Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
File: lYBh2AAMuD07iWfmb7ikwn6RImI.mft (raw, json)
Hash identifier: 2EY4f4DLrAAdLcI/ck94U///gkPmpzpP4DpvOQWrAtQ=
Subject key identifier: 99:68:C2:BC:A3:FE:7D:C9:F2:60:C8:B4:4C:5A:4C:E7:11:24:57:56
Authority key identifier: 95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
Certificate issuer: /CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Certificate serial: 019FAA87836B355B65408C1B6C4E24F33BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
Manifest number: 0176
Signing time: Tue 28 Jul 2026 21:00:35 +0000
Manifest this update: Tue 28 Jul 2026 21:00:35 +0000
Manifest next update: Wed 29 Jul 2026 21:00:35 +0000
Files and hashes: 1: hzG3EgOx_N3fgyx_9u23eo8eYmM.roa (hash: ll5FuHzISV8wV67N7kq5bfMOA6gO76/cY1UBY4egjOc=)
2: lYBh2AAMuD07iWfmb7ikwn6RImI.crl (hash: mSNG+UCMhojgIqs6UjrnL6yk9hsgHrrYFXjJ6hkuXB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:83:6b:35:5b:65:40:8c:1b:6c:4e:24:f3:3b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Validity
Not Before: Jul 28 21:00:35 2026 GMT
Not After : Jul 29 21:00:35 2026 GMT
Subject: CN=9968c2bca3fe7dc9f260c8b44c5a4ce711245756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2f:49:df:9d:24:68:43:21:ea:10:b0:0c:af:
26:d8:3a:32:eb:1a:ee:22:67:79:ed:72:b5:07:be:
c4:5e:66:66:93:70:02:fb:73:2d:2d:28:0a:56:cd:
1a:7c:89:fc:45:5c:e3:95:aa:44:d2:3e:1c:00:97:
e7:27:90:7a:09:d6:57:fc:09:f8:8c:00:dc:e5:7f:
66:8a:82:39:60:95:da:b8:a8:24:b1:0c:e5:11:ca:
c9:24:9b:46:71:61:d4:6d:71:d7:64:c1:91:13:36:
55:9d:54:f9:d3:8b:e4:50:6d:7e:11:6a:46:fc:ad:
69:9c:50:1c:cd:66:e8:80:c1:c3:70:3a:11:7c:5c:
6d:6e:65:9a:f3:5c:b6:be:7e:4c:05:b4:69:7e:56:
f5:c6:04:69:ad:1a:d1:ff:d1:e8:be:ef:19:ab:5a:
1d:1a:d0:73:3c:12:d3:60:da:63:30:18:b8:77:d0:
35:6b:80:de:a1:bf:ed:4e:c8:a6:cf:1d:a2:4e:62:
41:aa:f0:10:ea:84:5d:84:39:b0:32:df:dd:0a:ed:
fc:68:e2:d2:f1:58:59:4a:33:08:51:11:f9:9f:d9:
b2:63:c7:3a:2a:1a:1e:f6:63:9b:b7:56:e5:c0:e2:
02:d1:2f:65:dd:65:14:5c:73:52:01:29:21:fa:ae:
07:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:68:C2:BC:A3:FE:7D:C9:F2:60:C8:B4:4C:5A:4C:E7:11:24:57:56
X509v3 Authority Key Identifier:
keyid:95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b0:83:4b:58:96:d5:2c:f5:2f:f3:89:34:aa:a4:32:f5:b0:
45:d0:dc:78:d3:0c:1a:1f:d1:7a:24:57:d5:10:b1:4f:f9:ca:
