Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
File: lyQtuibtiCs4DavrqzxfOUIAbsw.mft (raw, json)
Hash identifier: AhhKn1WOqTBiayMA08WvB+vEEwlMBvWOmCfju31rsCE=
Subject key identifier: B3:E4:E5:55:E9:EC:1E:D0:44:D5:EE:E8:52:A5:82:D4:BA:FE:D9:AC
Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
Certificate issuer: /CN=97242dba26ed882b380dabebab3c5f3942006ecc
Certificate serial: 019E1E35A7DD358D118F575677B9608E623E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
Manifest number: 190C
Signing time: Tue 12 May 2026 22:01:33 +0000
Manifest this update: Tue 12 May 2026 22:01:33 +0000
Manifest next update: Wed 13 May 2026 22:01:33 +0000
Files and hashes: 1: KuYHIDTT0pfrZb69d41RvniDU3w.roa (hash: pzsXiQ0yFpyoB+XjLaUAL8JPW4YObE6pxPQc+E3xZNQ=)
2: lyQtuibtiCs4DavrqzxfOUIAbsw.crl (hash: KyFeSCMHGdKLvxlDTuBrLvH3VhU8ZKjvh9u6SfzqAlk=)
3: vKZmJ0jDQuc8fHx1GoSSQ_umesg.roa (hash: aKqfhdTXupMXPlpBmxeTWXojTlpX9o9GLhhsywcjHYI=)
4: w1fI7tvPLN33WU2I9Rt_Z9orWcc.roa (hash: RojgiRAa+/JdbpS5f+RHbhZYfz5WfXhvE0D2UVq9ASc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:a7:dd:35:8d:11:8f:57:56:77:b9:60:8e:62:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc
Validity
Not Before: May 12 22:01:33 2026 GMT
Not After : May 13 22:01:33 2026 GMT
Subject: CN=b3e4e555e9ec1ed044d5eee852a582d4bafed9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:70:6b:7d:f8:1e:18:de:1b:83:9a:01:49:
8a:a2:bc:0c:83:2b:5b:1d:9c:a6:50:58:e1:d2:6d:
6d:e8:54:40:83:a2:ea:f1:9f:c2:50:a3:a1:6a:5c:
8f:c8:70:52:ed:b2:7c:88:09:36:62:59:c4:91:1f:
ba:fa:f6:08:d0:22:e3:bd:ce:c1:f9:7e:ca:fb:ec:
cf:2f:73:32:9f:80:b6:5c:d7:aa:39:16:a1:94:e3:
71:b0:f5:e4:05:9b:28:21:c4:5c:ae:c7:67:a1:ce:
5e:5e:f6:12:6c:79:26:f6:7e:35:b8:5c:2e:95:4f:
e3:73:36:2c:1a:f9:9e:9c:a4:10:b6:5a:2f:72:be:
67:66:ca:db:67:82:94:42:ab:49:df:e0:15:09:f3:
2f:e7:4c:c5:33:dc:62:3a:22:30:b1:cb:b9:46:01:
f0:0c:09:8a:d6:bc:63:db:56:af:95:1f:b0:88:79:
9b:4c:ab:f8:a5:0e:5d:6c:9a:8b:f6:28:7d:92:1e:
d8:97:76:e3:63:f3:85:e1:9f:e9:c8:20:1c:e5:0f:
d5:b6:12:9c:5b:c6:68:28:8f:14:7d:b3:d6:79:3f:
88:55:7d:7d:44:9a:a5:a4:5a:8e:55:6d:e5:d1:c7:
5c:bc:53:7f:b7:7a:ae:cd:16:fc:8a:24:fc:01:a1:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E4:E5:55:E9:EC:1E:D0:44:D5:EE:E8:52:A5:82:D4:BA:FE:D9:AC
X509v3 Authority Key Identifier:
keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:95:64:a1:32:ef:d9:7f:e4:2e:0f:15:51:72:36:e4:20:3e:
3b:00:0d:50:9b:65:bc:10:a2:4f:ba:1c:bc:ab:83:49:d1:1e:
8c:20:37:d4:d8:4c:c4:4c:04:54:6a:82:fe:4c:f1:0d:9d:cd:
65:f5:24:dc:6a:b5:6f:28:99:90:c3:f2:ad:1f:4a:7b:c1:5a:
f9:eb:93:30:30:8d:ca:e8:9e:60:83:20:ed:09:95:05:c3:cd:
94:97:13:ac:6f:e2:b3:52:d5:42:89:ac:4e:4e:8c:fa:de:3b:
cd:ec:79:37:bf:e7:84:b3:02:2a:19:6e:5a:91:f6:f8:30:e0:
2f:8e:33:d4:47:0b:98:86:89:db:e6:3f:57:01:8d:1b:45:03:
18:a0:18:08:0c:98:55:f4:02:92:32:48:27:9d:e0:f7:4c:7d:
05:85:52:f1:ef:b2:6c:19:12:16:34:12:16:fe:8c:87:b1:6f:
53:58:db:c0:9a:2b:1b:1f:be:ee:1f:ba:55:f7:3b:3e:1d:10:
f0:22:ac:45:09:3b:b9:f3:8e:ea:8e:03:c3:2e:bc:62:3f:5a:
ed:95:bc:96:7c:93:cd:50:40:98:4a:02:30:9b:97:2f:7a:28:
72:9f:da:37:aa:7a:5d:61:8f:2e:03:fd:c6:ed:86:b3:bf:cc:
96:41:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:46:44 2026 by rpki-client