Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
File: LViUkjuwAqQ0EogQYH37UmciAE8.mft (raw, json)
Hash identifier: 2MXMmsVLkbI1n3jcQcrcis1ScjUsJ47KlxO5mmUZuzY=
Subject key identifier: DD:DE:ED:B4:E3:9A:A3:C4:57:7D:76:E4:77:D8:A0:FB:CD:C1:B7:DD
Authority key identifier: 2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F
Certificate issuer: /CN=2d5894923bb002a434128810607dfb526722004f
Certificate serial: 019DCE2B649BB4A8E2FE1772834252B81EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 09:00:43 +0000
Manifest this update: Mon 27 Apr 2026 09:00:43 +0000
Manifest next update: Tue 28 Apr 2026 09:00:43 +0000
Files and hashes: 1: F8ssCXzm5DlQ97WN2xVb9wJjA_g.roa (hash: RedzK3Q4KVLEhYDQGEu2AFOE8F+deCMqCtqno/fcLrc=)
2: LViUkjuwAqQ0EogQYH37UmciAE8.crl (hash: ToQY83lMPOXluzVT9YXz3nv0DJVXAPa1YPVEhPPvVoo=)
3: Vdh3_1j9N9qxue8CD8c8TlPKZXA.roa (hash: DKeEzZKgIArxoLoLfWTEY4XadPn2TLkkEnTA5gJhx7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:64:9b:b4:a8:e2:fe:17:72:83:42:52:b8:1e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5894923bb002a434128810607dfb526722004f
Validity
Not Before: Apr 27 09:00:43 2026 GMT
Not After : Apr 28 09:00:43 2026 GMT
Subject: CN=dddeedb4e39aa3c4577d76e477d8a0fbcdc1b7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:58:8a:62:eb:21:cc:cb:d0:d0:e4:2b:3b:
1b:64:8c:bd:62:db:62:e3:a8:a8:9b:c7:98:91:d6:
9e:70:18:2f:5d:21:9e:27:ed:f4:58:ca:3d:b5:ea:
ba:54:6a:46:89:fb:70:9c:bb:98:4e:fd:00:5c:db:
e1:c1:83:e7:bd:18:d7:d3:d2:ef:4f:f3:c9:3e:5e:
21:a8:9a:43:21:b4:b7:5d:29:34:2e:20:2b:f3:0b:
0e:ca:5c:6b:22:2d:d4:9b:c5:21:77:d8:05:8d:60:
ad:2e:19:9b:b0:94:59:17:9b:e8:ce:4e:73:9f:ac:
87:8d:82:f2:73:66:fa:43:9d:ca:8d:59:72:30:a1:
dd:44:74:6a:7b:63:04:7a:9a:84:07:58:99:ba:1e:
9e:44:9a:64:98:5a:1b:1c:5d:41:04:e1:18:90:0c:
ae:ca:13:0b:d9:bb:da:37:a5:25:c1:93:d7:7b:1d:
5c:df:25:3b:e9:a6:03:20:e6:81:5c:42:66:8a:3a:
1f:68:4d:c5:7d:85:7d:fb:e1:c8:f4:f3:0e:a7:2f:
4e:b7:50:a1:40:c0:db:d9:e4:58:c1:48:a1:c3:6c:
fa:7a:03:b5:44:f4:bd:8a:e6:22:8c:75:7f:2e:7d:
e5:2d:07:95:49:88:37:48:05:0b:c1:73:17:2b:7b:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DE:ED:B4:E3:9A:A3:C4:57:7D:76:E4:77:D8:A0:FB:CD:C1:B7:DD
X509v3 Authority Key Identifier:
keyid:2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0e:7f:22:a7:c4:a3:8e:e9:d3:b1:aa:7c:0e:d2:79:f8:c1:
