Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft
File: lYM0pMEu57_TbL84WQfAQhA0NsY.mft (raw, json)
Hash identifier: 6Ld8ShwGgdlZ1IWx/H7aUh7QNy77RX2/FG278SKSdS8=
Subject key identifier: AF:23:97:45:25:33:72:59:66:F8:A7:D2:5B:E8:18:D5:26:FD:07:76
Authority key identifier: 95:83:34:A4:C1:2E:E7:BF:D3:6C:BF:38:59:07:C0:42:10:34:36:C6
Certificate issuer: /CN=958334a4c12ee7bfd36cbf385907c042103436c6
Certificate serial: 01A0D9F1D42721FE867D1EC627139A6D0B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYM0pMEu57_TbL84WQfAQhA0NsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft
Manifest number: 0217
Signing time: Fri 25 Sep 2026 19:01:39 +0000
Manifest this update: Fri 25 Sep 2026 19:01:39 +0000
Manifest next update: Sat 26 Sep 2026 19:01:39 +0000
Files and hashes: 1: MrVUIQjfWhMeAygcTn_kB8nchao.roa (hash: CoX55bP+8UcP/V9NHXcXKWX+Bw+cYWaam37t88M/puk=)
2: lYM0pMEu57_TbL84WQfAQhA0NsY.crl (hash: itb44IuNTknJv1DYevCN/2IW4grti9Q6A6WfS/emZJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYM0pMEu57_TbL84WQfAQhA0NsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:d4:27:21:fe:86:7d:1e:c6:27:13:9a:6d:0b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958334a4c12ee7bfd36cbf385907c042103436c6
Validity
Not Before: Sep 25 19:01:39 2026 GMT
Not After : Sep 26 19:01:39 2026 GMT
Subject: CN=af2397452533725966f8a7d25be818d526fd0776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:62:9d:27:8f:e0:e3:31:f1:2b:1f:cd:cf:cf:
a5:17:f1:de:b3:23:06:28:c7:21:0a:f2:c9:e6:53:
e9:98:de:e2:a7:f0:21:f1:0b:72:11:5a:ff:ec:24:
e2:fb:eb:a6:21:6c:8d:f0:9e:40:d7:08:56:87:92:
04:19:ed:6f:3c:80:11:e1:eb:ff:7b:24:0c:99:00:
ab:13:64:9f:e6:02:07:60:f2:a8:f5:48:d6:28:d7:
62:4b:ab:8d:f5:c5:9d:08:3b:4c:a5:5a:f6:78:86:
6f:9b:f7:a2:fc:48:2e:c5:9e:b3:14:93:c5:f5:26:
bf:b8:5c:cd:ab:04:ea:47:7c:c7:c1:ce:4d:d8:be:
3b:21:4d:3a:dd:2c:aa:e0:49:f1:15:0b:fa:b7:32:
86:a2:97:cd:4c:17:4b:03:eb:b3:ae:b0:fd:73:7c:
ae:81:b5:0e:25:d0:4c:56:3f:2b:b2:6b:40:fd:2d:
60:26:ff:93:4d:c7:e3:89:26:10:4f:0c:bb:48:27:
f6:63:43:b2:e2:81:a8:af:48:4a:22:43:71:f8:98:
0f:b1:15:2b:ba:2f:0b:2b:14:08:1d:b5:94:e9:f3:
71:e0:a8:d3:22:96:cd:4e:0b:c3:3d:52:ad:5f:24:
c7:be:5a:2b:3a:27:2e:46:2c:b3:78:b7:94:25:76:
d9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:23:97:45:25:33:72:59:66:F8:A7:D2:5B:E8:18:D5:26:FD:07:76
X509v3 Authority Key Identifier:
keyid:95:83:34:A4:C1:2E:E7:BF:D3:6C:BF:38:59:07:C0:42:10:34:36:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYM0pMEu57_TbL84WQfAQhA0NsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ce:68:53:85:45:62:d1:cd:fe:76:76:54:ca:19:7d:19:28:
a5:c5:a0:1e:94:3a:a0:77:e7:7d:02:de:5f:5c:83:72:7b:6c:
24:9b:b6:0b:da:ed:f8:f2:2e:f7:2f:4a:b2:df:14:2f:35:53:
b5:77:7c:55:0e:71:7f:4f:47:99:22:16:02:15:ab:e6:5e:5d:
e6:6f:f5:df:9a:a1:00:1c:19:21:03:68:00:04:04:2a:37:ad:
9a:c8:36:ca:1e:8a:1c:cb:c8:f6:19:cf:99:ba:5f:22:19:78:
cd:01:96:10:6e:e8:f9:1c:65:5b:53:07:b3:2d:ad:f0:62:f9:
8a:bb:0b:37:5c:74:88:c5:b7:0f:de:6d:b8:40:0e:8a:e2:71:
95:fb:3c:d4:76:8f:ac:02:d3:bb:24:36:0f:7d:1e:bd:e2:14:
45:53:d0:c8:f1:73:e4:e4:5b:65:ee:bb:38:89:9d:1a:e7:c4:
69:5a:43:6f:aa:5b:70:f7:07:f0:f8:3a:f3:f4:3c:68:a2:05:
85:fc:1e:f4:0d:e5:aa:4f:39:76:03:40:9e:f6:81:f0:a1:bb:
10:b9:5d:4e:7e:e0:5d:12:6f:60:e1:0d:bd:5e:bf:a7:39:78:
f0:72:d4:9c:46:3c:04:c1:76:8c:68:0f:16:dc:c7:c2:83:6c:
76:a7:c7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:44:09 2026 by rpki-client