Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: 5ZHBia/7Bn6mGZqF8wQCpYIObDeF4sG6xYYbNINKNGk=
Subject key identifier: 5C:03:D1:6E:DD:FC:B3:92:8A:3A:AB:D8:01:30:96:C6:1C:3B:C6:C2
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 019F412D48A5F5516E174C20A3B4D02E133B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 199E
Signing time: Wed 08 Jul 2026 10:01:54 +0000
Manifest this update: Wed 08 Jul 2026 10:01:54 +0000
Manifest next update: Thu 09 Jul 2026 10:01:54 +0000
Files and hashes: 1: MDOYojRzK_b13iyI5P24Yv-1OfI.roa (hash: 9C3SntnocakqcNtFoy8WdbT469VxGnuBBybMiDuCskI=)
2: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: f43S3ViGgo0mSSVpxO99OCyI11+18DLAjoEez6cMoeo=)
3: tD3EeMEBT3yEWBttpsWGl0bRetk.roa (hash: ckduoJYFFvUfXMRG101fPH5je/+Pxdi1LergZOeIB/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 10:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:2d:48:a5:f5:51:6e:17:4c:20:a3:b4:d0:2e:13:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Jul 8 10:01:54 2026 GMT
Not After : Jul 9 10:01:54 2026 GMT
Subject: CN=5c03d16eddfcb3928a3aabd8013096c61c3bc6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f8:8f:54:dc:aa:65:d2:25:13:37:45:b4:86:
7f:62:cb:bd:db:5a:b7:b0:fe:6c:0a:7c:1b:df:8b:
a4:28:f3:13:43:c8:e5:37:aa:e8:d4:9b:f7:2d:94:
6a:7f:84:fe:44:fc:f5:1e:e0:42:a8:80:5f:1f:0a:
c1:7f:2c:8e:af:e3:6f:e0:01:4e:bf:25:95:2f:57:
99:27:54:df:b5:66:f2:b1:60:13:db:8a:63:44:de:
7a:de:71:9a:93:af:15:18:f7:ff:0c:6e:91:6f:61:
6e:2a:e7:20:2a:b3:22:13:e5:31:ea:34:d5:be:27:
82:27:33:a6:e4:90:5b:83:5a:71:81:6e:3b:b8:e9:
6b:4d:fa:8a:29:2b:d4:8a:78:c1:04:3d:28:ca:d0:
a1:47:5b:3e:35:c8:ff:5e:24:f2:59:62:74:30:93:
3e:ec:40:20:7a:f0:5b:f3:ce:ae:67:f9:54:42:08:
4c:7b:d3:7a:56:da:a0:26:38:89:83:07:82:e9:ae:
16:6d:37:c1:72:78:16:0a:28:e1:55:17:11:fb:d5:
33:a8:70:8a:f9:a7:de:7a:c5:18:91:7c:81:11:86:
09:76:45:bc:e6:ea:72:54:56:01:63:6c:79:b3:65:
28:6d:b5:84:61:26:67:f9:4d:a8:3b:d1:09:1f:d3:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:03:D1:6E:DD:FC:B3:92:8A:3A:AB:D8:01:30:96:C6:1C:3B:C6:C2
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:13:ed:53:00:9e:dc:0c:f3:d5:16:c3:76:fd:49:b2:25:5e:
ae:6c:19:e0:bd:a7:f6:d5:74:38:06:56:07:b1:4e:b4:c5:cd:
f6:50:b7:d5:8e:f7:52:73:fc:c6:80:ca:45:8e:f3:25:89:02:
ee:c9:70:33:75:56:17:8e:2a:e0:3a:75:f1:1c:8e:64:57:8f:
54:45:a7:91:93:d8:6c:37:03:31:b9:99:12:d1:fa:16:05:ab:
77:63:32:6b:83:f4:07:17:ec:5a:c7:fa:51:8f:9e:42:53:de:
b4:f3:af:fb:a5:34:ff:9a:aa:b4:a0:bc:2e:f9:41:f3:17:79:
53:74:3f:b1:7b:41:98:1a:17:eb:64:d4:5f:a2:1c:85:bf:e4:
a0:bd:67:3b:46:8f:72:5d:f8:c6:de:43:33:a0:b8:0a:41:b2:
55:fc:c9:41:75:e7:f0:ca:43:22:f8:ad:81:1c:2e:b0:49:d7:
62:a8:98:f1:9f:02:3f:36:21:3e:e8:cb:e0:77:3a:26:15:d5:
86:b6:17:64:ef:d6:28:d2:3c:80:49:3d:7e:13:ad:f2:e3:ef:
f2:c0:76:b6:d7:a1:fd:cb:9f:73:f2:cf:f4:9c:bf:9e:91:54:
33:1f:d2:39:c5:ac:82:cc:1e:12:cf:8d:7a:4b:f0:09:3e:18:
6c:4e:70:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:31:33 2026 by rpki-client