Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
File: lYjYtMeqRamyzXN8YUhx63GBur4.mft (raw, json)
Hash identifier: e2bCCpvQRefNCOe+qiEHRGTF0ruI43f2HQQZANQOLQI=
Subject key identifier: 4B:4D:EA:4C:E0:8F:03:53:5C:B1:01:4A:F7:69:FB:0C:E5:BE:12:6C
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial: 019D2A04603A4BFC27417C5DAEB4196A97A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
Manifest number: 16ED
Signing time: Thu 26 Mar 2026 12:00:22 +0000
Manifest this update: Thu 26 Mar 2026 12:00:22 +0000
Manifest next update: Fri 27 Mar 2026 12:00:22 +0000
Files and hashes: 1: 2nWQF39Iwb18W2QaNPcJ8wLWKO4.roa (hash: Y42qQxUJOveLJJBE2Ti4Rz4U/hBNZ5LB97/p6A86eqc=)
2: T-FG9QXYVrOvJD0ZFGx161F8-rE.roa (hash: fwBMGesT+i5+7hG4n6yFeYoLnMkVAp9abEUuKCI4Q+A=)
3: Y-Fl2pXcpykA2Ovy6Yiek0-GPJc.roa (hash: UtkgCH0IjnyruhNFvhdGIcEEQiu591rlsNdVQP1mlI0=)
4: aPrjwirQfjp2ASokssf7k_O--fQ.roa (hash: KQgnCiQXpKRoobrn80mbP5Rs8dHibT88YV5+D84Zc98=)
5: iXwUxzso3pt35Li0dSOoT5DmX3U.roa (hash: glAbr9K3ZOByGif0Hc8fgA/M/XOvS9j+i7ULdB74cTs=)
6: lYjYtMeqRamyzXN8YUhx63GBur4.crl (hash: xxbNObHdn/xnF+z/cQ1u4wkaXNXIcMK6rVP0ggxAo/o=)
7: voqwh4ljJMAQM4zcSBxWmbzYHCA.roa (hash: lgapnEK9Q6w/tzBbAcuBz1bvcQ9NlQDVQ41y/zqkihE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:60:3a:4b:fc:27:41:7c:5d:ae:b4:19:6a:97:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Validity
Not Before: Mar 26 12:00:22 2026 GMT
Not After : Mar 27 12:00:22 2026 GMT
Subject: CN=4b4dea4ce08f03535cb1014af769fb0ce5be126c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:23:e3:84:c3:cd:e1:7a:33:e4:7b:99:51:
92:ca:54:58:f6:c5:df:a6:0d:52:2d:31:ab:44:6e:
c1:20:1e:a4:17:39:c9:6f:9a:64:98:38:19:0e:79:
b8:b1:e8:e0:e5:22:0e:da:d9:17:b9:03:8b:5d:2d:
39:4e:6f:f5:70:dc:d4:cf:5d:35:64:9e:b6:6e:9b:
da:0c:aa:9e:75:3f:50:b8:a2:69:64:05:9a:ee:33:
1a:bb:45:db:21:6d:ed:0b:3c:5a:5e:43:7f:dc:99:
2c:d0:99:42:e6:51:da:14:aa:78:de:65:e1:4b:ed:
cc:1e:65:76:f0:03:03:2f:74:74:4e:54:f6:5c:2c:
19:42:79:35:5b:e6:73:99:d1:06:9f:5a:d9:4a:c6:
3c:63:93:60:7a:dd:e4:85:61:d8:45:0d:5f:39:8a:
3f:a4:e0:fe:8d:a5:47:44:20:67:75:c0:8d:2f:b8:
24:b3:2d:e4:c4:88:e1:a9:c6:27:cc:10:63:25:e9:
10:98:c4:b7:b4:bd:2e:82:d0:9e:7f:b9:3b:91:c5:
45:e6:8c:0b:60:fd:df:0f:55:1f:e0:e7:ef:d0:3b:
69:2f:8a:f3:ac:33:2c:22:89:05:79:48:7e:17:4a:
81:d5:0d:26:f0:d9:e1:26:64:56:52:e7:74:3c:1d:
50:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4D:EA:4C:E0:8F:03:53:5C:B1:01:4A:F7:69:FB:0C:E5:BE:12:6C
X509v3 Authority Key Identifier:
keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:19:9e:71:11:ed:a0:73:87:78:d1:0c:20:40:bd:d0:fa:f6:
cc:14:e1:14:64:29:79:80:5b:c5:b1:3d:8c:c8:4f:07:7d:2b:
4e:1f:65:33:f5:4f:fa:c5:a5:80:46:e6:e6:be:26:22:39:e7:
2f:2d:a5:34:23:ba:ba:bb:e9:42:1a:27:ea:de:f7:c6:62:0e:
cd:ff:f1:5d:6f:b9:b6:25:aa:8f:84:35:5a:e1:81:24:cf:b5:
cf:db:8d:69:69:cb:71:05:f2:8d:7d:e8:11:4f:c5:e3:53:40:
ea:95:8a:1f:12:99:71:b8:c1:8e:d3:b1:24:f7:cc:89:31:61:
f6:ae:e7:c4:55:58:92:76:78:6f:c1:86:53:dc:6a:17:78:1d:
9c:ac:91:5e:7a:dd:9b:9d:39:5b:8e:6d:21:07:28:cf:42:d6:
53:2d:9d:ab:f3:9e:dc:ed:e8:b9:23:11:6e:ab:8d:96:e5:31:
41:8c:77:39:52:80:f2:06:63:b4:bd:4b:11:5f:40:cb:29:a7:
66:ef:42:45:20:22:2d:fb:85:6a:2a:30:27:e3:ca:9b:1e:45:
f4:1a:25:fe:72:60:49:3c:8c:ad:40:32:aa:c2:9f:e1:0a:a5:
3e:87:3f:0d:98:7d:2c:7e:c9:4d:48:2d:68:30:c3:04:26:79:
8b:40:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:25:21 2026 by rpki-client