:68:c8:c4:5a:c9:32:bc:d4:56:d7:ca:
f7:0f:de:d7:c3:83:94:96:cc:c4:4c:90:11:66:b5:03:8b:7e:
e1:21:5c:91:e7:04:82:2e:e7:0c:8c:ac:f6:ee:ef:6e:cc:55:
43:fe:1b:cc:f9:27:8e:62:f5:76:40:7f:48:38:8b:78:bc:9d:
85:c9:48:cb:4b:35:3e:4a:59:d6:3e:09:25:95:53:13:33:7a:
28:70:e0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:31 2026 by rpki-client