Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: gBlcvL+u20Ov1Vk4tcpFu26jB1C5M3z3PB3DgLseOkQ=
Subject key identifier: 7A:06:A8:D2:44:B8:D7:D0:BA:B2:5B:D3:8E:25:5A:4E:9F:04:2D:31
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 019EC1B756D66CDF25CDDE08B4169198CB9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 16:01:18 +0000
Manifest this update: Sat 13 Jun 2026 16:01:18 +0000
Manifest next update: Sun 14 Jun 2026 16:01:18 +0000
Files and hashes: 1: MDOYojRzK_b13iyI5P24Yv-1OfI.roa (hash: 9C3SntnocakqcNtFoy8WdbT469VxGnuBBybMiDuCskI=)
2: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: 6jyEfI4fU4ARmNwu2Vea20FNWKSNO37w9stU4pLrQ5Q=)
3: tD3EeMEBT3yEWBttpsWGl0bRetk.roa (hash: ckduoJYFFvUfXMRG101fPH5je/+Pxdi1LergZOeIB/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:56:d6:6c:df:25:cd:de:08:b4:16:91:98:cb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Jun 13 16:01:18 2026 GMT
Not After : Jun 14 16:01:18 2026 GMT
Subject: CN=7a06a8d244b8d7d0bab25bd38e255a4e9f042d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:5c:da:41:9d:3c:61:9b:f6:e9:ab:d2:89:
8b:b1:e5:6d:7c:c5:b0:a6:07:54:74:99:de:46:85:
00:dc:bd:e6:ab:9c:e4:0e:1a:96:05:37:e4:ee:5e:
22:bf:14:d8:c5:c3:6b:6a:1f:c3:b2:c0:03:3e:50:
a9:9d:39:11:bb:c4:51:51:8c:28:c1:d7:0d:c8:76:
71:52:47:f9:fd:51:22:64:a5:1a:ce:20:ea:11:d7:
58:66:48:d6:ff:6b:1e:27:76:e9:43:66:9d:b6:0e:
1a:df:d8:7d:b6:77:e8:03:96:a3:ca:06:b9:51:c3:
6f:37:53:09:de:67:9b:0c:d8:06:89:7d:3d:4d:21:
61:fe:a5:78:63:3c:be:e2:de:9f:c8:ea:8e:db:1d:
39:a9:6d:6d:4c:24:8b:09:2b:c5:fd:08:e3:54:66:
12:80:f7:02:c9:7f:67:58:e1:8b:0e:8c:39:c9:40:
5a:a1:d9:53:07:8f:da:b3:24:11:86:af:b4:f2:ed:
7f:76:32:52:4f:52:81:e4:e8:a7:bf:58:f8:d2:0a:
cf:52:23:96:07:5a:db:f2:d4:af:61:c1:21:bb:1a:
2a:3f:c7:4a:da:4a:21:c6:3c:87:ae:1c:d2:6a:83:
28:d6:68:02:f2:83:1c:54:c9:30:79:4d:a2:2f:f0:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:06:A8:D2:44:B8:D7:D0:BA:B2:5B:D3:8E:25:5A:4E:9F:04:2D:31
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:10:b1:d8:fb:65:86:ed:1e:9e:13:a1:df:e5:84:3c:4c:04:
b9:56:bc:8b:1d:d0:3f:f7:e7:4f:23:ef:16:16:53:15:20:0a:
8b:28:1c:5a:27:a6:29:98:bf:36:a7:5f:9c:3c:99:97:ad:2b:
99:b3:26:3f:11:08:81:be:7f:96:cc:3d:69:18:2a:27:c2:8e:
d7:d6:7e:a5:69:b6:09:cf:43:63:9d:6a:62:7a:ba:74:e3:84:
0c:96:2e:70:d2:0d:cc:80:fa:cd:19:20:01:00:eb:5a:e9:2b:
8e:3d:cd:51:e3:16:e5:86:32:6d:db:b7:04:64:05:bb:fe:42:
63:10:d4:02:a0:7f:a2:36:fb:c0:5c:5f:5d:49:4b:e8:b0:b4:
f7:be:13:b6:fe:51:69:af:b7:21:3f:75:da:72:e2:4d:c6:bf:
4b:e4:44:4a:af:95:28:27:2c:cf:1e:24:40:ff:34:19:0a:dc:
8f:ce:8f:63:43:b9:e5:ed:de:76:3b:fd:f6:17:5e:9e:42:28:
f5:ec:ab:20:e2:65:6e:7e:93:ca:97:bf:04:6f:13:5c:15:f5:
f5:42:f7:39:d3:67:59:fa:7b:f2:1d:92:17:df:cc:54:81:20:
33:b5:21:f1:0a:b8:b0:68:2a:ec:27:36:da:dd:7d:7b:d0:e7:
a1:2a:e4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:32:03 2026 by rpki-client