Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: VKZktoZUbTFIIQWExbzpW0ktYy1lJ0bwKzzUw0zcWg0=
Subject key identifier: 5A:F2:7F:CC:7E:08:18:CA:24:10:53:26:49:D8:52:F6:5D:94:91:5D
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 019F9059E556AA589BDE1BDC005E8A352753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 19:00:38 +0000
Manifest this update: Thu 23 Jul 2026 19:00:38 +0000
Manifest next update: Fri 24 Jul 2026 19:00:38 +0000
Files and hashes: 1: MDOYojRzK_b13iyI5P24Yv-1OfI.roa (hash: 9C3SntnocakqcNtFoy8WdbT469VxGnuBBybMiDuCskI=)
2: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: aKdfTXLts89LKAz8ug3LYSNbujsS7b0W5rFhuOUvbBM=)
3: tD3EeMEBT3yEWBttpsWGl0bRetk.roa (hash: ckduoJYFFvUfXMRG101fPH5je/+Pxdi1LergZOeIB/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:e5:56:aa:58:9b:de:1b:dc:00:5e:8a:35:27:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Jul 23 19:00:38 2026 GMT
Not After : Jul 24 19:00:38 2026 GMT
Subject: CN=5af27fcc7e0818ca2410532649d852f65d94915d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:5c:7e:f2:2e:1a:c5:3d:3b:b3:8b:79:46:
f1:65:c8:47:bb:79:70:0c:88:b9:58:7a:b6:2e:4b:
02:2d:92:e4:4f:20:d6:0e:94:bb:46:c4:8a:8a:a1:
c9:9e:4e:55:3e:ad:05:94:7f:07:60:4c:ed:5a:41:
7b:2c:43:1b:14:97:20:65:92:0b:a8:13:fd:7e:1a:
bd:f0:32:06:9b:b4:27:80:37:d7:1f:40:32:ef:90:
90:2f:c3:76:f8:66:99:f1:6c:41:05:9b:17:54:a6:
d0:56:06:54:ef:c3:3b:a1:c0:54:ff:dc:95:61:6a:
1c:96:30:1a:1a:d7:7d:d0:10:a2:be:21:23:91:6a:
1a:91:80:50:54:19:43:b5:86:79:f6:10:fe:f9:33:
a6:03:27:84:28:4a:8d:f9:54:5b:17:99:28:64:fb:
51:6b:b3:8b:62:2e:42:d0:53:4e:7f:a7:55:79:65:
ca:cb:84:13:44:32:0c:16:18:d5:b8:3c:1c:6e:d0:
42:b0:25:0e:d4:09:df:f0:79:f1:51:aa:9d:6b:58:
8e:57:53:a0:c6:fc:d6:b8:79:c5:7d:46:cc:8d:ee:
3a:72:4a:86:3c:22:04:5b:6e:32:fd:5e:ed:ac:c2:
02:e7:7c:4a:fa:09:43:7f:44:cb:b1:7f:74:92:a6:
3a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F2:7F:CC:7E:08:18:CA:24:10:53:26:49:D8:52:F6:5D:94:91:5D
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:78:03:e6:5b:c1:09:78:ce:3b:92:5a:08:2b:c8:0b:fc:37:
af:b5:b5:7e:42:c6:f9:15:82:62:9b:7c:a3:d1:d1:f9:63:94:
b4:a6:5f:cf:70:f7:29:ae:48:74:e3:20:e9:9e:50:bd:64:25:
bc:89:57:e3:59:c1:ff:be:99:21:94:19:05:da:71:16:06:cf:
bc:ba:0f:bf:c8:86:5a:9b:f9:46:7b:e9:a1:4c:3d:9f:19:ac:
db:50:eb:63:3e:35:19:8c:4c:41:72:3e:f8:9c:7a:49:a6:37:
62:85:ed:b8:c5:bf:0e:e2:df:d4:55:be:2c:8f:6c:7f:4b:45:
23:67:39:56:36:b5:93:08:96:88:af:f0:db:54:ea:4c:14:bc:
f7:4e:51:36:b9:e6:4a:cb:d3:d5:a1:b4:17:66:54:90:f6:ac:
ca:a2:80:33:39:3c:d8:7f:db:62:05:ec:84:b4:ff:01:f8:88:
01:2e:81:ea:63:83:bb:56:3b:4d:2b:cd:41:89:9e:c3:ce:5c:
6a:cf:4f:3d:d2:da:e9:29:1e:d9:38:e2:07:7a:69:6b:68:37:
82:28:cc:c4:16:06:ab:08:00:4a:77:75:dd:5b:d0:41:d3:01:
79:36:f2:70:9d:34:ef:5b:51:0b:85:cb:51:25:71:aa:1c:5e:
68:2a:8c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:43:58 2026 by rpki-client