Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
File: y-lwmA1WXMdK2ylKpox7BvUTKJA.mft (raw, json)
Hash identifier: 4Fy0yHMSDrE+r3X9ZFwUNczGa8cSh3JVTElT0sia2HU=
Subject key identifier: 48:8C:23:E5:AA:7C:8A:5D:1C:A9:AC:B0:EC:6D:B6:10:8B:71:7D:82
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 019F4C5590BBFADC6FDB93BA4167F9E6928C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
Manifest number: 0CB2
Signing time: Fri 10 Jul 2026 14:01:43 +0000
Manifest this update: Fri 10 Jul 2026 14:01:43 +0000
Manifest next update: Sat 11 Jul 2026 14:01:43 +0000
Files and hashes: 1: UdacM9ueU4fTZAcn05BbHDu10YY.roa (hash: zli1vqBuGj4w6sq940v9plUifYC90I/HldwyEsoprOE=)
2: VsR35aykkc_iAYM4SDexkh120pI.roa (hash: gEd57quT2IwN1bNN4Pr/vOfz7pwdmfPkBYPC0L79I3E=)
3: y-lwmA1WXMdK2ylKpox7BvUTKJA.crl (hash: B00uK9yZBjN0WectAoqqGQzb1094Kk/oF3h4RhWlt8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:55:90:bb:fa:dc:6f:db:93:ba:41:67:f9:e6:92:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Jul 10 14:01:43 2026 GMT
Not After : Jul 11 14:01:43 2026 GMT
Subject: CN=488c23e5aa7c8a5d1ca9acb0ec6db6108b717d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:fa:6e:72:f3:c7:36:e0:67:ff:83:85:c6:
85:6b:50:dc:15:0f:f2:45:67:9f:68:14:f1:78:c5:
c8:74:f4:7a:bc:67:38:a8:1e:b1:8d:11:9e:85:d6:
59:7f:8f:3a:60:60:16:e1:67:a9:2e:53:b8:35:2d:
c1:55:63:c5:de:b7:0e:89:03:5e:0a:e1:00:e3:51:
76:33:8c:f2:b8:e7:7b:07:4a:44:24:dd:c8:0c:56:
6c:1f:72:b9:33:72:b4:d2:b4:6a:91:66:88:6c:5b:
25:1f:4d:79:80:24:df:86:de:fe:c5:b0:6a:9e:04:
75:0b:21:89:c8:96:d1:24:91:64:77:5f:8f:7d:54:
c9:b3:89:c7:a3:57:dc:e6:56:30:88:92:ee:42:08:
e3:2a:1d:f5:59:8a:80:8c:b0:1d:e3:b0:52:79:02:
61:c1:58:48:73:18:c5:1c:b3:e4:a7:96:8a:d8:7c:
a6:6f:34:65:a2:a8:13:93:ec:19:9b:02:af:9b:b6:
44:f2:f3:3a:6f:d6:e2:78:af:1b:12:fa:b0:74:16:
8b:17:24:0c:4b:60:49:5a:01:ff:f1:9f:a7:f3:d6:
4f:31:6e:21:0f:75:fa:3d:c8:89:39:df:a1:a7:c3:
a6:9e:9b:ae:1a:ce:d5:42:17:f8:46:73:86:e8:86:
f6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8C:23:E5:AA:7C:8A:5D:1C:A9:AC:B0:EC:6D:B6:10:8B:71:7D:82
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:db:12:08:cd:20:6d:b0:5d:0a:92:fe:45:2e:38:e0:fd:b4:
dd:09:a2:43:a2:e5:f7:95:3b:03:70:10:19:e9:04:35:45:31:
87:84:3e:b2:d9:37:f6:66:2d:b4:17:69:c1:e9:ff:df:01:03:
