Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
File: y-lwmA1WXMdK2ylKpox7BvUTKJA.mft (raw, json)
Hash identifier: 1xZ4dQlqiYxJfrKeTFo930gN5QtP82rZxOzMdJ3hgjI=
Subject key identifier: 20:CD:80:82:E4:28:5C:2E:58:F6:0F:E0:A0:00:36:22:BE:27:06:72
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 019D38664DB0FA1F34CBD1493FEE416AC9FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
Manifest number: 0B9B
Signing time: Sun 29 Mar 2026 07:02:01 +0000
Manifest this update: Sun 29 Mar 2026 07:02:01 +0000
Manifest next update: Mon 30 Mar 2026 07:02:01 +0000
Files and hashes: 1: NidyPRYUDsQcexHsJToZqXrMBV8.roa (hash: p65GZR4XN5l1qftmH4TTF0KOAaUQ1Yo/rxmu16Joj74=)
2: y-lwmA1WXMdK2ylKpox7BvUTKJA.crl (hash: 77REKynLf44OvmE1OoQwgG19rRsN+WCaBsoPFMYmBks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4d:b0:fa:1f:34:cb:d1:49:3f:ee:41:6a:c9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Mar 29 07:02:01 2026 GMT
Not After : Mar 30 07:02:01 2026 GMT
Subject: CN=20cd8082e4285c2e58f60fe0a0003622be270672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0f:fb:96:71:56:9e:6a:6c:8d:56:58:e0:10:
f3:35:48:0e:3c:a1:6f:0b:8b:a3:96:62:a6:43:2c:
48:33:b0:d4:d7:c9:de:bb:f7:d1:b9:67:50:59:00:
0f:92:f0:87:58:f0:57:f2:b4:49:3b:48:38:03:03:
6c:aa:ba:fa:cb:74:f7:54:05:dd:54:03:1c:e9:f3:
ad:bf:de:c4:b5:a2:4d:7e:7f:3a:98:b0:cf:b4:4c:
ae:0f:df:71:f6:85:ea:10:7b:ee:9f:9f:2f:94:94:
bb:09:b7:6b:1b:f0:b2:ad:02:ff:21:58:72:e9:d4:
83:c5:7a:8a:d8:0b:31:6e:42:d3:47:d1:bf:17:03:
8b:58:f1:2d:26:93:de:16:56:d7:7d:a7:27:ae:90:
33:25:f5:79:42:31:cf:02:29:96:5a:b1:eb:b4:35:
97:7b:c3:64:46:43:c6:26:0e:ff:ef:98:00:e6:4b:
65:69:95:9d:29:88:d5:48:c6:17:c6:b0:aa:f9:98:
6f:3d:12:80:17:c3:97:c9:89:4c:da:f7:5a:14:e9:
d8:8c:66:ae:58:3b:10:b0:dc:ac:d6:d0:34:b1:bb:
2f:c9:1f:7c:5a:e8:b4:be:66:4b:4d:e1:a6:70:1d:
2b:94:f2:45:50:5d:46:8b:5d:cc:6f:69:73:8c:af:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CD:80:82:E4:28:5C:2E:58:F6:0F:E0:A0:00:36:22:BE:27:06:72
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:cf:6d:2b:07:0f:ae:49:66:f4:fb:9d:07:3b:36:b0:24:b2:
a0:8f:40:4e:94:72:ae:ad:b1:6a:04:ea:3f:6b:5a:6e:da:aa:
ce:09:d0:06:2a:f8:cd:46:2b:4b:a7:8a:02:d3:6c:7d:d0:d1:
d7:5f:a7:5f:bb:c6:aa:e5:ff:4f:01:ce:83:5b:ca:a2:ce:bd:
70:da:d1:a4:9d:63:51:cc:16:90:d1:67:b8:9f:56:f0:e1:eb:
83:76:ef:d3:8e:c3:b7:f4:75:89:a3:1b:3d:2c:63:b3:65:c8:
18:30:e4:0c:e9:8e:e9:41:52:c0:26:31:91:90:4a:99:d9:8c:
e9:f8:1f:d3:f4:f8:3b:6c:cb:05:28:cf:23:6d:5a:d8:87:84:
8b:29:54:1b:88:ff:1f:3d:73:9d:9f:90:0b:28:61:94:60:5d:
a1:20:ff:cc:db:37:d3:30:69:6a:d2:40:ca:31:f2:40:db:6a:
e1:f5:e0:5c:2e:2d:42:ba:d2:11:6e:93:b4:b7:a6:1d:d0:5a:
7d:01:b9:f3:06:ed:cd:26:15:e1:b2:27:58:df:90:53:bc:3c:
34:fb:a5:18:d5:ad:8f:10:95:6e:0a:45:6a:6b:d7:61:e5:20:
e9:c9:6e:9c:01:70:4f:db:a5:e9:af:22:e3:5f:07:44:4d:3a:
12:78:fe:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:00 2026 by rpki-client