07:b1:62:b6:9e:5f:64:6a:74:07:5e:c3:c7:c5:17:29:c1:ec:
a4:c5:58:7e:37:f0:4d:88:cb:a0:63:d0:00:b9:83:6d:71:c6:
86:cf:60:10:be:f1:c5:21:bc:12:3d:11:79:ab:13:10:77:e3:
29:52:f6:b0:8d:42:c7:5b:3d:00:51:5e:4b:7a:2b:f5:78:13:
cf:75:61:82:66:ef:a5:4b:3f:b6:27:b8:e5:f5:e9:47:22:27:
71:ef:41:76:08:47:20:23:7b:2a:21:d2:c0:66:88:64:8b:eb:
d6:c1:eb:38:c7:a6:d6:9b:5c:ae:16:bf:5e:70:95:0c:49:06:
de:af:6a:56:96:ec:d5:a8:77:6c:0a:de:1f:35:0b:64:48:02:
94:87:4c:4b:23:0f:79:af:82:c3:41:cb:d8:d7:e9:a0:ce:2f:
b3:45:44:00:d4:53:93:45:f4:70:88:98:f6:40:34:52:6e:23:
af:48:f3:6b:1e:be:c0:7a:e5:35:58:d3:fc:16:5d:35:de:ff:
48:16:90:fc:8c:70:4c:c3:43:c5:8d:a1:27:fa:0b:86:20:2b:
1e:9b:18:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh4NrNVtlQIwbbE4k8zv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ODA2MWQ4MDAwY2I4M2QzYjg5NjdlNjZmYjhhNGMyN2U5
MTIyNjIwHhcNMjYwNzI4MjEwMDM1WhcNMjYwNzI5MjEwMDM1WjAzMTEwLwYDVQQD
Eyg5OTY4YzJiY2EzZmU3ZGM5ZjI2MGM4YjQ0YzVhNGNlNzExMjQ1NzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8y9J350kaEMh6hCwDK8m2Doy6xru
Imd57XK1B77EXmZmk3AC+3MtLSgKVs0afIn8RVzjlapE0j4cAJfnJ5B6CdZX/An4
jADc5X9mioI5YJXauKgksQzlEcrJJJtGcWHUbXHXZMGREzZVnVT504vkUG1+EWpG
/K1pnFAczWbogMHDcDoRfFxtbmWa81y2vn5MBbRpflb1xgRprRrR/9Hovu8Zq1od
GtBzPBLTYNpjMBi4d9A1a4Deob/tTsimzx2iTmJBqvAQ6oRdhDmwMt/dCu38aOLS
8VhZSjMIURH5n9myY8c6Khoe9mObt1blwOIC0S9l3WUUXHNSASkh+q4HdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlowryj/n3J8mDItExaTOcRJFdWMB8GA1UdIwQY
MBaAFJWAYdgADLg9O4ln5m+4pMJ+kSJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFlCaDJBQU11RDA3aVdmbWI3aWt3bjZSSW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xMjJmNmEtYzEzMi00OWFhLWI0OTYt
YjkyY2UyMWNhNDA5LzEvbFlCaDJBQU11RDA3aVdmbWI3aWt3bjZSSW1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xMjJmNmEtYzEzMi00OWFhLWI0OTYtYjkyY2UyMWNhNDA5
LzEvbFlCaDJBQU11RDA3aVdmbWI3aWt3bjZSSW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbCDS1iW
1Sz1L/OJNKqkMvWwRdDceNMMGh/ReiRX1RCxT/nKB7Fitp5fZGp0B17Dx8UXKcHs
pMVYfjfwTYjLoGPQALmDbXHGhs9gEL7xxSG8Ej0ReasTEHfjKVL2sI1Cx1s9AFFe
S3or9XgTz3VhgmbvpUs/tie45fXpRyInce9BdghHICN7KiHSwGaIZIvr1sHrOMem
1ptcrha/XnCVDEkG3q9qVpbs1ah3bAreHzULZEgClIdMSyMPea+Cw0HL2NfpoM4v
s0VEANRTk0X0cIiY9kA0Um4jr0jzax6+wHrlNVjT/BZdNd7/SBaQ/IxwTMNDxY2h
J/oLhiArHpsY2g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:08:49 2026 by rpki-client