Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: sLb43bGtIW6BmDdcnkZiioBWmf3YB2mxTJwdROQaLOk=
Subject key identifier: 98:55:8A:BF:74:5A:9B:D5:C5:2C:25:C7:2C:39:7F:9A:40:77:0E:97
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 019DA3E5F2231AD052EFE3DD12CFB4463505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 04:00:48 +0000
Manifest this update: Sun 19 Apr 2026 04:00:48 +0000
Manifest next update: Mon 20 Apr 2026 04:00:48 +0000
Files and hashes: 1: MDOYojRzK_b13iyI5P24Yv-1OfI.roa (hash: 9C3SntnocakqcNtFoy8WdbT469VxGnuBBybMiDuCskI=)
2: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: fiIYUaCWvs8mgXUp1XvUPaCc7nPclGE9f4BJ7+Z3saU=)
3: tD3EeMEBT3yEWBttpsWGl0bRetk.roa (hash: ckduoJYFFvUfXMRG101fPH5je/+Pxdi1LergZOeIB/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:f2:23:1a:d0:52:ef:e3:dd:12:cf:b4:46:35:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Apr 19 04:00:48 2026 GMT
Not After : Apr 20 04:00:48 2026 GMT
Subject: CN=98558abf745a9bd5c52c25c72c397f9a40770e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:ab:43:76:bc:06:14:0a:11:4b:1f:b7:5e:
cc:3a:74:c7:e1:2a:4a:62:02:24:9d:d3:b1:00:c8:
64:6a:83:c5:48:7f:1e:91:d9:7c:09:ab:a9:4f:be:
b5:18:92:c2:7e:58:9c:75:4b:bf:11:4b:95:23:f9:
1e:01:ed:11:05:16:f2:5d:eb:70:4f:22:32:d8:90:
04:6c:db:13:b2:90:99:1d:95:18:29:09:b6:93:80:
42:16:7f:e8:10:21:f1:1d:9d:87:b3:62:9c:9f:5e:
70:b6:17:c2:80:68:14:55:21:74:a9:20:b8:9f:c5:
80:3b:d3:b3:9e:33:14:0a:5a:76:7e:d1:8b:b6:e2:
7c:fc:08:33:b5:34:ef:a1:64:50:50:9b:4c:30:b3:
59:c9:a5:13:7b:f5:2d:21:57:7e:73:c9:0f:cb:76:
95:8f:e7:32:6e:8b:77:2c:e6:01:a6:c7:9f:e7:f2:
54:b3:3b:40:98:5f:de:c2:63:98:02:3d:b9:72:8a:
1f:46:27:f3:0b:f5:20:26:93:27:7b:8e:e4:1b:7a:
61:c6:81:0b:96:90:2e:e0:1b:df:16:0d:b6:4e:16:
4c:c7:41:e7:60:26:fb:ff:6f:a0:a9:3a:1c:17:1b:
7d:88:a7:04:74:b6:2f:4b:36:81:2f:ad:98:95:9b:
18:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:55:8A:BF:74:5A:9B:D5:C5:2C:25:C7:2C:39:7F:9A:40:77:0E:97
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c1:f5:58:a3:fc:59:a0:68:fd:00:0a:66:b9:68:98:6f:b1:
37:78:71:87:e3:b0:23:d6:0b:d8:e8:e9:63:b0:1a:1b:85:3f:
9f:32:d9:75:48:dd:8a:6f:c6:9f:4b:dc:59:11:4a:9b:88:64:
fd:6e:a9:7a:11:9d:17:88:e0:70:e3:5d:ec:bc:70:14:e5:19:
0a:2e:c7:cd:60:ce:43:ef:3b:59:37:35:00:5c:90:a3:ef:89:
cd:c0:ca:bc:95:34:df:0b:8d:9c:58:c1:b9:e0:15:9d:06:97:
6f:87:05:e1:b6:f0:cf:9e:48:0d:e1:e4:11:65:b0:5a:14:71:
b2:60:e0:61:1d:52:0a:13:47:5f:d4:cf:56:49:9c:95:df:1e:
4a:f7:40:f1:40:33:6c:43:44:ea:83:2f:69:a8:65:70:f7:72:
f7:d1:29:9b:15:ef:bd:ae:fb:f1:3a:1d:44:e3:c2:52:59:db:
04:b2:45:61:01:7d:38:58:b1:57:fe:d6:2b:a2:6f:4c:d6:81:
aa:e2:65:72:98:b5:c3:81:de:8d:ef:ee:aa:6e:5e:01:a2:21:
68:8c:4e:ac:b2:9e:4c:2e:69:d3:1a:6e:fb:08:2b:69:12:00:
5a:e1:68:f3:a6:ea:80:b7:9a:aa:88:08:41:35:77:e7:77:46:
0b:b7:4d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:31 2026 by rpki-client