Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: VavntTU8UsfHuayQIWsAwAmzUWeB5DT0eUptGeyBxeA=
Subject key identifier: 97:0D:56:61:33:C9:E6:7D:39:44:57:E3:1A:F5:0B:D7:19:63:8C:97
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 019D37BFF1EDB63494DD574AA4247043B5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:00:19 +0000
Manifest this update: Sun 29 Mar 2026 04:00:19 +0000
Manifest next update: Mon 30 Mar 2026 04:00:19 +0000
Files and hashes: 1: MDOYojRzK_b13iyI5P24Yv-1OfI.roa (hash: 9C3SntnocakqcNtFoy8WdbT469VxGnuBBybMiDuCskI=)
2: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: pDqGjhdGPfHS3RU/UJ6wssaIVJkMQ1bCKpqKRsaV9Tc=)
3: tD3EeMEBT3yEWBttpsWGl0bRetk.roa (hash: ckduoJYFFvUfXMRG101fPH5je/+Pxdi1LergZOeIB/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f1:ed:b6:34:94:dd:57:4a:a4:24:70:43:b5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Mar 29 04:00:19 2026 GMT
Not After : Mar 30 04:00:19 2026 GMT
Subject: CN=970d566133c9e67d394457e31af50bd719638c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:83:c6:f7:b1:ad:7a:1a:1b:1f:90:93:3e:
f7:f7:e8:0c:63:09:99:fd:04:33:df:32:a8:6a:39:
c9:67:43:f8:49:f8:b3:c5:48:5f:86:cd:4d:dc:88:
fd:d8:2d:dc:51:0d:43:73:38:9e:b0:56:17:ad:01:
d5:2c:17:f3:4b:63:1c:4a:e4:08:db:f7:0d:59:8f:
3b:2e:e1:84:0f:43:3a:74:c7:f2:c3:c9:d8:d5:d9:
63:e7:0e:be:15:cb:e6:69:65:86:40:74:0f:c1:66:
6d:fc:d0:f7:cb:86:45:71:d7:5b:0b:0b:cc:d7:5e:
58:7c:fd:7e:2a:b4:70:71:c1:9a:68:bf:a4:4c:e5:
13:a1:e1:b2:7f:d7:91:2a:9a:d9:14:de:11:5f:04:
fe:80:c1:49:36:2f:40:bb:be:9e:88:fc:a8:f7:24:
02:c5:f6:b2:e2:10:ac:8e:7d:f5:85:67:94:d3:8f:
4e:d7:96:02:dc:4e:43:6f:39:a0:f7:52:fe:70:dc:
76:9d:2f:40:62:26:30:7a:ac:c7:2a:71:24:a1:a9:
7f:2a:e4:a4:0e:13:2b:a4:c2:6c:d8:e3:29:5f:0a:
bb:68:2f:9f:e7:6a:ca:84:f5:ba:de:e5:9b:b7:7f:
01:21:92:6a:0b:4b:7c:3e:e9:07:38:5e:17:fd:50:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0D:56:61:33:C9:E6:7D:39:44:57:E3:1A:F5:0B:D7:19:63:8C:97
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0f:3c:9e:e7:27:24:66:4a:49:8c:8e:6f:71:ef:19:95:c3:
8b:32:c9:91:20:6b:54:a1:5b:92:be:6d:79:6a:34:d1:86:11:
f5:19:31:7d:ec:39:41:7f:1d:e8:40:a3:b7:2a:9e:2b:50:48:
a4:e2:44:a1:3d:de:2d:4e:41:40:30:e9:e4:f8:e3:96:01:7a:
cf:e7:76:68:0d:7e:96:f0:33:a3:06:f3:1d:5b:57:d6:59:fb:
b8:4d:4a:7d:78:63:03:c6:8c:5a:97:dc:57:cb:2b:71:a9:a2:
d5:a6:08:f5:5b:8f:99:46:d9:e0:2a:cc:84:a2:e1:99:2f:02:
01:9d:6a:b1:54:80:41:b3:c6:63:d6:8d:26:27:2d:24:9a:68:
8b:47:94:43:a9:6d:91:30:eb:20:7f:cf:ab:c8:f8:55:9c:8c:
ef:63:67:51:ed:43:b8:8b:2b:af:4d:bb:2e:63:d9:77:ea:f2:
75:f1:37:21:61:89:af:5c:96:f8:00:08:78:63:c1:29:fb:0a:
41:7a:35:48:f2:26:b3:d5:39:7f:a6:0c:87:92:30:14:1c:9a:
05:f5:19:13:39:73:c6:8f:e5:36:4f:c2:9d:40:2f:25:6d:96:
87:26:92:e6:5d:14:c2:8d:44:73:a9:fb:68:82:56:1d:19:3d:
fc:ae:c0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:35 2026 by rpki-client