Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: 3Tmobo+3Wm+I0k9dhCRhGi15Ktn4s/25xgCJ9INWsDU=
Subject key identifier: F8:8D:54:2E:8E:0B:73:E9:35:33:4C:4C:BA:96:8B:4E:AF:74:B9:AA
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 01A0D4CB3B03244BE36EF8EFEFBDF849CA1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 19:01:23 +0000
Manifest this update: Thu 24 Sep 2026 19:01:23 +0000
Manifest next update: Fri 25 Sep 2026 19:01:23 +0000
Files and hashes: 1: MDOYojRzK_b13iyI5P24Yv-1OfI.roa (hash: 9C3SntnocakqcNtFoy8WdbT469VxGnuBBybMiDuCskI=)
2: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: 0ggC0eIw5ZWMZR8q6zYijlQjFJzaUGHGs1DxVAO9T/E=)
3: tD3EeMEBT3yEWBttpsWGl0bRetk.roa (hash: ckduoJYFFvUfXMRG101fPH5je/+Pxdi1LergZOeIB/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:3b:03:24:4b:e3:6e:f8:ef:ef:bd:f8:49:ca:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Sep 24 19:01:23 2026 GMT
Not After : Sep 25 19:01:23 2026 GMT
Subject: CN=f88d542e8e0b73e935334c4cba968b4eaf74b9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:89:9a:43:f2:a6:9c:1f:30:b1:61:64:92:
ee:46:97:b5:96:e2:30:00:e0:0e:35:ae:0f:47:fb:
cc:5c:b0:73:f8:b3:05:a8:c3:9c:0f:22:30:fa:f2:
02:c0:2c:35:11:ed:bc:10:d4:c8:34:21:88:ea:34:
67:48:ce:eb:74:22:03:f6:4c:2d:40:01:bd:70:f1:
3f:67:7e:17:0f:5e:74:a1:ed:8e:67:96:fb:24:44:
ed:1e:2c:32:24:55:4a:03:9b:6b:6e:da:70:b5:96:
ae:97:97:95:84:4e:35:7d:72:9a:03:a2:83:2f:d0:
19:79:7b:70:13:a5:9e:33:ee:54:36:36:47:28:4a:
2d:31:fa:29:6e:11:2b:6b:3d:14:d4:a7:59:4a:f6:
9d:ff:0d:55:5e:61:55:63:c5:5c:9b:7e:c7:d3:c7:
d0:29:d7:7f:94:3a:75:58:0a:1d:b5:d4:35:17:04:
7c:41:5e:79:1f:20:9d:85:c6:f5:7e:91:86:8c:71:
be:ed:e0:48:ca:52:84:b5:99:82:96:df:46:4e:cf:
c2:fe:c9:2e:86:66:df:2c:e4:5c:9e:8b:b4:df:3f:
8c:d5:6a:93:c2:35:81:87:48:83:03:45:9f:15:91:
8d:4e:48:cf:46:7f:16:72:86:28:36:f2:7a:f4:ac:
fb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8D:54:2E:8E:0B:73:E9:35:33:4C:4C:BA:96:8B:4E:AF:74:B9:AA
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:33:74:e3:e5:ea:46:16:fc:e8:e3:b1:e0:98:6a:fd:49:0c:
3f:78:3e:3d:9a:e7:d9:3a:cf:65:77:58:ea:dd:83:16:d8:49:
75:8f:52:f6:02:ee:ea:e9:26:6b:78:2f:8b:59:b9:02:3d:5e:
23:e4:69:bb:30:70:0f:e3:cd:0a:05:8c:8b:a4:05:30:03:52:
93:f7:72:10:07:cd:18:83:a2:92:2b:c4:3a:56:f3:da:38:a6:
5b:04:9c:25:ab:c6:7c:9e:8b:c6:31:e8:22:72:d0:17:b8:9d:
ad:15:0a:92:60:3b:3f:cc:07:37:3e:ef:5b:3b:31:59:0a:a6:
d1:b2:47:9a:0b:4c:77:4b:51:68:76:93:c4:ad:02:39:94:c9:
61:9e:45:18:a4:fe:05:23:8f:6e:90:67:ef:88:de:5b:33:52:
50:89:b0:cf:0f:d3:ad:41:89:9d:5d:b6:3f:dc:e7:e0:3d:a4:
dd:ba:38:8e:b1:f7:f6:c8:e9:f4:9e:49:97:f9:3b:d7:e6:6b:
25:a1:b0:89:d4:d5:3f:a3:0d:f8:de:a1:67:dc:a2:06:5b:43:
8c:c5:85:30:83:1f:a7:43:47:31:ba:f5:1c:13:95:d5:96:3d:
a1:38:c5:bb:cb:ae:91:53:60:0e:41:3f:c7:80:33:5c:f9:e4:
8e:1a:d2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:07:07 2026 by rpki-client