Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
File: y-lwmA1WXMdK2ylKpox7BvUTKJA.mft (raw, json)
Hash identifier: YHAFV1hz/Ar+h7X7f44fTbxzi2VCyOJu/Wzt3WcPMeM=
Subject key identifier: 97:9F:C3:01:7A:85:FB:17:CB:0D:26:D3:2E:A5:0B:33:B8:DB:54:48
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 019F91DB2AFB022CCC80BE6BAFFDDF0A2760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
Manifest number: 0CD6
Signing time: Fri 24 Jul 2026 02:01:27 +0000
Manifest this update: Fri 24 Jul 2026 02:01:27 +0000
Manifest next update: Sat 25 Jul 2026 02:01:27 +0000
Files and hashes: 1: UdacM9ueU4fTZAcn05BbHDu10YY.roa (hash: zli1vqBuGj4w6sq940v9plUifYC90I/HldwyEsoprOE=)
2: VsR35aykkc_iAYM4SDexkh120pI.roa (hash: gEd57quT2IwN1bNN4Pr/vOfz7pwdmfPkBYPC0L79I3E=)
3: y-lwmA1WXMdK2ylKpox7BvUTKJA.crl (hash: Xp8o7zEzDKBB5foIxcPCNzPDnErwU7OFveaQZNR/pro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:2a:fb:02:2c:cc:80:be:6b:af:fd:df:0a:27:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Jul 24 02:01:27 2026 GMT
Not After : Jul 25 02:01:27 2026 GMT
Subject: CN=979fc3017a85fb17cb0d26d32ea50b33b8db5448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b2:0f:69:a8:83:85:4c:fd:50:3f:49:e5:3c:
6a:9e:da:21:c2:78:a4:ea:40:56:a5:f7:9e:31:76:
95:ea:89:6f:90:15:9c:cc:9a:de:d7:e7:9c:a6:f2:
87:f4:5c:19:09:0b:da:ff:7b:90:4e:ec:25:fb:45:
56:ac:43:2d:10:3b:69:d1:71:41:48:dd:e4:b8:df:
94:73:d2:71:dc:59:ee:27:db:dd:21:de:54:aa:fc:
c6:43:07:25:12:83:54:b8:17:e1:ab:c6:1a:af:18:
33:12:b3:85:85:82:47:40:99:4d:81:4c:0b:4e:46:
8e:65:3e:6e:03:c3:bc:72:0a:e2:9a:d6:bd:52:10:
f6:96:21:9b:0f:f0:c9:c7:00:ad:91:e0:c6:1d:3a:
16:b2:53:5b:7e:5d:e5:b5:9d:11:18:43:a9:5d:4e:
f7:91:c8:97:be:e4:cc:26:c0:e0:94:07:95:e0:8c:
3a:c7:5e:bf:e0:e0:61:10:16:b6:06:91:78:b7:c9:
29:2d:ea:c7:ae:d1:9e:08:9b:9f:5a:ba:b0:5b:3a:
53:51:ad:e7:94:75:3a:2a:dc:b2:2b:2c:63:e0:78:
3a:ca:10:92:d2:a6:51:77:5a:d2:7b:3e:07:7e:8c:
2f:4f:0f:ff:a0:96:24:6c:a2:c9:e7:4d:fd:29:7b:
3d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9F:C3:01:7A:85:FB:17:CB:0D:26:D3:2E:A5:0B:33:B8:DB:54:48
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:12:69:cb:e3:40:1d:a2:15:8f:76:f0:01:64:db:15:d7:3b:
b8:18:43:32:54:3a:11:6b:9e:77:5f:96:f4:f4:d7:81:3d:9c:
0b:9b:07:e7:0e:15:22:e2:f5:42:22:aa:16:ef:79:26:ca:c3:
bd:ea:c4:08:47:84:22:95:ec:cb:bb:ef:17:97:82:27:82:b3:
c0:71:93:94:2a:50:3d:24:c1:e1:ec:51:a4:fd:bb:6c:f7:29:
68:af:f1:be:f3:01:72:6f:2f:cb:8e:3a:d4:94:5d:d3:49:a0:
44:32:42:23:3a:d8:66:65:2a:36:aa:af:3a:01:52:4c:a7:68:
0a:29:42:18:22:c7:87:dd:65:cf:c9:d5:13:ce:5c:5a:5e:b3:
8d:d6:a6:7f:51:2a:77:63:17:0e:cb:26:96:d7:31:2d:b4:35:
29:a4:99:ba:1a:c9:30:65:90:84:ff:88:a3:c4:5c:fa:3a:a1:
a6:8d:21:d5:39:7d:a8:5a:8b:d9:19:a9:3d:37:7c:51:b7:90:
0a:16:0d:d5:a7:04:14:d3:04:40:70:4f:6e:c7:f7:94:e0:83:
30:da:59:ff:95:3d:7c:04:fc:0d:a4:76:b1:91:37:76:67:9a:
69:41:0f:f4:6d:a3:65:97:88:79:44:a1:95:c0:38:84:44:02:
91:2b:4d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:23:26 2026 by rpki-client