Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: m11X8wEk+RxV9lUEaoGPowldbih6IfGk1Lt+YlwVY3c=
Subject key identifier: 82:42:66:85:96:EA:36:4D:D6:1E:0B:3F:13:73:4C:3D:5D:86:EB:D0
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 01A0D6B9EA1926BB70783CC2A022238E4552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 04:01:43 +0000
Manifest this update: Fri 25 Sep 2026 04:01:43 +0000
Manifest next update: Sat 26 Sep 2026 04:01:43 +0000
Files and hashes: 1: MDOYojRzK_b13iyI5P24Yv-1OfI.roa (hash: 9C3SntnocakqcNtFoy8WdbT469VxGnuBBybMiDuCskI=)
2: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: tVOMYh7UGkrgsd5bnbVVRhO+baSPUIKh65U7z2uXbJk=)
3: tD3EeMEBT3yEWBttpsWGl0bRetk.roa (hash: ckduoJYFFvUfXMRG101fPH5je/+Pxdi1LergZOeIB/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:ea:19:26:bb:70:78:3c:c2:a0:22:23:8e:45:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Sep 25 04:01:43 2026 GMT
Not After : Sep 26 04:01:43 2026 GMT
Subject: CN=8242668596ea364dd61e0b3f13734c3d5d86ebd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9a:b9:b1:a3:78:d5:47:2b:52:d3:d6:3f:50:
1b:0d:93:5b:3c:d2:31:03:c0:b1:91:7a:63:35:4c:
b8:b8:0d:e7:22:9a:cc:bf:70:f2:ea:74:49:dc:13:
1c:50:1f:72:ab:3f:23:c1:fc:96:a0:c0:4c:9a:bc:
06:f4:6b:29:f1:d6:2d:db:b7:dd:5f:5f:b9:3e:91:
07:ea:f7:7d:e4:11:8f:bf:af:82:76:08:bc:91:47:
4e:95:a5:c3:69:ec:2c:9e:54:5f:55:e0:46:99:7a:
59:97:7a:49:1a:e8:9a:4e:61:e0:7d:c3:6c:05:15:
6c:3e:6d:40:50:a1:84:1e:d8:7e:14:ba:02:8b:f8:
4a:a1:a5:d7:1e:b9:5f:9b:08:b7:2f:be:08:f5:c8:
63:53:54:e8:a6:4e:50:02:9d:5a:1d:d9:7c:03:2d:
ec:67:59:0b:cf:c1:ee:d5:4f:82:d8:0b:41:8f:c0:
b4:b4:47:13:4b:dd:fe:41:7c:92:f3:f8:06:a6:e8:
88:93:b1:dd:45:ec:99:b2:a2:61:61:77:90:68:3e:
26:d9:ca:64:30:0b:18:73:94:e9:f8:5a:04:f8:02:
8f:f9:80:cf:c6:d4:f2:89:b5:6d:6f:7b:d2:4d:ff:
68:05:d0:d2:a4:99:8a:d9:39:84:43:55:50:8d:43:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:42:66:85:96:EA:36:4D:D6:1E:0B:3F:13:73:4C:3D:5D:86:EB:D0
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:80:95:2e:96:49:d7:cf:99:01:30:78:60:b5:b2:d9:d6:71:
9c:4e:a3:2d:8f:31:04:d5:16:d1:2f:c1:ee:fe:69:fa:7e:87:
bf:0e:5e:47:b7:d5:25:de:ad:a5:d3:ee:6c:12:32:7e:75:2d:
3d:91:fa:43:ef:46:11:f3:c4:bb:ed:b5:bf:13:86:20:3b:ea:
04:2a:2f:c6:59:d0:a9:98:04:cf:ce:1f:70:cc:78:f4:34:a8:
37:65:3a:3d:1e:3f:5e:bf:0a:c6:d2:f6:c9:cf:23:71:b0:5f:
e0:d6:1a:9e:b3:71:87:7d:95:ab:89:e0:3a:dc:46:84:d2:ab:
f5:bf:cf:8d:17:8e:b7:fc:a0:bc:17:3c:aa:08:ce:0d:d2:b5:
a7:f4:3a:6c:72:7a:c1:d7:68:ff:ee:b9:61:d0:7b:af:ad:c8:
56:18:5d:56:5a:c0:00:7a:af:41:fb:65:ad:ff:5b:54:44:19:
f6:74:81:0c:00:26:e9:3a:39:6c:82:89:d9:2b:54:c9:3d:17:
16:4a:42:c3:f6:bf:95:e1:47:05:18:c2:3e:a6:10:b5:ec:c7:
45:8b:a6:43:0e:77:63:8b:1e:b5:62:59:0c:4e:8c:9f:cc:72:
cf:6b:6b:da:d1:fc:a7:83:18:ac:7a:19:b7:7e:06:08:25:b5:
f9:2e:1c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:04:29 2026 by rpki-client