a2:09:57:9a:49:34:65:1f:0f:39:2f:35:e7:2b:7a:2c:db:7e:
b6:af:58:b5:be:f1:1e:e5:43:a8:74:28:56:71:85:30:4e:83:
b5:6a:a7:1a:a8:d0:ed:c9:13:85:6f:e3:3c:46:90:fa:1f:c9:
79:e2:e4:a9:ef:e2:71:c1:0f:f8:28:75:4c:49:39:ce:61:a5:
58:0b:5d:4b:a5:6d:58:56:64:0c:5f:d7:ad:e8:ec:7a:7d:23:
47:26:52:f3:ab:46:de:52:f5:ad:fb:95:6a:da:c4:df:b5:7d:
4e:b3:19:ab:2b:c2:17:c4:f0:8d:8d:24:bc:c6:79:22:29:3a:
69:0f:16:95:24:77:b8:c4:f9:4e:64:9b:70:6e:53:51:57:d5:
db:4a:6e:e4:2a:c0:a7:c3:56:c5:62:4d:39:a0:f8:77:33:24:
0c:39:ed:29:87:88:15:cd:32:bc:58:e2:fd:ec:23:79:50:4d:
5e:ff:29:5c:14:2d:7b:9f:bc:27:ec:a9:fa:0d:aa:40:30:ca:
d5:05:b1:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9MVZC7+txv25O6QWf55pKMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZTk3MDk4MGQ1NjVjYzc0YWRiMjk0YWE2OGM3YjA2ZjUx
MzI4OTAwHhcNMjYwNzEwMTQwMTQzWhcNMjYwNzExMTQwMTQzWjAzMTEwLwYDVQQD
Eyg0ODhjMjNlNWFhN2M4YTVkMWNhOWFjYjBlYzZkYjYxMDhiNzE3ZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFD6bnLzxzbgZ/+DhcaFa1DcFQ/y
RWefaBTxeMXIdPR6vGc4qB6xjRGehdZZf486YGAW4WepLlO4NS3BVWPF3rcOiQNe
CuEA41F2M4zyuOd7B0pEJN3IDFZsH3K5M3K00rRqkWaIbFslH015gCTfht7+xbBq
ngR1CyGJyJbRJJFkd1+PfVTJs4nHo1fc5lYwiJLuQgjjKh31WYqAjLAd47BSeQJh
wVhIcxjFHLPkp5aK2HymbzRloqgTk+wZmwKvm7ZE8vM6b9bieK8bEvqwdBaLFyQM
S2BJWgH/8Z+n89ZPMW4hD3X6PciJOd+hp8OmnpuuGs7VQhf4RnOG6Ib22QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiMI+WqfIpdHKmssOxtthCLcX2CMB8GA1UdIwQY
MBaAFMvpcJgNVlzHStspSqaMewb1EyiQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS1sd21BMVdYTWRLMnlsS3BveDdCdlVUS0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zZGNmN2ItMTcwMy00NTlmLWFjMGIt
NzU2YTA4YTRhZGRhLzEveS1sd21BMVdYTWRLMnlsS3BveDdCdlVUS0pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8zZGNmN2ItMTcwMy00NTlmLWFjMGItNzU2YTA4YTRhZGRh
LzEveS1sd21BMVdYTWRLMnlsS3BveDdCdlVUS0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtsSCM0g
bbBdCpL+RS444P203QmiQ6Ll95U7A3AQGekENUUxh4Q+stk39mYttBdpwen/3wED
oglXmkk0ZR8POS815yt6LNt+tq9Ytb7xHuVDqHQoVnGFME6DtWqnGqjQ7ckThW/j
PEaQ+h/JeeLkqe/iccEP+Ch1TEk5zmGlWAtdS6VtWFZkDF/Xrejsen0jRyZS86tG
3lL1rfuVatrE37V9TrMZqyvCF8TwjY0kvMZ5Iik6aQ8WlSR3uMT5TmSbcG5TUVfV
20pu5CrAp8NWxWJNOaD4dzMkDDntKYeIFc0yvFji/ewjeVBNXv8pXBQte5+8J+yp
+g2qQDDK1QWxew==
-----END CERTIFICATE-----
Generated at Fri Jul 10 16:39:46 2026 by rpki-client