Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: QMN9myXIj27vVz2Gmft4evPx/aiJ1X01nzDGeyDmE4s=
Subject key identifier: FB:B4:77:41:B8:95:D6:20:19:6E:6D:D0:4C:B3:50:AA:36:3C:D0:E0
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 019E577FB22BEC0659ACB5AEF2282D154BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 1925
Signing time: Sun 24 May 2026 01:00:46 +0000
Manifest this update: Sun 24 May 2026 01:00:46 +0000
Manifest next update: Mon 25 May 2026 01:00:46 +0000
Files and hashes: 1: MDOYojRzK_b13iyI5P24Yv-1OfI.roa (hash: 9C3SntnocakqcNtFoy8WdbT469VxGnuBBybMiDuCskI=)
2: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: OanOse4EmtUpgayRqVs6DmHbEmBT4K5/TAwnPUEmJgs=)
3: tD3EeMEBT3yEWBttpsWGl0bRetk.roa (hash: ckduoJYFFvUfXMRG101fPH5je/+Pxdi1LergZOeIB/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:57:7f:b2:2b:ec:06:59:ac:b5:ae:f2:28:2d:15:4b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: May 24 01:00:46 2026 GMT
Not After : May 25 01:00:46 2026 GMT
Subject: CN=fbb47741b895d620196e6dd04cb350aa363cd0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:58:9c:63:73:50:49:4f:68:80:07:82:16:09:
71:65:df:8d:e6:a4:2f:7c:65:d9:f3:3a:8f:14:70:
b9:65:68:99:90:08:58:33:1b:0c:03:7a:fd:3d:e7:
e5:65:6d:05:ae:1d:2f:31:d0:11:22:52:d4:8e:a4:
9b:f9:a5:69:59:00:3e:55:16:31:f3:b2:bb:5c:d5:
3e:67:c7:f2:2a:1b:c6:1f:4f:ea:4b:dd:0d:32:94:
aa:4e:e9:3d:38:82:db:e3:cc:d0:df:30:15:a2:1f:
92:c5:51:a6:e8:64:bb:58:86:5a:1f:8f:00:46:65:
96:77:12:e2:1d:a2:7b:d9:5a:d2:14:ba:cf:07:33:
18:54:7c:c4:4b:5b:a5:bc:98:c4:4b:3d:d7:de:fd:
4c:75:ba:4c:7b:76:d6:08:c6:e8:54:da:bd:3a:ff:
00:28:24:fc:c8:c3:39:61:20:9c:c4:fa:5a:35:a1:
9a:57:42:c1:9f:19:52:c4:45:9e:c7:47:ca:22:6d:
5e:b9:23:f8:9f:27:3b:0c:fb:0b:aa:de:93:55:60:
92:f4:d9:f1:15:ca:ba:eb:94:7b:62:82:ee:cf:9f:
6e:84:81:b7:ac:98:6e:c8:3c:2d:ed:40:27:df:86:
e2:6e:af:39:34:d6:ee:8e:ca:ee:60:6b:f3:7a:1b:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B4:77:41:B8:95:D6:20:19:6E:6D:D0:4C:B3:50:AA:36:3C:D0:E0
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8f:e6:fb:ce:8e:52:31:72:14:6c:ed:d2:1f:f8:60:87:9b:
09:f0:b9:93:71:51:10:7d:af:04:d5:23:1f:82:a9:7c:b3:00:
8a:6d:9b:7b:cd:09:0c:b3:57:51:9f:29:93:18:a9:a9:b1:3a:
e0:fd:b2:cd:ed:08:81:e2:2c:e7:90:ca:bf:be:44:b8:d3:40:
30:1c:f9:3d:0e:8a:42:d3:1f:df:2d:a8:9d:fa:ad:66:92:63:
e2:4b:b0:f3:c6:42:a4:50:11:06:56:d2:a7:e2:24:c9:db:65:
6c:14:b1:78:84:3f:3c:d0:ed:93:db:41:ee:d8:44:b1:55:90:
37:b4:ba:59:ac:63:95:57:71:fa:7b:09:19:e8:87:ae:40:69:
3f:a5:ac:5d:99:f7:61:ed:e3:50:16:6d:cc:b0:5a:8c:b9:62:
74:2b:09:ad:cd:6c:2e:35:27:44:41:9e:1b:ad:6f:7e:db:84:
52:c1:45:6f:65:7e:90:27:7c:b9:08:98:f8:90:ea:33:88:d0:
9b:25:96:1f:21:df:ce:48:5d:d4:0c:e3:da:b3:9a:b3:55:53:
40:c6:23:15:60:26:ec:b8:43:11:ce:c3:9a:d4:96:71:6b:37:
35:ed:7f:0f:74:cd:1e:90:4a:6f:cd:7c:7e:41:08:22:54:00:
33:d3:16:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:37:54 2026 by rpki-client