Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
File: y-lwmA1WXMdK2ylKpox7BvUTKJA.mft (raw, json)
Hash identifier: /HT47XZttoXnAGBspmsGLD3yDEM/c0mAulCXxhYYwC8=
Subject key identifier: 52:78:A1:49:63:D3:35:45:B3:71:C5:5F:F9:C2:28:D7:42:E6:DB:39
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 01A03FA9FD746A3C3F85A42C0654F85CD113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
Manifest number: 0D30
Signing time: Wed 26 Aug 2026 20:01:40 +0000
Manifest this update: Wed 26 Aug 2026 20:01:40 +0000
Manifest next update: Thu 27 Aug 2026 20:01:40 +0000
Files and hashes: 1: UdacM9ueU4fTZAcn05BbHDu10YY.roa (hash: zli1vqBuGj4w6sq940v9plUifYC90I/HldwyEsoprOE=)
2: VsR35aykkc_iAYM4SDexkh120pI.roa (hash: gEd57quT2IwN1bNN4Pr/vOfz7pwdmfPkBYPC0L79I3E=)
3: y-lwmA1WXMdK2ylKpox7BvUTKJA.crl (hash: noYng62kWEcezwEohNLT6GOwtI3SwGD51hP4KtdxPiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:fd:74:6a:3c:3f:85:a4:2c:06:54:f8:5c:d1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Aug 26 20:01:40 2026 GMT
Not After : Aug 27 20:01:40 2026 GMT
Subject: CN=5278a14963d33545b371c55ff9c228d742e6db39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:70:3b:ce:89:04:aa:d7:de:ed:b1:36:eb:c5:
fe:b7:0e:4b:a0:91:c5:97:21:26:9d:9f:6c:c7:56:
41:9e:42:29:65:43:2b:d9:27:b3:c7:b4:b2:a8:28:
42:76:68:d8:f2:a7:be:4d:61:77:76:56:fa:6d:84:
4d:2f:03:47:76:cc:fe:8c:38:64:2d:67:08:61:b2:
3b:60:42:86:f7:54:12:57:b8:e4:b3:7b:77:bf:7a:
e5:c3:2d:a3:c2:51:58:65:d2:dd:2d:4d:26:37:a2:
c5:04:ee:38:ce:74:96:c3:de:67:87:9b:2b:5c:ec:
93:97:0b:8c:77:cc:ad:f3:28:89:84:f4:78:d4:17:
18:da:26:7e:55:53:b4:32:cb:f3:a4:10:f8:00:5b:
87:eb:85:49:00:57:03:2b:de:82:5d:f7:44:98:d0:
49:cd:c3:e8:e2:b1:5b:11:da:73:24:42:08:25:14:
c5:58:54:79:9e:63:c5:4e:3f:26:af:60:53:27:04:
3f:a5:4a:47:a6:1c:48:4d:60:b8:70:d0:54:54:29:
06:c5:28:ef:e0:23:fb:3d:bb:67:74:c7:a6:b6:4e:
7e:b8:75:2c:81:c1:d3:1f:21:db:fc:94:66:28:8a:
09:b5:b7:66:85:b6:7d:b1:80:55:2b:cb:0d:59:24:
d0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:78:A1:49:63:D3:35:45:B3:71:C5:5F:F9:C2:28:D7:42:E6:DB:39
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2a:8c:e4:9e:ca:8d:88:52:79:d4:d7:bf:a3:db:04:4e:64:
7a:b9:fa:3a:35:5c:4a:82:56:9f:99:e1:a2:5c:a8:38:01:51:
9a:0d:d5:e6:86:26:18:0b:89:8b:f6:de:67:61:a7:95:6d:5f:
