Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
File: y-lwmA1WXMdK2ylKpox7BvUTKJA.mft (raw, json)
Hash identifier: EuVO8x4nzlsD3eH+4AmSZsUjKKedSl04BTTfXYkOH+M=
Subject key identifier: 27:5B:ED:44:30:9F:4D:9D:39:B9:66:F5:40:50:FB:D7:47:8E:64:86
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 019FAED1D4392262FB8AEBDDDC105C7D6FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
Manifest number: 0CE5
Signing time: Wed 29 Jul 2026 17:00:14 +0000
Manifest this update: Wed 29 Jul 2026 17:00:14 +0000
Manifest next update: Thu 30 Jul 2026 17:00:14 +0000
Files and hashes: 1: UdacM9ueU4fTZAcn05BbHDu10YY.roa (hash: zli1vqBuGj4w6sq940v9plUifYC90I/HldwyEsoprOE=)
2: VsR35aykkc_iAYM4SDexkh120pI.roa (hash: gEd57quT2IwN1bNN4Pr/vOfz7pwdmfPkBYPC0L79I3E=)
3: y-lwmA1WXMdK2ylKpox7BvUTKJA.crl (hash: pueYksLeyDmmqhj5Lb9gtGfAm+og+F2usA+e9Y65LtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:d1:d4:39:22:62:fb:8a:eb:dd:dc:10:5c:7d:6f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Jul 29 17:00:14 2026 GMT
Not After : Jul 30 17:00:14 2026 GMT
Subject: CN=275bed44309f4d9d39b966f54050fbd7478e6486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:96:6e:43:ae:77:ab:fe:00:9f:59:40:ac:37:
c1:be:95:e5:a0:25:bf:a2:a9:7b:81:68:38:6d:69:
4f:e6:cd:40:41:4e:db:3a:09:c5:04:1f:b8:22:38:
67:6a:1a:1d:8c:c0:c0:e4:13:77:b9:13:1b:0e:3d:
69:7e:58:ae:98:47:f4:28:2b:6d:f2:36:a5:09:35:
c4:62:93:e8:1a:53:8e:ee:dd:b8:ff:4f:c0:86:99:
b5:f9:06:4f:fe:80:f9:51:f0:99:a3:97:77:d1:76:
c5:eb:f3:13:7f:61:22:b1:de:af:f0:8e:ad:e8:56:
bb:45:10:f7:dd:2b:55:e6:ff:da:41:81:14:d7:fa:
7f:eb:da:04:03:8b:14:8d:b5:71:d5:34:74:1c:96:
53:67:88:e5:07:ed:71:bc:1d:65:10:46:6a:a4:e2:
7e:68:19:b4:a2:b2:42:d9:a5:f1:9b:17:4d:e2:44:
2d:c9:ce:62:21:b6:de:0c:a7:17:b0:e5:f8:0e:bd:
25:3c:8a:24:5e:87:76:bf:dc:e2:09:87:d8:4c:df:
57:47:02:ff:e5:29:0d:bc:fe:0b:ec:0d:39:52:e8:
89:cc:6b:da:e3:49:cf:d2:1d:3c:2f:56:58:bd:71:
b1:05:be:89:69:6d:46:b8:61:2c:04:61:4e:d6:e8:
e4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5B:ED:44:30:9F:4D:9D:39:B9:66:F5:40:50:FB:D7:47:8E:64:86
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:49:d1:fb:e6:b0:66:c7:2d:41:bc:cd:50:d8:70:7c:c6:cf:
0d:ea:29:a2:b8:75:bf:36:74:fc:64:d7:67:78:20:e8:74:fd:
de:2c:ab:9e:63:e5:56:d5:86:0a:65:39:ab:9b:7a:fc:de:16:
ed:f1:95:87:4e:21:66:d6:6c:a9:31:81:88:c4:df:0a:e7:21:
a4:1a:5c:3c:51:df:cd:3d:93:75:35:7f:ab:60:2c:43:dd:9a:
df:01:6f:ff:5b:40:c9:18:6c:38:05:08:ed:08:a0:c1:b3:30:
ae:25:cb:23:66:7c:89:98:df:11:c2:3f:49:91:0e:e0:35:13:
91:04:25:53:42:42:7e:20:64:9f:1e:fb:33:2f:ac:3d:76:ee:
81:98:ac:23:1f:9c:57:57:f4:03:90:85:c6:d6:7d:a9:47:9c:
8f:80:c6:dd:cd:3c:a5:a3:45:4a:4d:d2:71:ba:64:8e:dd:fd:
44:f7:90:59:0e:c4:d1:ab:f1:19:23:37:1b:fd:2c:11:4f:e6:
51:c3:6a:be:a5:64:68:e4:04:84:cd:20:d1:d6:ef:59:e7:44:
6d:d5:30:7e:6c:9f:60:71:e4:92:a2:a0:c0:9c:70:75:c3:26:
b5:dc:f9:0c:07:c4:13:93:4c:2f:8d:45:37:48:03:06:4a:df:
04:dc:b7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:46:01 2026 by rpki-client