Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
File: lYjYtMeqRamyzXN8YUhx63GBur4.mft (raw, json)
Hash identifier: Cm3rmDgHtZffYM3vQfT/J8UHT+oUvk5lX3HteCVBafU=
Subject key identifier: A2:4C:FA:08:54:CE:D3:E5:73:0E:D0:67:E0:37:E0:E8:F6:AF:BA:5A
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial: 019E2135D9A7BAC97CFA905C921B4033A227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
Manifest number: 176D
Signing time: Wed 13 May 2026 12:00:37 +0000
Manifest this update: Wed 13 May 2026 12:00:37 +0000
Manifest next update: Thu 14 May 2026 12:00:37 +0000
Files and hashes: 1: 2nWQF39Iwb18W2QaNPcJ8wLWKO4.roa (hash: Y42qQxUJOveLJJBE2Ti4Rz4U/hBNZ5LB97/p6A86eqc=)
2: T-FG9QXYVrOvJD0ZFGx161F8-rE.roa (hash: fwBMGesT+i5+7hG4n6yFeYoLnMkVAp9abEUuKCI4Q+A=)
3: Y-Fl2pXcpykA2Ovy6Yiek0-GPJc.roa (hash: UtkgCH0IjnyruhNFvhdGIcEEQiu591rlsNdVQP1mlI0=)
4: aPrjwirQfjp2ASokssf7k_O--fQ.roa (hash: KQgnCiQXpKRoobrn80mbP5Rs8dHibT88YV5+D84Zc98=)
5: iXwUxzso3pt35Li0dSOoT5DmX3U.roa (hash: glAbr9K3ZOByGif0Hc8fgA/M/XOvS9j+i7ULdB74cTs=)
6: lYjYtMeqRamyzXN8YUhx63GBur4.crl (hash: BOY7B41KvTa/Rwc+VL//7kQDaK0m8dXH1p3yTZE7J3M=)
7: voqwh4ljJMAQM4zcSBxWmbzYHCA.roa (hash: lgapnEK9Q6w/tzBbAcuBz1bvcQ9NlQDVQ41y/zqkihE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:35:d9:a7:ba:c9:7c:fa:90:5c:92:1b:40:33:a2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Validity
Not Before: May 13 12:00:37 2026 GMT
Not After : May 14 12:00:37 2026 GMT
Subject: CN=a24cfa0854ced3e5730ed067e037e0e8f6afba5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:66:aa:f6:a3:8e:d3:c7:0d:dd:85:42:0d:
4b:fe:be:99:f4:30:c3:de:6a:10:f9:fb:4f:c0:48:
6d:7d:f7:92:41:0d:d3:28:4d:b0:0a:ed:56:02:52:
1f:61:b3:79:02:27:f2:a5:8f:4a:48:f6:0f:95:07:
43:6f:f4:1c:ac:ea:5b:51:28:7d:20:88:59:c9:17:
50:70:5f:54:ff:74:1b:6a:2d:af:b8:e2:80:29:20:
93:82:23:97:48:35:2d:19:10:62:31:41:f9:95:6a:
9b:66:d9:56:84:29:ce:04:3a:d2:a8:ea:75:35:de:
da:12:c1:e9:fe:20:88:7b:d2:07:c5:30:dd:fd:9c:
eb:71:1f:f2:b0:f9:7d:fe:6e:9d:53:f6:a2:df:10:
ea:4f:37:0f:c1:4f:2d:22:33:99:ef:ce:2b:cf:cd:
69:a0:ca:a0:85:3d:41:ce:38:e6:fe:3f:c1:b4:47:
b5:e5:d2:e9:a5:4e:67:68:21:33:6a:b9:8b:cc:f1:
a2:5e:5d:52:de:47:99:fb:64:f8:8e:94:71:73:7b:
27:5c:9d:5a:d7:64:32:50:7a:a1:07:46:2c:f8:fe:
a4:1e:f5:1b:ca:fa:11:ea:89:c1:cf:14:7b:36:0f:
77:a8:ef:6c:53:61:e0:df:d6:62:41:df:ea:a6:15:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4C:FA:08:54:CE:D3:E5:73:0E:D0:67:E0:37:E0:E8:F6:AF:BA:5A
X509v3 Authority Key Identifier:
keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ba:d8:66:60:fc:d7:4d:1d:65:e6:2a:98:ea:b6:52:67:f8:
35:18:55:16:6b:b4:bb:c9:52:bc:84:0c:c7:85:46:de:53:e8:
e2:6d:65:b4:11:78:15:ba:a2:f0:1d:e0:d9:d5:8f:2f:f9:d0:
e0:1d:0b:e0:f0:a7:1a:e1:6b:67:6e:ab:d2:34:1b:90:2f:20:
b6:e1:3e:65:67:ef:ef:88:5b:55:b6:e7:1a:66:4f:7c:15:51:
64:9d:7c:6a:b3:32:27:47:88:3d:6d:c8:91:68:cb:91:69:f6:
c1:45:8d:98:ce:ac:09:90:76:d3:be:05:91:2d:9e:aa:74:f3:
00:97:fb:63:46:df:c3:74:e3:95:c1:32:9d:bb:77:a6:19:19:
3c:9a:31:41:0d:aa:9d:ed:0c:6c:d2:4e:ee:ca:59:99:65:cc:
20:fd:a5:6f:88:cd:b1:6d:b8:be:c3:d8:6d:6a:fa:0f:a5:5c:
32:83:ba:37:75:cf:f6:3b:ba:0a:c4:52:e4:3d:c4:f6:03:a7:
ea:e1:e0:07:cd:14:be:23:0c:fb:03:c9:34:b5:25:a5:16:6c:
85:f5:80:9a:c5:fd:e2:c7:43:be:70:37:76:ef:15:da:37:24:
3a:be:a1:0d:ec:de:aa:f6:13:5a:13:b6:03:71:ad:01:1c:dc:
10:25:28:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:22:47 2026 by rpki-client