2f:a9:5e:93:05:75:32:85:d2:93:37:09:a6:df:4e:30:44:c4:
27:79:53:96:5f:58:6c:68:dc:37:a1:33:5e:93:d5:91:a5:18:
3c:01:91:5f:60:cf:5b:5d:c2:04:4a:4f:4d:de:a7:71:0d:c6:
29:00:5d:fd:42:f1:b0:85:33:e5:7d:c9:8f:1a:8d:cc:98:28:
ee:1d:00:ec:66:c4:d2:83:df:4a:59:7e:58:94:a0:71:dc:d6:
be:93:80:55:80:de:c6:a2:32:5e:dd:a8:e9:27:3d:ec:6d:0e:
6e:c7:ed:24:e0:f1:93:fe:a1:e6:ee:7b:9a:d9:79:85:e8:8c:
f2:e7:6a:7c:f3:c4:22:5f:61:2e:04:8a:da:ab:03:e9:3b:f3:
5a:7f:57:15:9e:f2:4c:71:eb:cf:e1:d2:67:ca:e0:21:54:ba:
92:84:76:ed:13:37:21:47:cd:ef:10:23:2c:82:a0:c6:c7:4f:
45:24:2e:e2:b0:95:d9:71:7c:dc:4b:21:71:4a:03:98:55:a7:
9a:81:e0:02:41:21:d4:a4:a9:03:94:04:cf:16:b1:a2:58:7d:
71:54:1f:44:f1:d2:4e:66:a7:1b:fb:88:60:51:e7:39:8f:db:
58:6f:ed:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OK2SbtKji/hdyg0JSuB6zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNTg5NDkyM2JiMDAyYTQzNDEyODgxMDYwN2RmYjUyNjcy
MjAwNGYwHhcNMjYwNDI3MDkwMDQzWhcNMjYwNDI4MDkwMDQzWjAzMTEwLwYDVQQD
EyhkZGRlZWRiNGUzOWFhM2M0NTc3ZDc2ZTQ3N2Q4YTBmYmNkYzFiN2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1tYimLrIczL0NDkKzsbZIy9Ytti
46iom8eYkdaecBgvXSGeJ+30WMo9teq6VGpGiftwnLuYTv0AXNvhwYPnvRjX09Lv
T/PJPl4hqJpDIbS3XSk0LiAr8wsOylxrIi3Um8Uhd9gFjWCtLhmbsJRZF5vozk5z
n6yHjYLyc2b6Q53KjVlyMKHdRHRqe2MEepqEB1iZuh6eRJpkmFobHF1BBOEYkAyu
yhML2bvaN6UlwZPXex1c3yU76aYDIOaBXEJmijofaE3FfYV9++HI9PMOpy9Ot1Ch
QMDb2eRYwUihw2z6egO1RPS9iuYijHV/Ln3lLQeVSYg3SAULwXMXK3sxaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3e7bTjmqPEV3125HfYoPvNwbfdMB8GA1UdIwQY
MBaAFC1YlJI7sAKkNBKIEGB9+1JnIgBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84YTUzNTMtMTRmMS00MGY2LWE0ODIt
YWVlNTkyN2I0ZGQyLzEvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84YTUzNTMtMTRmMS00MGY2LWE0ODItYWVlNTkyN2I0ZGQy
LzEvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHA5/IqfE
o47p07GqfA7SefjBL6lekwV1MoXSkzcJpt9OMETEJ3lTll9YbGjcN6EzXpPVkaUY
PAGRX2DPW13CBEpPTd6ncQ3GKQBd/ULxsIUz5X3JjxqNzJgo7h0A7GbE0oPfSll+
WJSgcdzWvpOAVYDexqIyXt2o6Sc97G0ObsftJODxk/6h5u57mtl5heiM8udqfPPE
Il9hLgSK2qsD6TvzWn9XFZ7yTHHrz+HSZ8rgIVS6koR27RM3IUfN7xAjLIKgxsdP
RSQu4rCV2XF83EshcUoDmFWnmoHgAkEh1KSpA5QEzxaxolh9cVQfRPHSTmanG/uI
YFHnOY/bWG/t6A==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:10:40 2026 by rpki-client