cf:5d:30:79:40:9d:3c:82:db:ff:fe:f2:0e:35:9d:90:28:22:
82:c3:93:62:90:d0:69:cd:40:df:db:e8:2e:f6:62:1c:27:bb:
b3:84:81:63:7f:09:66:ba:fb:d5:e3:10:b0:30:a4:dd:0b:1c:
83:6a:79:82:93:93:ba:57:08:ed:ad:0f:2e:0e:c6:e7:93:15:
1b:6f:be:38:e7:e9:66:cd:2a:28:93:34:4e:46:42:71:28:1c:
cf:14:fa:dc:5a:b5:17:44:93:43:0c:be:91:20:9f:b5:bc:4d:
ca:bf:58:90:78:70:c9:4b:2f:92:92:57:0e:5d:47:9e:f0:21:
c5:f3:d1:09:bd:50:f2:99:a5:55:23:f7:8e:2a:88:d8:62:16:
59:f7:fe:39:04:0c:62:90:71:89:6e:0b:b1:b6:a2:41:cf:90:
55:ba:85:31:b3:8f:1e:a6:68:4e:1a:45:93:74:69:a9:65:61:
f7:da:b7:e4:15:38:9a:cd:43:6b:6a:fa:8b:c9:66:8f:ed:31:
6a:01:d7:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/qf10ajw/haQsBlT4XNETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZTk3MDk4MGQ1NjVjYzc0YWRiMjk0YWE2OGM3YjA2ZjUx
MzI4OTAwHhcNMjYwODI2MjAwMTQwWhcNMjYwODI3MjAwMTQwWjAzMTEwLwYDVQQD
Eyg1Mjc4YTE0OTYzZDMzNTQ1YjM3MWM1NWZmOWMyMjhkNzQyZTZkYjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXA7zokEqtfe7bE268X+tw5LoJHF
lyEmnZ9sx1ZBnkIpZUMr2Sezx7SyqChCdmjY8qe+TWF3dlb6bYRNLwNHdsz+jDhk
LWcIYbI7YEKG91QSV7jks3t3v3rlwy2jwlFYZdLdLU0mN6LFBO44znSWw95nh5sr
XOyTlwuMd8yt8yiJhPR41BcY2iZ+VVO0MsvzpBD4AFuH64VJAFcDK96CXfdEmNBJ
zcPo4rFbEdpzJEIIJRTFWFR5nmPFTj8mr2BTJwQ/pUpHphxITWC4cNBUVCkGxSjv
4CP7PbtndMemtk5+uHUsgcHTHyHb/JRmKIoJtbdmhbZ9sYBVK8sNWSTQiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJ4oUlj0zVFs3HFX/nCKNdC5ts5MB8GA1UdIwQY
MBaAFMvpcJgNVlzHStspSqaMewb1EyiQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS1sd21BMVdYTWRLMnlsS3BveDdCdlVUS0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zZGNmN2ItMTcwMy00NTlmLWFjMGIt
NzU2YTA4YTRhZGRhLzEveS1sd21BMVdYTWRLMnlsS3BveDdCdlVUS0pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8zZGNmN2ItMTcwMy00NTlmLWFjMGItNzU2YTA4YTRhZGRh
LzEveS1sd21BMVdYTWRLMnlsS3BveDdCdlVUS0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCqM5J7K
jYhSedTXv6PbBE5kern6OjVcSoJWn5nholyoOAFRmg3V5oYmGAuJi/beZ2GnlW1f
z10weUCdPILb//7yDjWdkCgigsOTYpDQac1A39voLvZiHCe7s4SBY38JZrr71eMQ
sDCk3Qscg2p5gpOTulcI7a0PLg7G55MVG2++OOfpZs0qKJM0TkZCcSgczxT63Fq1
F0STQwy+kSCftbxNyr9YkHhwyUsvkpJXDl1HnvAhxfPRCb1Q8pmlVSP3jiqI2GIW
Wff+OQQMYpBxiW4LsbaiQc+QVbqFMbOPHqZoThpFk3RpqWVh99q35BU4ms1Da2r6
i8lmj+0xagHXGQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 00:08:33 2026 by rpki-client