Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
File: _lyk4qChgOsvKcyIdAqnB7iCHXw.mft (raw, json)
Hash identifier: u+yPUTTJlSJqaoi8JZo5i2gEV22YVTWZ2Kifon2tjNg=
Subject key identifier: DA:52:91:D5:EC:EE:19:B3:77:10:76:9C:B0:65:73:55:25:2D:E0:D6
Authority key identifier: FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
Certificate issuer: /CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Certificate serial: 019D394119E16BEFAB99A818CCDCB1E8CB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:01:00 +0000
Manifest this update: Sun 29 Mar 2026 11:01:00 +0000
Manifest next update: Mon 30 Mar 2026 11:01:00 +0000
Files and hashes: 1: NP5tK9sJqRpdt0WYxsVkCWjvRlc.roa (hash: l2Db7QyGTQEhegInLfDc9J67ROlsj8aNjEngOYZ1S48=)
2: _lyk4qChgOsvKcyIdAqnB7iCHXw.crl (hash: muqoegp4Ou2LlYNLT5WViylhr+a7pLVMmgaXsytdnNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:19:e1:6b:ef:ab:99:a8:18:cc:dc:b1:e8:cb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Validity
Not Before: Mar 29 11:01:00 2026 GMT
Not After : Mar 30 11:01:00 2026 GMT
Subject: CN=da5291d5ecee19b37710769cb0657355252de0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:52:14:02:75:0e:56:64:16:bc:78:c8:22:
58:5c:39:17:d4:2f:ce:3f:18:d9:c9:26:a1:ff:e4:
eb:93:55:80:a4:2d:59:52:8d:68:77:6e:3b:35:9d:
fa:44:04:4c:11:8c:b8:a2:42:72:ca:1a:bf:13:51:
11:f9:78:da:70:bd:c4:66:f2:04:05:7d:76:7a:c0:
06:8c:1b:79:d9:cb:65:22:b3:1f:f2:d2:3c:e2:80:
de:a4:2a:9d:cd:43:70:80:2d:33:33:94:da:c7:19:
56:af:66:4c:a6:6e:ab:ba:de:9b:3a:9b:1f:c8:9d:
c8:c2:50:d9:61:af:6d:f0:43:af:38:53:56:a7:2e:
a2:e0:fc:cb:30:77:da:da:91:d1:46:7d:43:24:fb:
78:96:2f:44:f4:54:da:a3:4f:eb:b7:73:9c:2e:76:
ba:a0:b3:45:b1:fe:3b:70:28:f0:9e:b4:19:db:8f:
ac:0e:c1:e8:bb:15:5c:e1:90:89:35:cc:d0:3f:6f:
ef:51:be:81:17:c8:17:31:b0:95:82:e4:99:ae:10:
4c:9d:88:96:b3:f5:08:6a:6e:3c:01:91:d5:74:fd:
96:53:82:0f:17:a1:7c:d9:2d:a3:4c:99:d7:fc:3e:
cc:2e:8e:1e:85:7c:51:60:5c:cf:d6:7e:05:bb:9c:
08:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:52:91:D5:EC:EE:19:B3:77:10:76:9C:B0:65:73:55:25:2D:E0:D6
X509v3 Authority Key Identifier:
keyid:FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c0:0d:d2:52:cb:98:f4:90:b3:89:89:e1:39:bb:33:86:d1:
c4:33:8b:c9:8a:c3:30:73:c0:d2:41:e8:76:8d:ea:de:dc:2c:
e5:3b:df:a2:72:aa:57:8a:90:4b:6e:0e:24:1c:fc:16:9b:f7:
58:84:31:e0:95:84:3c:14:1e:59:89:94:38:25:73:4f:24:0d:
c0:d9:7f:33:33:7f:9d:35:3e:05:38:90:ac:a9:aa:4e:50:d6:
ec:64:4a:8a:74:72:da:94:41:fe:69:9e:97:13:74:00:fa:46:
8f:67:6d:31:01:dc:93:bb:7e:f3:eb:47:d0:6e:b3:f4:b6:43:
67:df:68:e7:c2:20:d2:df:4a:af:b6:b7:8d:01:b9:be:67:27:
49:d8:4e:6c:b4:86:1a:bd:71:82:9b:5b:52:a7:d7:eb:b9:97:
8a:b5:20:50:24:93:42:4f:cd:f1:c1:7b:e2:f3:d9:2a:ee:5e:
af:a9:ae:fd:4a:cd:65:a5:fe:66:81:74:c5:ba:14:48:2c:38:
5e:c4:34:7e:06:ed:7f:f7:89:e9:c2:f3:c2:a5:da:77:e2:a5:
f1:3f:d9:f8:90:f2:7e:1a:61:a9:49:90:f5:f4:d6:c4:27:f7:
f0:ef:54:5c:58:57:43:c5:b2:89:80:46:2c:61:80:09:14:d2:
ce:7e:04:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:48 2026 by rpki-client