Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: WJyVOXrIyr4RcLPCm57OzudYdpHs5K40tVkycVVkZ8I=
Subject key identifier: 69:9F:7C:D4:84:6E:B2:6B:3B:4C:07:BA:46:D5:48:C0:AE:45:D9:BC
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 019CAAC67BF5176EC009036B65D217CC601A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:01:00 +0000
Manifest this update: Sun 01 Mar 2026 19:01:00 +0000
Manifest next update: Mon 02 Mar 2026 19:01:00 +0000
Files and hashes: 1: MDOYojRzK_b13iyI5P24Yv-1OfI.roa (hash: 9C3SntnocakqcNtFoy8WdbT469VxGnuBBybMiDuCskI=)
2: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: HNvFx9p0GFbIiAC4T198YDjpHo4bAS/0SgAm9YU3Cwc=)
3: tD3EeMEBT3yEWBttpsWGl0bRetk.roa (hash: ckduoJYFFvUfXMRG101fPH5je/+Pxdi1LergZOeIB/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:7b:f5:17:6e:c0:09:03:6b:65:d2:17:cc:60:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Mar 1 19:01:00 2026 GMT
Not After : Mar 2 19:01:00 2026 GMT
Subject: CN=699f7cd4846eb26b3b4c07ba46d548c0ae45d9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:15:a9:fc:8a:71:e5:a6:39:5c:e6:7d:15:
81:80:e3:90:cd:e2:7a:a4:d9:26:f1:55:0f:13:ed:
b2:fc:86:6d:88:16:e9:c5:c3:c2:c6:60:5b:32:99:
12:f3:62:59:52:07:cf:46:3d:06:f8:a3:1d:a7:db:
79:49:ad:d9:78:7f:44:a8:2a:f9:d1:20:08:31:83:
62:2e:92:d1:af:0d:f4:2c:93:b3:96:24:fa:49:24:
04:a5:81:c2:9e:95:45:03:63:2f:7b:03:37:8e:26:
1c:e8:99:a5:b4:c5:85:d6:5a:68:95:7f:a3:38:e8:
82:18:5d:92:83:39:75:d6:86:ef:2b:98:9f:12:fe:
3e:34:b7:96:2e:52:17:12:4a:ab:45:fc:8f:a2:13:
4b:f0:8a:22:38:6e:81:c0:e0:68:25:e2:8b:e4:11:
60:3f:00:5e:9e:06:a9:70:69:65:7f:9d:ae:4c:f8:
48:22:b2:5b:b8:25:22:70:79:95:ac:a5:dd:b3:30:
6f:90:ec:02:f6:09:92:1a:ab:44:55:5c:6a:ef:39:
d3:a1:dd:70:38:78:af:15:06:f9:39:d1:40:9c:e2:
fc:bc:d9:dd:4c:d2:4e:b4:d0:66:e3:77:b2:ba:11:
86:da:fc:5b:5b:8e:22:52:fa:ac:cc:d6:93:72:8e:
90:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9F:7C:D4:84:6E:B2:6B:3B:4C:07:BA:46:D5:48:C0:AE:45:D9:BC
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1f:67:1b:64:02:0e:92:8a:27:de:26:ce:41:36:be:98:eb:
71:df:61:cf:d2:72:71:85:3e:91:69:b9:02:da:08:1f:37:6f:
c1:76:51:31:4a:db:5c:97:17:80:59:c6:9a:63:7f:e2:f6:3f:
1e:9c:e0:91:54:c0:8d:23:a9:08:81:8e:e3:ad:07:8c:6e:00:
8e:03:ff:b1:33:27:06:22:97:09:6f:98:d5:c3:63:30:4e:dd:
1a:94:49:0c:b9:51:8c:55:86:ba:00:58:d1:6f:b8:52:9c:16:
ed:85:08:1b:65:d6:15:c5:bd:68:e0:f4:62:50:5c:ab:3c:3d:
21:f7:2a:2d:15:3e:7f:5c:e8:28:95:13:df:18:80:74:02:56:
e4:36:b8:f6:1e:10:61:88:81:6d:a4:ad:58:6a:43:e3:8b:80:
c8:5a:86:e4:fb:86:54:6d:fc:d3:73:af:04:22:a5:72:20:27:
1a:94:52:d7:ff:df:2a:cd:d3:89:6e:a9:eb:6a:04:78:4b:31:
14:8f:4c:20:7c:10:4a:50:9d:78:99:a4:7f:63:81:b9:40:97:
77:de:6b:03:ff:08:80:ba:94:06:b6:a7:50:36:4c:8c:fb:59:
79:df:2b:b8:6f:f6:8c:cd:bd:3c:2a:2f:ab:a1:57:fe:3a:82:
78:28:c3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:56 2026 by rpki-client