Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
File: lYBh2AAMuD07iWfmb7ikwn6RImI.mft (raw, json)
Hash identifier: rJkX6gdqnLtnMbzwQ2KR0X1Lxz8b8ckZBv0OUtj9D6U=
Subject key identifier: 4F:6D:D6:CE:07:41:2B:35:AB:DE:01:89:A7:7B:4E:59:29:A4:81:25
Authority key identifier: 95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
Certificate issuer: /CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Certificate serial: 019D9D3EA81CAFA08B050B0AF80E8814FAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
Manifest number: 66
Signing time: Fri 17 Apr 2026 21:00:22 +0000
Manifest this update: Fri 17 Apr 2026 21:00:22 +0000
Manifest next update: Sat 18 Apr 2026 21:00:22 +0000
Files and hashes: 1: hzG3EgOx_N3fgyx_9u23eo8eYmM.roa (hash: ll5FuHzISV8wV67N7kq5bfMOA6gO76/cY1UBY4egjOc=)
2: lYBh2AAMuD07iWfmb7ikwn6RImI.crl (hash: +LN932xyaDZXNzw1DS6l8DInGP81K7KxFGEpYUUaGHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:a8:1c:af:a0:8b:05:0b:0a:f8:0e:88:14:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Validity
Not Before: Apr 17 21:00:22 2026 GMT
Not After : Apr 18 21:00:22 2026 GMT
Subject: CN=4f6dd6ce07412b35abde0189a77b4e5929a48125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:38:5f:79:c6:20:2c:d9:67:88:72:04:52:
ba:60:c9:d5:a8:69:08:78:4b:ba:b1:67:de:80:22:
b5:09:b2:3d:c6:77:60:b0:2c:4b:ac:79:56:b9:11:
15:2c:1c:19:b0:15:48:ea:5c:71:66:31:8f:0c:b4:
69:e0:3e:0f:34:99:f6:1a:81:9b:e6:54:f7:ac:1c:
36:4f:48:be:c2:fa:22:0d:4a:d2:0e:9e:3a:fb:dd:
79:01:f2:85:3a:0b:bc:55:97:20:b4:48:9f:cb:c5:
d8:b0:64:15:7e:65:6c:33:88:f3:ec:71:bb:8a:fd:
e2:d0:38:ab:fb:b0:b2:02:54:5f:43:b0:54:3e:8a:
36:47:63:38:bc:50:37:8a:0a:0e:8e:b7:37:59:95:
0c:f2:07:d4:68:5f:3c:18:47:34:23:9b:26:49:6d:
57:7d:4b:dc:82:c8:14:aa:8f:1d:b1:07:e7:ca:fd:
47:3b:23:f2:6d:93:20:2e:fb:56:df:ba:eb:5d:a3:
18:1b:83:2d:fa:6c:06:fb:9b:c6:9a:69:3e:57:31:
94:8e:d7:29:3c:28:13:81:f0:f6:d9:e0:bd:cb:4f:
d9:ad:d2:82:95:01:aa:be:92:eb:38:f0:26:f4:39:
98:ee:e8:21:30:19:cf:85:ba:d5:cf:76:17:58:a0:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6D:D6:CE:07:41:2B:35:AB:DE:01:89:A7:7B:4E:59:29:A4:81:25
X509v3 Authority Key Identifier:
keyid:95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:36:fc:0e:85:9f:50:92:17:6a:08:f7:b1:45:7f:6c:7c:c2:
67:f9:68:ad:fa:3e:24:9f:15:9f:e2:34:66:08:b3:4a:70:25:
8c:3e:c7:06:a3:50:cf:ef:9d:ac:2a:5a:bc:47:d0:1c:02:ac:
f8:85:c5:f1:b4:3b:69:53:b7:1e:3d:1e:b6:a1:36:26:41:e9:
46:84:3e:f3:81:9d:47:f4:db:f1:87:01:89:50:db:e3:b2:3b:
6a:7f:04:49:ed:28:c8:fe:89:4d:60:87:fe:e5:7c:81:58:1b:
14:52:e5:7b:cf:39:a2:e1:0f:92:9f:f5:95:6c:4b:d7:5b:b6:
03:e7:87:c5:b2:62:82:f3:09:72:ed:29:48:11:ed:6c:26:be:
bb:ce:85:fc:90:dd:4f:a6:32:30:ca:13:a4:7e:fd:5c:b5:b3:
6f:9d:35:0a:71:44:ae:02:b1:1c:5f:4c:c7:0a:5b:ed:f1:6b:
1a:c9:c5:07:bd:ad:0d:b0:b4:07:b5:81:5b:9a:69:60:d1:59:
52:80:c6:1d:dd:99:cc:4c:8b:04:88:6c:d7:55:c2:7f:75:cf:
d4:e4:1c:a0:75:5a:ee:ac:e7:f2:1c:80:cf:fe:24:af:d3:bf:
1f:11:72:17:55:ca:59:b2:a8:6f:39:2d:5b:1c:5e:ad:c5:cc:
b5:3d:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:57:41 2026 by rpki-client