Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: 3t8Yu0d8kSb/kFlWr31hthbyEes1weawhn7TLH+NUrU=
Subject key identifier: A7:08:41:5D:C3:6B:81:51:1F:B8:9A:EE:A1:7E:D8:5D:CB:1D:AE:04
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 019E1E6C83106024F5667C74E479BE126166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 17E6
Signing time: Tue 12 May 2026 23:01:28 +0000
Manifest this update: Tue 12 May 2026 23:01:28 +0000
Manifest next update: Wed 13 May 2026 23:01:28 +0000
Files and hashes: 1: BgkebpBhISi7yrdl5zgWc6kxIH4.roa (hash: X8DOyattSG0MTouveclCaC/OSKoml4GgvWQUYGFm67c=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: 4SbSWCOy6Y16TIcIfzghiHrLrMtFDES9Z53q194/+iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:83:10:60:24:f5:66:7c:74:e4:79:be:12:61:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: May 12 23:01:28 2026 GMT
Not After : May 13 23:01:28 2026 GMT
Subject: CN=a708415dc36b81511fb89aeea17ed85dcb1dae04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:78:82:5b:33:11:a8:1d:f0:1a:51:01:f6:
26:b7:e7:a9:4b:40:93:f5:ba:ae:32:a6:df:5b:54:
ac:ef:6d:82:aa:54:31:fc:9b:69:43:43:21:0b:55:
dc:cb:fa:ed:65:9f:cb:6c:31:be:f2:2d:51:f3:62:
8f:e9:3f:47:d2:2c:ce:c1:6b:99:9d:a7:5d:c8:ac:
36:6a:9e:a3:ca:61:42:53:33:b2:87:60:ad:cc:67:
91:dd:36:23:b6:26:35:64:f4:68:af:de:34:02:17:
2d:83:4c:53:38:bc:55:ec:7c:5b:6b:ff:3f:c3:60:
70:e4:ef:e2:a2:5c:dc:39:7e:d1:89:af:b9:cc:48:
37:47:69:c2:cb:30:db:74:94:da:0a:ae:5f:a1:23:
ef:a6:53:51:b5:19:d2:50:dc:31:94:be:f5:fc:cf:
83:8f:ec:7c:5a:e9:e0:17:80:ae:d4:36:9b:67:54:
63:39:c3:3c:dc:d1:8c:51:8d:83:4e:f8:d4:15:dc:
e7:a9:ae:d2:a7:da:62:79:fa:72:d2:ae:b4:3c:2c:
27:a0:7d:22:d5:c9:8d:10:f2:26:6a:5b:05:8f:93:
ee:c7:e8:0b:b0:bf:8d:30:6d:d7:11:df:0d:2b:a5:
ce:4c:bf:e1:3d:fc:48:cd:64:be:c7:14:2c:62:01:
b5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:08:41:5D:C3:6B:81:51:1F:B8:9A:EE:A1:7E:D8:5D:CB:1D:AE:04
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:61:cb:ac:25:0c:d5:2a:4b:3c:b7:61:1d:f9:de:02:a0:d6:
a1:38:7b:13:c6:f0:59:65:35:14:29:3d:ae:63:77:d6:10:0c:
5e:1c:70:ed:e9:ff:6b:b6:cc:0a:ce:07:68:39:3b:4d:8c:78:
b3:07:c7:d6:98:4c:fd:8f:e6:c4:99:79:33:51:69:83:51:0f:
9d:a5:02:76:bf:7d:c3:95:37:26:3c:d5:fc:d2:81:bc:ad:b1:
20:77:cb:26:51:58:12:e9:7c:97:af:ad:31:fa:b6:6c:49:50:
4f:09:f5:4c:91:f0:ab:91:a0:e6:bb:34:2d:8c:ac:58:82:31:
bb:5e:de:61:4e:03:ea:bf:0d:2b:31:bd:e8:8c:1c:1c:42:68:
88:7b:f4:05:a0:2d:b9:5e:f4:46:9a:39:e5:1b:09:8b:06:5f:
75:73:e6:a6:a9:f4:ce:11:4d:66:93:bb:71:e3:7e:e5:0b:90:
88:a0:c8:0f:02:fc:cb:0a:94:a7:4e:36:ec:65:5e:aa:8d:82:
aa:17:53:78:4b:4d:ef:27:1a:81:04:62:66:25:c9:f6:93:73:
eb:53:fc:ca:95:05:c6:0a:cf:cc:d7:dc:34:81:44:4e:1a:77:
ad:24:e9:e5:fd:f3:0f:39:39:b3:d0:3c:a1:2f:d0:d0:dc:fa:
8a:23:12:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:03 2026 by rpki-client