Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
File: rLVLzEkpGh8yt86tTylogtBTFJI.mft (raw, json)
Hash identifier: RbQ2tdTEQIiK3x3xUrAaWYX+zapjAl4bdSJo4crRFBg=
Subject key identifier: DF:FD:45:B5:A7:EF:85:3B:1A:A1:47:13:C5:C4:23:3B:26:C2:82:5D
Authority key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
Certificate issuer: /CN=acb54bcc49291a1f32b7cead4f296882d0531492
Certificate serial: 019DCE6356DB4919C9614462DBEB99C1467A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 10:01:49 +0000
Manifest this update: Mon 27 Apr 2026 10:01:49 +0000
Manifest next update: Tue 28 Apr 2026 10:01:49 +0000
Files and hashes: 1: Yk8K_yjB7gE3OoJVuZNkwQupR_M.roa (hash: tY5f7xqEp6Riff6tKlIsz63Q7nyfWnAQu/RKC5YJYpg=)
2: ax2msnEEnBpql0wtfN6LKLilaEw.roa (hash: khBC79DhTJMtOh4PAW+/zA1ZipTlEKexyh0uRxokVU8=)
3: k26mF9MmuzhiFpBjSAPIbbJx6NA.roa (hash: expI8ju4pO9T2VDPcQtkx64FF7f+z+QlEkn5dvh9hp8=)
4: rLVLzEkpGh8yt86tTylogtBTFJI.crl (hash: zOTx5tjryXTLG9SFo4XtNXeqkkfdwy0wxjRdLV6joBU=)
5: u1kMFExxSy9w7Ndw_xKckqwMp50.roa (hash: fWU8uqj9vLth8eAvIcefHvbFMC/gjcfidrkqDKu8wEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:56:db:49:19:c9:61:44:62:db:eb:99:c1:46:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb54bcc49291a1f32b7cead4f296882d0531492
Validity
Not Before: Apr 27 10:01:49 2026 GMT
Not After : Apr 28 10:01:49 2026 GMT
Subject: CN=dffd45b5a7ef853b1aa14713c5c4233b26c2825d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:e1:ad:5d:c8:ae:74:89:55:fc:1b:ab:e7:
1f:32:fc:1d:44:5f:1d:c2:27:48:9e:a6:30:82:ae:
0f:9b:51:06:36:4f:21:24:22:ee:ce:73:9b:1d:11:
9c:1e:ff:4f:4f:13:3f:35:b3:b4:4c:9e:e8:0a:82:
06:fc:b5:3b:3b:1a:99:58:5f:62:e9:56:10:33:ec:
08:e2:3f:0c:38:b6:9e:cd:27:ad:6a:29:95:2c:0f:
2c:d3:c5:02:cf:79:38:d5:36:75:62:00:a7:d2:cf:
08:cb:05:7a:a4:4c:ab:11:4a:dc:74:eb:60:58:6f:
77:6b:e1:fa:a0:5d:31:82:af:1e:6f:e7:07:d9:df:
a6:d4:67:c2:e7:ba:f0:95:3c:4d:f4:0e:76:12:c8:
98:ce:76:86:72:1b:b1:d1:f3:32:84:01:a3:c1:9d:
95:3f:6a:88:0f:e0:19:d6:40:6b:a3:08:b3:18:63:
9c:ae:46:94:48:fb:b0:3d:be:72:14:65:1b:3a:05:
37:20:92:29:23:7f:35:60:7c:ac:69:64:75:d2:1f:
54:d3:25:ff:29:0c:e6:40:d7:27:54:53:0b:cd:44:
b0:e9:86:e5:85:a4:ca:de:2d:60:28:4e:44:85:c6:
ce:71:d5:15:22:ea:cb:3a:87:12:83:23:e9:c9:cd:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FD:45:B5:A7:EF:85:3B:1A:A1:47:13:C5:C4:23:3B:26:C2:82:5D
X509v3 Authority Key Identifier:
keyid:AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:46:78:c7:99:66:63:17:41:8d:0d:71:9f:dc:d2:de:e0:b4:
b4:95:61:2b:30:a9:1a:69:76:f2:c4:ab:d8:ed:ab:84:65:27:
81:43:44:44:f0:32:fc:76:b9:87:08:b8:a9:66:c4:fb:36:e1:
d6:ac:8f:58:94:cf:9c:70:4b:5e:39:db:c3:90:e3:c5:ab:02:
49:6e:bd:da:71:06:5c:c5:af:00:17:7b:4f:86:3f:cd:61:7b:
d5:c0:cc:0f:11:99:7c:4e:7b:14:a8:ff:7b:b9:29:de:0d:41:
9c:e5:f5:67:f9:97:85:cb:9a:8c:a2:73:22:45:d7:63:34:c9:
dd:7f:48:48:4c:dc:d7:97:30:39:32:1c:db:2a:31:e9:88:bc:
74:e2:8d:38:34:d3:d0:57:37:f5:fc:c0:04:b5:32:33:6e:1e:
be:d3:f1:81:08:56:83:61:3b:93:80:3d:41:48:a5:9f:ae:3c:
80:e6:94:7d:30:49:a9:6d:97:3d:3a:8c:0d:00:85:0d:c3:f8:
22:85:4b:5a:52:ef:86:2f:1a:92:2a:24:2e:7c:60:a3:3f:49:
6b:2a:37:3b:cb:d2:4c:76:94:b8:54:f2:d0:af:44:f8:12:eb:
54:0f:8c:c1:59:3e:da:6b:7f:65:ed:3d:97:75:18:4b:fd:45:
4b:df:20:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:32:11 2026 by rpki-client