Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: +ClRopbdlE3MxR2DgR+E1Ga7iBBxSxt8E0BTG1HKcVQ=
Subject key identifier: F5:2D:B5:6C:46:1D:A8:28:A6:47:79:D5:1C:DF:91:FD:26:8A:46:F6
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 019FA974E461DCFF73B55FEB40DF81D44E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 16:00:37 +0000
Manifest this update: Tue 28 Jul 2026 16:00:37 +0000
Manifest next update: Wed 29 Jul 2026 16:00:37 +0000
Files and hashes: 1: MDOYojRzK_b13iyI5P24Yv-1OfI.roa (hash: 9C3SntnocakqcNtFoy8WdbT469VxGnuBBybMiDuCskI=)
2: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: SJqDiHGvF7BdljucYyz3/wnsieJy7GTJadyLT0ayHmY=)
3: tD3EeMEBT3yEWBttpsWGl0bRetk.roa (hash: ckduoJYFFvUfXMRG101fPH5je/+Pxdi1LergZOeIB/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:e4:61:dc:ff:73:b5:5f:eb:40:df:81:d4:4e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Jul 28 16:00:37 2026 GMT
Not After : Jul 29 16:00:37 2026 GMT
Subject: CN=f52db56c461da828a64779d51cdf91fd268a46f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:cd:f8:ff:3f:0f:6f:e6:b9:43:0b:e9:33:
c4:99:fc:fb:6f:90:5d:45:b4:4c:93:99:bb:8b:8e:
8b:05:e4:36:ca:20:82:55:d5:1b:57:ad:c0:4d:be:
f1:b7:fd:76:70:73:62:92:02:50:c4:d1:9e:29:b2:
5d:30:db:b9:74:6a:12:43:06:42:c1:4f:2a:ce:1d:
90:53:b4:cf:34:a8:7e:a4:69:3e:8b:9a:69:38:e0:
0f:93:ca:e1:42:8a:94:e8:a5:2f:8d:af:c1:bc:c8:
2f:7b:94:e6:31:9c:a4:47:a9:45:1d:90:5a:7b:43:
97:42:f1:6b:cd:68:ea:02:63:06:5e:b2:44:1a:8c:
80:0e:fa:85:7d:78:12:94:2c:64:7a:8c:0c:6c:4d:
71:9f:a7:b5:03:8b:17:d4:fe:28:08:b4:2a:e5:7f:
0c:dc:55:2c:50:97:6b:ca:92:e3:17:e7:f3:5c:82:
c8:5d:e8:29:37:2f:d1:23:bb:cc:a4:20:99:0d:f8:
2a:5b:d0:98:32:1d:72:51:31:33:0a:3d:ae:0d:37:
b6:79:27:f3:41:3f:5f:16:39:9c:90:38:40:d3:57:
04:f7:64:0e:34:17:82:79:12:d7:c8:92:af:3a:cc:
8e:3c:c6:be:84:96:35:36:7e:03:28:db:96:63:d4:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2D:B5:6C:46:1D:A8:28:A6:47:79:D5:1C:DF:91:FD:26:8A:46:F6
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c9:31:c4:27:13:95:55:29:7a:4d:d4:96:9d:14:a5:0b:b4:
57:50:5b:39:de:6e:04:48:da:55:d6:87:96:24:57:75:27:9a:
69:93:a7:af:ae:d9:6d:79:4b:eb:e7:46:99:f9:05:ad:01:26:
8e:ec:24:60:62:90:78:cf:c9:41:03:a6:a3:e6:de:3c:61:9a:
81:23:fc:f5:b0:8a:fd:26:87:e2:a2:71:dd:2a:38:5b:81:f6:
2b:6b:b9:99:00:e1:96:17:e5:5a:5b:ac:2f:2a:6c:b9:52:d6:
83:39:1a:02:92:01:59:42:2e:bc:85:85:68:c0:d4:14:e4:8b:
39:cf:67:de:b3:ea:be:d1:58:bb:dd:91:6d:b6:08:12:a2:a8:
ee:6a:8e:33:b7:cb:11:c2:ac:3d:1f:ca:1b:88:13:8f:f2:cd:
ec:7c:58:84:87:ec:04:3e:56:15:f3:e6:f3:c1:52:16:9a:fb:
8a:18:b7:29:59:a3:98:89:ef:ce:75:6a:1d:ae:2f:dc:98:3b:
06:d0:2e:65:a8:5a:74:03:02:eb:06:46:80:6d:26:6a:ce:80:
8c:cb:02:d0:d7:d8:e0:33:6d:68:08:c4:44:38:91:04:54:ea:
78:28:6f:70:73:b8:13:d9:52:15:d6:72:7f:eb:13:97:07:e2:
2e:d5:1c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:04 2026 by rpki-client