Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: L7zIYRfbDQoeSvJzRDViM0QwDBgYYRp1gICYJuIGP4I=
Subject key identifier: 70:21:E9:0A:DB:DA:EF:61:AF:15:40:D4:09:31:64:DD:92:B8:85:4A
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 01A0D2DE8E594325408DC15EC227D237BBDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 10:03:15 +0000
Manifest this update: Thu 24 Sep 2026 10:03:15 +0000
Manifest next update: Fri 25 Sep 2026 10:03:15 +0000
Files and hashes: 1: MDOYojRzK_b13iyI5P24Yv-1OfI.roa (hash: 9C3SntnocakqcNtFoy8WdbT469VxGnuBBybMiDuCskI=)
2: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: 5EJni/s9NYav+JiyQ6x0/HonsKDywE+XS8fagB9Qzcg=)
3: tD3EeMEBT3yEWBttpsWGl0bRetk.roa (hash: ckduoJYFFvUfXMRG101fPH5je/+Pxdi1LergZOeIB/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:8e:59:43:25:40:8d:c1:5e:c2:27:d2:37:bb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Sep 24 10:03:15 2026 GMT
Not After : Sep 25 10:03:15 2026 GMT
Subject: CN=7021e90adbdaef61af1540d4093164dd92b8854a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:48:c1:3e:e7:a1:e2:a9:d9:55:26:0d:f8:3d:
9b:27:20:96:37:34:53:b1:ab:19:9f:09:07:5e:09:
34:3a:3e:ca:3d:1a:d1:04:39:3d:ef:bd:83:07:e7:
4c:d9:16:dc:a6:ad:f9:ee:ae:40:77:7b:c9:4b:45:
a6:53:31:a6:5e:cd:71:01:3b:16:0d:0b:ec:1a:a5:
da:73:cd:ed:bd:3d:d6:d2:a4:0d:d6:78:58:c4:0e:
67:ef:ff:82:fd:ae:d7:88:35:2e:c0:b7:5e:91:04:
20:f5:95:f1:24:94:f8:72:9a:15:af:f3:66:5a:c6:
37:8f:2d:48:11:ed:be:e0:a9:e4:4e:2b:40:6c:8f:
86:77:b8:fb:53:ed:ef:1e:39:32:5d:48:7d:87:75:
fe:33:d6:b6:1d:88:43:91:2d:f3:63:b2:4d:01:ec:
0b:d5:88:8f:11:6c:65:88:d0:42:ac:f5:23:a7:3f:
1f:08:6f:be:b9:e2:ea:6f:63:58:f9:c1:aa:60:26:
ea:17:c6:f9:de:0c:5b:a8:b3:6c:08:c7:a8:ec:bc:
de:26:7f:17:ea:6c:13:16:b5:78:77:23:ff:48:26:
3f:cc:ce:c1:71:cf:2f:9c:ab:3f:ea:22:27:88:d1:
f8:83:c4:79:ea:f6:e2:17:e5:a0:e8:1f:30:c5:ff:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:21:E9:0A:DB:DA:EF:61:AF:15:40:D4:09:31:64:DD:92:B8:85:4A
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:48:b7:1d:f3:d7:64:bb:5d:d1:d1:88:db:74:fb:35:df:09:
27:40:c0:6a:68:ed:ad:96:62:c6:bb:a7:01:18:7b:87:79:60:
51:60:29:22:40:c3:11:c6:da:28:8e:8b:2f:21:71:0c:66:bc:
26:52:c2:6b:a1:88:37:5b:e8:fe:ca:3f:cd:21:c1:19:f0:2a:
24:9b:2f:cd:4f:c7:4d:2e:05:1d:34:58:66:ec:2a:f2:57:21:
41:cc:98:e7:43:bc:97:f5:8d:50:e5:bc:1a:0f:3f:c1:01:1f:
01:08:55:b3:d3:d1:ff:1b:5c:97:3b:c1:1f:77:b0:d9:e0:7d:
e9:02:81:87:d7:6a:a6:6a:1c:61:8b:5d:5e:42:fd:dc:8b:4b:
34:29:f3:bc:e1:1e:f3:f1:65:6d:ea:2a:ed:87:07:83:23:35:
24:6a:36:c5:a3:91:87:a9:51:dc:8f:4c:59:5d:02:0a:3b:8f:
d3:91:dd:6c:ac:83:97:35:fb:5b:7b:f7:df:7b:85:33:e8:34:
bb:df:bf:ad:e0:29:c9:38:27:e2:8c:1e:cc:f6:78:85:55:38:
c3:ce:13:6a:9d:99:d5:50:fd:85:be:cb:68:2c:81:e0:8b:4a:
69:34:9d:d5:96:31:21:ff:86:a0:b8:56:95:b0:2a:92:00:e9:
de:e4:c6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:51:59 2026 by rpki-client