Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
File: lYBh2AAMuD07iWfmb7ikwn6RImI.mft (raw, json)
Hash identifier: xgbRTED2wb1XwTYHCBF44QtFWofYhk0z/biBD+GKekk=
Subject key identifier: 3A:26:F9:28:3A:BC:0E:A8:DD:F0:F9:37:A0:47:C8:C4:83:7A:59:1E
Authority key identifier: 95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
Certificate issuer: /CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Certificate serial: 01A0D9BA456AE1B49FE3FF61BC7ABFB9749F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
Manifest number: 0213
Signing time: Fri 25 Sep 2026 18:00:58 +0000
Manifest this update: Fri 25 Sep 2026 18:00:58 +0000
Manifest next update: Sat 26 Sep 2026 18:00:58 +0000
Files and hashes: 1: hzG3EgOx_N3fgyx_9u23eo8eYmM.roa (hash: ll5FuHzISV8wV67N7kq5bfMOA6gO76/cY1UBY4egjOc=)
2: lYBh2AAMuD07iWfmb7ikwn6RImI.crl (hash: JtexF2aMgwo+gtP3CEq1VXmn8UqL6oWk3lmHXxIXJ8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:45:6a:e1:b4:9f:e3:ff:61:bc:7a:bf:b9:74:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Validity
Not Before: Sep 25 18:00:58 2026 GMT
Not After : Sep 26 18:00:58 2026 GMT
Subject: CN=3a26f9283abc0ea8ddf0f937a047c8c4837a591e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:08:29:a3:36:bf:2d:90:29:c0:56:f6:61:
b0:c7:37:b3:8b:66:55:20:ed:8b:0d:38:7d:a3:ea:
65:cc:96:5a:4b:91:36:17:17:56:be:e8:93:30:e1:
7a:db:3f:61:96:5d:5f:bf:6d:a8:33:03:07:75:b5:
fc:02:f2:71:31:e5:6e:93:f0:55:23:1b:41:ab:72:
44:0c:b8:7a:cc:24:8c:04:bd:7f:d0:e2:cd:7e:d2:
f0:a2:46:06:d0:57:75:df:c3:29:54:2d:fd:ad:f4:
d9:22:da:70:62:62:7f:4e:b8:81:f8:9f:97:a9:66:
4b:48:d0:a0:95:61:ae:e1:0e:50:a0:a3:5a:d8:24:
a1:7a:3a:9b:69:ca:3e:01:20:07:67:28:6d:5d:5c:
4c:99:67:e0:bd:83:42:9d:03:34:2a:ae:7e:72:c3:
a1:29:f6:6b:38:84:f3:76:eb:fc:d6:20:6e:f6:34:
aa:f3:37:bc:b4:7e:0f:02:31:bd:6f:12:96:1d:91:
8a:f2:bf:12:c6:dd:7f:ff:82:b4:1c:a4:9f:02:a3:
3d:55:90:26:e6:db:f3:d3:7d:f5:e0:7b:f3:cc:a6:
43:54:fa:dd:a8:41:e1:08:1b:86:ab:8a:3f:ce:c8:
15:a5:d6:fa:e7:63:b4:38:d2:71:38:86:ad:6d:63:
14:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:26:F9:28:3A:BC:0E:A8:DD:F0:F9:37:A0:47:C8:C4:83:7A:59:1E
X509v3 Authority Key Identifier:
keyid:95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2c:03:05:97:71:6d:a1:50:42:1b:ee:81:03:39:1e:2c:82:
df:9e:18:7f:78:6a:47:b1:36:9e:5b:ca:33:2e:24:05:25:9e:
28:6e:af:73:44:fd:5c:ee:46:f3:c4:69:d5:77:cf:64:b5:2b:
71:37:1c:dc:aa:17:e6:c3:42:b9:0e:fd:d1:a2:6c:6b:37:f1:
d3:45:78:82:3a:2b:bd:01:2c:f4:85:71:75:5d:2f:f8:ce:d3:
57:5f:f2:c2:84:a9:0a:41:78:a4:4c:e7:6c:6b:c4:bb:5e:b0:
4e:39:cc:5c:7b:f9:70:50:05:34:35:3f:f2:72:77:c4:d5:f0:
af:e6:16:4c:9f:e6:38:40:d4:2e:3d:5f:6b:b9:9b:25:0e:9b:
2b:cb:d3:d1:00:e3:4c:97:0d:f1:5a:83:6e:28:24:81:19:60:
df:67:bb:95:2b:07:dd:8f:87:5c:51:a5:b8:0b:b5:9c:f9:25:
c3:a2:ee:b4:6a:83:25:f4:3a:aa:a7:07:a4:0d:c9:5f:8a:fb:
7f:69:b9:54:39:e7:a9:89:15:eb:31:6c:9f:8f:43:dc:1e:63:
f7:ff:fb:d9:cd:15:8a:4d:96:82:79:4a:e1:59:b2:44:3a:1e:
92:4b:02:f6:3f:5a:85:5a:21:d9:ad:cb:b7:44:58:13:c5:ef:
25:75:80:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:34:39 2026 by rpki-client