Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
File: lYBh2AAMuD07iWfmb7ikwn6RImI.mft (raw, json)
Hash identifier: +7X4FY+jsnHS3fhSP5F8SlDWaf4DVsB87+nCV362jc0=
Subject key identifier: 00:A8:BB:71:D1:49:E8:CD:DD:BE:25:28:03:CD:E7:27:F6:BA:DE:E2
Authority key identifier: 95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
Certificate issuer: /CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Certificate serial: 01A0DD974D1264088768C33B27484E7A4779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
Manifest number: 0215
Signing time: Sat 26 Sep 2026 12:01:15 +0000
Manifest this update: Sat 26 Sep 2026 12:01:15 +0000
Manifest next update: Sun 27 Sep 2026 12:01:15 +0000
Files and hashes: 1: hzG3EgOx_N3fgyx_9u23eo8eYmM.roa (hash: ll5FuHzISV8wV67N7kq5bfMOA6gO76/cY1UBY4egjOc=)
2: lYBh2AAMuD07iWfmb7ikwn6RImI.crl (hash: tfqgZxW/Dmt1Mv4QlSQB7US1FPykGg7Ho+QFz/rycSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:4d:12:64:08:87:68:c3:3b:27:48:4e:7a:47:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Validity
Not Before: Sep 26 12:01:15 2026 GMT
Not After : Sep 27 12:01:15 2026 GMT
Subject: CN=00a8bb71d149e8cdddbe252803cde727f6badee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:a2:5f:fa:f9:80:18:db:48:e5:53:06:6c:
3f:ec:dc:d4:fb:81:da:2e:b8:4d:8c:60:1f:01:77:
f9:b0:c1:8f:ad:cd:f1:85:f6:88:fb:42:8f:31:b1:
f2:ef:ac:05:82:43:6e:fc:9a:b9:e2:42:89:cc:b8:
b4:7b:31:46:32:df:ef:44:7c:36:32:7d:da:d2:25:
81:37:f1:77:00:98:29:0d:e5:8b:9c:41:7d:4f:ff:
5c:8f:d9:75:ba:e6:1a:1b:0c:f6:6c:9d:7e:eb:db:
26:95:c2:e4:3f:7d:2f:bb:94:06:96:aa:cb:dc:92:
c5:02:b3:34:4c:63:11:7d:92:fe:6c:17:ac:84:7e:
7d:19:22:1b:1a:56:45:01:ef:c5:98:94:fe:13:15:
6f:17:0c:78:77:79:ea:f8:71:5a:04:0b:fb:13:7f:
ac:57:b4:cd:9f:0b:53:63:96:1b:ba:62:75:99:9b:
c6:f1:5d:2f:9d:d8:02:54:8a:74:c1:04:10:76:93:
39:e5:ce:96:1d:79:5d:ca:de:c2:6f:28:73:2b:ec:
2e:b3:05:7e:90:6c:f7:f6:0b:a7:8f:42:16:f9:22:
5c:67:4a:bd:99:e5:1e:24:39:83:9c:53:25:87:cd:
5f:30:1b:a0:2b:cf:0e:b8:88:08:26:e3:61:83:6a:
19:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A8:BB:71:D1:49:E8:CD:DD:BE:25:28:03:CD:E7:27:F6:BA:DE:E2
X509v3 Authority Key Identifier:
keyid:95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ec:6d:a2:14:1c:a7:cc:89:1c:0a:47:b6:f1:50:d4:7b:87:
f6:15:20:18:55:c3:54:dc:89:c8:4b:c1:4e:b6:48:a9:83:39:
a5:81:de:f3:ae:9a:42:d1:b6:43:ea:88:90:ca:d0:92:33:e4:
9d:3c:ba:fa:8d:a6:cb:c9:cb:9b:b5:d7:89:e0:12:cb:fe:42:
14:78:96:b7:f1:3f:e9:bd:0f:2a:46:40:d0:f2:fb:3e:b9:a0:
4a:d5:7f:d3:ac:f1:4b:ca:45:07:79:5e:4b:12:f1:7c:eb:4f:
3e:62:bc:86:99:15:fa:c9:27:98:bd:e8:79:a8:87:d5:7d:cd:
e0:76:bf:97:b5:19:e6:09:3b:1b:b5:25:ff:61:40:7d:a4:b5:
e7:c7:c5:99:81:76:ac:8f:c4:28:32:f6:d1:b5:49:76:40:dd:
8c:60:30:f1:a7:56:73:0d:ae:85:7c:da:bd:00:5c:3a:a7:a7:
17:e7:39:8a:ad:0a:14:cd:da:08:13:e1:48:0a:12:b3:5a:03:
66:90:d1:25:0b:38:f6:22:75:89:9e:bf:7f:92:a8:4b:93:4d:
e6:0d:a9:d9:be:1f:9e:0d:5b:18:9e:be:44:0d:51:12:b2:60:
c2:fc:50:d3:ba:f5:49:21:2a:5a:88:d2:97:f2:9c:ee:1d:ed:
cf:ce:90:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:26:59 2026 by rpki-client