Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: bb0WhkXKRKEeLwWBtsalWFNd57MG0Ep3/UHwjBDAnPo=
Subject key identifier: F9:D8:84:4A:6A:F0:C3:56:F8:11:5F:ED:E4:9D:C4:82:61:44:6F:30
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 019D284DA7FD531A76ECEF11F34974741442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:11 +0000
Manifest this update: Thu 26 Mar 2026 04:01:11 +0000
Manifest next update: Fri 27 Mar 2026 04:01:11 +0000
Files and hashes: 1: MDOYojRzK_b13iyI5P24Yv-1OfI.roa (hash: 9C3SntnocakqcNtFoy8WdbT469VxGnuBBybMiDuCskI=)
2: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: jsEr7pm7ecZhEi7xRmzyByiSyGE6Vhr+zm5t5186gaI=)
3: tD3EeMEBT3yEWBttpsWGl0bRetk.roa (hash: ckduoJYFFvUfXMRG101fPH5je/+Pxdi1LergZOeIB/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a7:fd:53:1a:76:ec:ef:11:f3:49:74:74:14:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Mar 26 04:01:11 2026 GMT
Not After : Mar 27 04:01:11 2026 GMT
Subject: CN=f9d8844a6af0c356f8115fede49dc48261446f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:ce:db:46:68:d8:e3:0e:11:13:f1:23:75:
dc:4e:d3:43:cf:55:e0:65:72:23:44:b8:2b:00:f8:
be:e2:68:1e:b5:8e:b6:3f:f2:dd:af:b7:82:ed:9a:
81:b1:28:60:7d:94:a6:04:6f:1d:fe:32:e3:a1:06:
96:56:8d:12:7d:cf:bc:0e:7f:de:90:8f:cd:8b:ea:
ce:26:1f:98:db:8d:7d:76:b0:13:52:90:7c:a0:97:
01:cc:b3:69:30:fd:40:ce:f0:98:77:08:9e:a3:84:
16:f0:29:53:48:11:ff:e8:44:7a:df:38:78:de:93:
58:61:95:9e:a5:b1:3a:22:68:60:fb:0b:96:10:cf:
fb:c2:a4:63:4d:ba:21:45:15:5b:0d:c1:9b:76:27:
65:02:6a:c9:1b:3b:0e:70:d7:07:e3:a3:9e:f7:eb:
9f:7a:75:aa:e3:43:76:e2:05:61:06:c3:a3:89:ab:
31:bc:0f:36:07:30:3a:8b:c4:fa:fd:25:ce:4c:cb:
51:c4:03:32:5b:16:9e:bb:dc:2f:77:6e:b6:1c:c4:
81:50:6c:1e:1b:c7:a6:0d:21:79:ae:59:7e:f6:be:
21:d6:f9:b3:dd:f0:ba:fd:4a:d9:36:71:bd:4e:63:
3f:97:a6:2f:f0:30:a4:7f:78:ff:93:0e:b5:fd:ee:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D8:84:4A:6A:F0:C3:56:F8:11:5F:ED:E4:9D:C4:82:61:44:6F:30
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:55:0d:9c:59:10:94:48:11:42:de:ce:2e:7c:18:b9:de:d5:
40:bb:e2:8e:2b:e6:04:00:b1:93:78:ef:e3:f2:c9:ed:73:ea:
1b:7c:61:d7:4b:ab:3a:fb:42:de:41:e8:a0:4b:96:4e:91:ef:
f1:90:46:4f:61:f9:33:c7:c0:40:35:f5:43:28:6a:af:43:a4:
4e:21:82:03:32:2c:77:62:bd:e8:04:f1:f0:c1:b3:82:2a:fc:
da:af:35:1b:f2:30:1f:d6:cb:ee:b4:d5:ef:f1:35:8c:ad:d9:
ab:e7:17:94:4f:2f:73:cf:f0:02:78:88:c9:7f:7e:f4:4a:44:
ba:84:f1:94:1a:5d:ce:28:49:ad:6a:78:4d:ec:a1:b1:73:00:
fb:36:00:c1:6d:e9:2f:89:80:d5:ef:ac:9c:53:b1:c6:6e:98:
81:24:56:92:1b:f1:45:1f:f9:41:37:97:d6:8f:d3:df:8b:f4:
85:91:c9:21:70:f8:d3:ab:d0:3e:40:69:22:11:11:48:54:db:
21:10:6f:de:43:69:31:5f:b1:35:85:b7:d1:30:11:03:70:c5:
bb:cc:62:0b:b4:e9:71:79:c9:bb:2b:fc:c1:60:41:27:27:8a:
d9:36:37:be:09:06:62:d4:9a:d9:a9:92:21:ea:ad:95:0f:15:
1a:bf:97:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:48 2026 by rpki-client