Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
File: lYs6eEkk73mV168fvRdniKbCt1Q.mft (raw, json)
Hash identifier: ZE0qvEcLWjxWfdnZHTwjAEsAmx6bO5WCakAz/ghh8ug=
Subject key identifier: 3C:9E:A2:5B:E2:A1:51:08:63:F5:5C:F2:70:65:EF:C0:E9:90:DC:9F
Authority key identifier: 95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
Certificate issuer: /CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Certificate serial: 019F916C45CD50EEF80617682F5D1E7F2AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:19 +0000
Manifest this update: Fri 24 Jul 2026 00:00:19 +0000
Manifest next update: Sat 25 Jul 2026 00:00:19 +0000
Files and hashes: 1: BPt6RAa7ENrJmkVCFGkolciZ5ow.roa (hash: Qu8fUjGy1xxsRwZtDqrZ7qwLZ/hB6gVPADzDVKSoBIk=)
2: CuVc4PF5d3AMtHwH59bi3KpoEcU.roa (hash: YY5JT2rh1l3bec5cvOqTSnBQtzBt2nClBilF97d7XCU=)
3: aRQ9uwskWeFhYTdPjO7Okig-UjE.roa (hash: BkfwV9uzeeugOlyi0Sysa2EHfE+nO+JpIDCMPMrtqUc=)
4: lYs6eEkk73mV168fvRdniKbCt1Q.crl (hash: XdGnafpvTUXj5z1jt94xR0SWUomGsHK191rQn1oBSck=)
5: liKRFliJG9HmzqpkhjZr0nxWozg.roa (hash: /xPWEbs1m0lm+Et8vhC1fCxdl4sfLjj/5sEcemF1W1k=)
6: ytZvKlFnz1qSthhK5jm3iOrymuU.roa (hash: SEmRdwSemsDohtKTnRpE/p/H3uUMSjqwrsy6C4xgDao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:45:cd:50:ee:f8:06:17:68:2f:5d:1e:7f:2a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Validity
Not Before: Jul 24 00:00:19 2026 GMT
Not After : Jul 25 00:00:19 2026 GMT
Subject: CN=3c9ea25be2a1510863f55cf27065efc0e990dc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:af:3d:cb:45:57:ea:18:d4:16:c0:7c:e6:
70:fc:a6:0e:54:cd:1c:b4:78:e3:8e:5f:1b:c0:07:
68:dc:0f:8c:e3:9c:80:b3:5f:c8:fc:aa:20:6c:d3:
5e:4c:86:bf:36:95:ed:94:f9:40:73:6a:60:06:d8:
b1:ed:f0:59:0c:33:27:76:50:ed:4b:30:67:e7:96:
60:98:c6:a4:bd:b1:53:8a:26:84:99:57:09:24:c6:
de:fd:72:64:21:fb:a3:14:10:ef:c2:e7:64:f0:18:
f4:55:21:b0:de:e1:76:88:fa:2b:bb:1a:0c:97:98:
16:46:cf:a4:7d:35:e1:35:62:79:98:f3:78:c5:e8:
1a:12:db:03:64:8f:0d:54:55:b7:fe:ae:1c:76:9c:
e9:04:91:83:21:77:08:5e:3f:ad:69:3b:3e:2a:76:
7b:3f:97:28:58:f5:f7:2b:62:10:9f:cc:c9:96:0c:
81:47:72:85:d6:03:ea:de:e9:d4:68:fa:14:8d:e4:
62:c6:99:d3:c0:76:0b:83:3e:b1:53:2b:73:b6:99:
f6:1c:37:62:05:6e:a7:7d:22:20:34:ca:49:bd:89:
b2:64:da:a5:10:94:f6:9d:fe:b4:eb:2b:65:69:5f:
e0:fd:d6:e0:b7:b4:21:95:65:ab:6b:ef:db:06:f3:
43:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9E:A2:5B:E2:A1:51:08:63:F5:5C:F2:70:65:EF:C0:E9:90:DC:9F
X509v3 Authority Key Identifier:
keyid:95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f7:d9:be:e1:9e:f9:8f:d9:61:9d:03:c3:00:03:1a:9c:2f:
24:38:76:2c:d4:d2:9a:87:5b:af:c5:9c:04:5f:a8:29:fa:73:
db:b7:fc:99:66:2e:a6:98:48:5e:3e:91:da:b3:88:e7:80:95:
d2:7e:a9:bf:aa:15:34:6a:be:ee:97:8f:f1:22:7f:5b:8d:af:
c5:14:df:54:c3:f8:cb:22:d5:5d:e3:1d:11:dc:5f:ab:06:77:
e5:ff:1e:6e:4f:79:f8:75:91:e7:9d:f6:be:76:cd:41:1b:56:
cb:e8:ac:f9:a0:87:71:43:39:c4:52:9f:a2:5f:2c:56:79:79:
cc:f9:bd:6e:9c:d4:20:d3:5d:c5:47:c5:6a:1e:a8:cb:44:6a:
b5:6b:6e:88:d8:e2:d5:60:8d:c9:b0:32:36:dd:0f:c0:78:2a:
5d:16:c0:19:24:cc:11:a2:f2:84:d8:47:cb:60:75:3b:a2:f8:
da:06:03:26:e7:5c:ee:8e:0c:c0:34:75:4b:46:bc:74:76:c4:
77:13:d3:a3:af:9d:05:2e:39:3b:fd:ad:85:d4:69:f1:f2:bd:
74:ec:3b:d6:f6:5f:8c:5b:b9:7d:b3:72:55:ef:56:cc:4e:05:
2b:5a:ca:a4:56:4a:36:ed:15:db:ae:f3:b4:e9:90:61:a6:67:
aa:b5:17:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:48:10 2026 by rpki-client