Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
File: lYBh2AAMuD07iWfmb7ikwn6RImI.mft (raw, json)
Hash identifier: g4utQYiE8/NA4Zk7DjF5NfM5Rk54FV6sgr9sACDqkmM=
Subject key identifier: AF:98:DC:87:9C:7F:C8:79:46:42:04:41:C7:5D:7E:2D:A5:FC:7F:D8
Authority key identifier: 95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
Certificate issuer: /CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Certificate serial: 019F916C46D9FAB9CA2A196D834747A363D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
Manifest number: 0169
Signing time: Fri 24 Jul 2026 00:00:20 +0000
Manifest this update: Fri 24 Jul 2026 00:00:20 +0000
Manifest next update: Sat 25 Jul 2026 00:00:20 +0000
Files and hashes: 1: hzG3EgOx_N3fgyx_9u23eo8eYmM.roa (hash: ll5FuHzISV8wV67N7kq5bfMOA6gO76/cY1UBY4egjOc=)
2: lYBh2AAMuD07iWfmb7ikwn6RImI.crl (hash: R2ZazpUPyMrKObCmedEci+7lPWBwJel+0MFfK21YVK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:46:d9:fa:b9:ca:2a:19:6d:83:47:47:a3:63:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Validity
Not Before: Jul 24 00:00:20 2026 GMT
Not After : Jul 25 00:00:20 2026 GMT
Subject: CN=af98dc879c7fc87946420441c75d7e2da5fc7fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:a5:f8:df:e5:f0:38:0e:2c:aa:f3:0f:09:
17:b4:80:d1:18:44:2e:b1:a6:80:4e:c2:da:b9:4a:
25:a4:ac:da:47:55:17:f5:0a:4d:f1:29:24:e1:6a:
e6:94:42:24:a7:2b:b4:8a:b1:cd:c1:20:b6:dc:5e:
ec:38:5d:8c:6a:78:9b:8c:c7:bd:00:ba:28:64:4a:
ed:50:b2:9f:a6:79:b8:a5:b0:e4:6a:42:16:0c:3c:
9b:fb:fc:bd:c5:a1:03:94:98:1a:a0:7b:e4:40:af:
85:ac:78:95:bd:8a:4b:c3:8c:a3:17:82:25:34:07:
82:b3:8b:36:59:ee:5b:27:76:2d:96:a5:e7:44:98:
1a:23:9a:c0:15:44:d2:3a:66:0c:e2:0c:ca:18:fd:
ef:2f:e1:0f:0b:18:7f:60:76:25:7e:08:99:23:a1:
3a:e5:1b:01:28:47:65:e4:1e:90:c7:5b:dd:87:49:
b7:c5:35:ef:b3:39:82:81:e1:95:d9:ca:94:66:74:
6a:ae:fa:bf:7a:3d:05:8e:c4:c0:9e:21:ad:1e:a0:
e9:69:69:56:18:a5:dd:7c:37:74:46:55:fc:5d:39:
01:3f:07:4f:7e:2e:b3:6a:9b:29:ef:ec:35:c2:77:
d4:74:aa:13:58:6b:1d:2b:77:88:a0:6d:c7:6c:58:
c2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:98:DC:87:9C:7F:C8:79:46:42:04:41:C7:5D:7E:2D:A5:FC:7F:D8
X509v3 Authority Key Identifier:
keyid:95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:31:d0:88:fa:3e:92:95:ce:49:2a:c5:48:c5:5d:03:0c:b8:
7f:8f:f7:e2:5e:2b:0f:e2:90:e9:a3:f5:d9:60:b4:6c:85:48:
c0:45:d6:39:ca:79:56:df:e0:4b:63:d9:5b:8c:a9:7e:4b:b6:
82:cf:fa:fe:6d:7d:ed:cd:c6:09:88:d7:b6:d9:bf:3b:dc:56:
7a:ed:62:57:4e:32:61:97:95:40:d6:73:35:8c:ff:47:3d:72:
b2:4d:1c:d5:9a:45:25:ef:46:37:10:26:ff:24:0c:0a:b9:d5:
c1:63:9c:0f:76:90:30:cc:d4:58:ac:e0:5e:b3:d6:a8:2f:a5:
1a:b3:60:f5:ca:3b:91:30:b9:51:ef:25:cc:3b:9d:9a:61:5f:
2b:de:4b:45:7a:77:e2:65:3d:fe:fe:ab:29:6c:c4:e4:c6:e8:
9e:91:23:20:38:cc:3f:e2:93:9f:fa:de:94:15:c0:51:15:7c:
83:53:12:ac:a4:07:67:f6:5e:78:fc:bf:7f:f2:ba:a1:10:06:
ce:71:5d:82:1a:25:07:ca:1b:b9:f7:0b:55:30:e4:23:64:ae:
16:4a:52:1d:fc:e0:92:97:58:de:f0:7d:7d:ff:3d:d2:77:6a:
f2:50:2e:04:d9:8b:14:ed:ec:ce:38:34:46:57:c1:98:cd:46:
1e:0e:be:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:37 2026 by rpki-client