Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: 8M7sXpBc1TI2r4bEJtak4ASZwgmjA35a4SgdR+qJBvs=
Subject key identifier: 4F:B4:DD:66:6F:2C:BB:70:38:D8:18:2A:C5:04:36:F1:E9:9E:3D:E4
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 019CACB4B45BFE064989122BC7627017C9E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 04:00:49 +0000
Manifest this update: Mon 02 Mar 2026 04:00:49 +0000
Manifest next update: Tue 03 Mar 2026 04:00:49 +0000
Files and hashes: 1: MDOYojRzK_b13iyI5P24Yv-1OfI.roa (hash: 9C3SntnocakqcNtFoy8WdbT469VxGnuBBybMiDuCskI=)
2: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: VK8IgzQ+ifJ+L/0Z/8WX/9hlxAaNHB5fU6GxtofPY38=)
3: tD3EeMEBT3yEWBttpsWGl0bRetk.roa (hash: ckduoJYFFvUfXMRG101fPH5je/+Pxdi1LergZOeIB/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:b4:5b:fe:06:49:89:12:2b:c7:62:70:17:c9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Mar 2 04:00:49 2026 GMT
Not After : Mar 3 04:00:49 2026 GMT
Subject: CN=4fb4dd666f2cbb7038d8182ac50436f1e99e3de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:88:ff:b3:79:31:e2:df:66:77:84:ce:58:
15:30:ce:8d:5f:ca:f8:cc:a3:63:8f:bc:4c:af:27:
02:0f:c9:92:7b:9d:77:df:28:6d:8c:0b:3a:7e:20:
d5:21:05:e3:a3:d8:67:e3:2b:64:b7:e5:3f:cc:87:
db:c1:85:90:ec:b6:14:f7:20:20:fc:68:c9:ec:e4:
1f:52:65:61:d3:12:71:13:53:06:52:bd:df:11:ea:
96:9d:cf:f5:9a:3b:91:79:af:48:d4:9f:9c:ff:62:
05:f3:d4:db:95:6b:ea:b6:40:a1:79:67:f6:a1:96:
0f:8a:fc:c4:02:5f:c8:e8:8b:41:6f:fa:8f:9b:33:
3d:c6:8e:c2:c9:d1:a9:13:ed:b1:f3:21:57:ab:2e:
b6:2e:67:63:7a:3c:1c:94:03:65:11:59:7d:ee:1e:
0e:58:42:f8:c5:43:9c:06:1c:0b:67:23:26:b4:c8:
13:0a:ca:2e:76:fd:58:21:db:48:d5:0f:07:97:af:
28:e5:32:e3:32:c2:01:6d:e0:18:4e:df:91:fa:d2:
ae:0a:24:e4:29:5c:76:6d:7a:6a:4f:c7:8f:fa:cc:
a7:cf:09:7e:8f:76:b6:19:8b:19:1c:91:ef:70:47:
d5:96:f0:0c:38:0b:49:6d:c5:44:3e:45:e2:a0:85:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B4:DD:66:6F:2C:BB:70:38:D8:18:2A:C5:04:36:F1:E9:9E:3D:E4
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:26:6f:e5:0e:eb:a1:ad:7b:10:ef:ac:e0:f1:63:e8:29:d5:
a9:30:8e:24:22:09:63:51:05:b4:5f:44:b5:5f:85:d0:1b:af:
3b:b1:6b:3d:86:cc:47:86:92:c6:a6:ff:7f:08:f1:30:c9:ec:
5b:5e:68:4e:93:d3:ca:5c:eb:32:c5:a9:72:cb:e5:33:ef:d8:
ff:af:05:58:6c:69:dd:3e:66:14:5a:f3:98:58:65:3e:e4:c8:
04:98:38:3a:15:b2:2d:8c:f9:e2:d5:fe:17:de:ed:f0:54:64:
92:1f:50:c0:fc:95:ab:ca:fb:f9:ba:b8:86:55:ca:9c:2b:a1:
91:b2:f8:49:70:4a:f5:d6:6e:7b:f9:67:63:95:33:8e:b8:e6:
fd:1b:5a:de:6a:fb:a7:b4:84:ff:06:21:61:c5:55:b0:42:d9:
bd:a7:85:c9:9b:ed:9d:4f:c5:32:ef:4b:9c:fb:6c:14:e7:06:
93:df:c6:f8:33:c2:4a:9b:a3:40:a3:11:98:d3:8c:5b:59:99:
f4:a9:a9:d3:c7:4a:e9:c6:a3:a5:a4:30:3d:4e:bb:1f:d6:0c:
e4:e5:3a:f0:2f:42:0c:6e:66:29:9b:78:92:75:a3:30:27:19:
a8:32:40:5e:3a:96:e4:08:f3:b0:9d:48:48:51:d2:f8:c7:4e:
95:0b:41:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:12 2026 by rpki-client