Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
File: lYjYtMeqRamyzXN8YUhx63GBur4.mft (raw, json)
Hash identifier: L8AEyA28tBw8NBkIBrIMPm3qrDgN8Azk8NY3WI/taq0=
Subject key identifier: 4A:B1:A0:7E:B0:BB:20:40:75:C6:96:F8:B5:5B:C1:1F:4F:64:A6:72
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial: 019D3B6675008B3AFD842057EBB82C12DF02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
Manifest number: 16F6
Signing time: Sun 29 Mar 2026 21:01:03 +0000
Manifest this update: Sun 29 Mar 2026 21:01:03 +0000
Manifest next update: Mon 30 Mar 2026 21:01:03 +0000
Files and hashes: 1: 2nWQF39Iwb18W2QaNPcJ8wLWKO4.roa (hash: Y42qQxUJOveLJJBE2Ti4Rz4U/hBNZ5LB97/p6A86eqc=)
2: T-FG9QXYVrOvJD0ZFGx161F8-rE.roa (hash: fwBMGesT+i5+7hG4n6yFeYoLnMkVAp9abEUuKCI4Q+A=)
3: Y-Fl2pXcpykA2Ovy6Yiek0-GPJc.roa (hash: UtkgCH0IjnyruhNFvhdGIcEEQiu591rlsNdVQP1mlI0=)
4: aPrjwirQfjp2ASokssf7k_O--fQ.roa (hash: KQgnCiQXpKRoobrn80mbP5Rs8dHibT88YV5+D84Zc98=)
5: iXwUxzso3pt35Li0dSOoT5DmX3U.roa (hash: glAbr9K3ZOByGif0Hc8fgA/M/XOvS9j+i7ULdB74cTs=)
6: lYjYtMeqRamyzXN8YUhx63GBur4.crl (hash: l0RTHeMtdLebJ6zM/GxUeNOeFZr+WZPAoZHnaMCjepQ=)
7: voqwh4ljJMAQM4zcSBxWmbzYHCA.roa (hash: lgapnEK9Q6w/tzBbAcuBz1bvcQ9NlQDVQ41y/zqkihE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3b:66:75:00:8b:3a:fd:84:20:57:eb:b8:2c:12:df:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Validity
Not Before: Mar 29 21:01:03 2026 GMT
Not After : Mar 30 21:01:03 2026 GMT
Subject: CN=4ab1a07eb0bb204075c696f8b55bc11f4f64a672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:41:05:fb:4d:3f:5e:c9:04:13:df:ea:28:
f9:b9:72:14:34:38:93:2a:05:c0:88:8d:6a:6f:4b:
36:f2:7d:df:61:0e:e9:d6:17:c0:f6:28:c9:4f:88:
d3:17:9a:1a:a5:32:e0:ce:21:83:3e:e8:c6:79:0b:
45:e7:66:79:46:8d:f4:b7:85:77:a1:3f:f3:ed:55:
98:4c:c1:39:d2:23:aa:a2:4b:2b:36:f4:94:9f:6f:
64:66:98:c1:f9:b4:df:c8:e4:0a:62:cd:ab:16:31:
86:82:a1:8e:e3:11:b9:06:2a:83:8e:64:64:9f:9b:
36:c8:97:b2:86:c4:41:ff:96:8e:f2:c0:f1:02:61:
58:24:bc:d6:57:42:ef:e7:9f:0d:89:b2:1c:60:e4:
a4:4b:fc:3d:93:d7:33:05:1e:14:80:08:c0:54:fc:
72:06:81:89:23:6a:97:6c:7f:25:0f:0b:4d:07:a9:
05:54:fe:24:85:d9:b1:00:b0:2b:a2:45:2f:19:9c:
9b:15:aa:46:e2:98:57:7d:a0:6d:12:85:95:0c:0a:
41:95:ba:17:41:d5:69:d9:55:05:0c:d9:f8:c9:de:
f3:c7:0c:f2:8d:32:ef:d3:10:36:14:13:ee:d2:65:
91:f2:81:20:ac:53:20:b4:43:a7:eb:38:92:d2:6c:
9c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:A0:7E:B0:BB:20:40:75:C6:96:F8:B5:5B:C1:1F:4F:64:A6:72
X509v3 Authority Key Identifier:
keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ea:6c:6a:c5:38:ca:fe:cc:64:38:0e:8e:d3:b8:de:e0:a6:
12:dd:d3:d8:57:57:4b:78:79:22:40:b4:ce:70:d0:f7:83:3d:
5c:92:ae:9b:11:f0:30:81:13:0a:b5:ac:f7:89:1e:d5:c6:dc:
5c:be:d4:83:e6:d2:c9:4e:02:26:b2:32:36:30:74:62:82:f4:
4f:ed:5a:ae:f2:4c:3a:cd:de:86:f3:ed:0c:9c:2b:9f:09:fd:
e1:91:0e:29:ef:cc:70:a7:fb:b0:55:f7:82:f0:9b:00:99:30:
66:f3:de:28:a5:8b:7f:ff:54:fc:e4:ea:d0:da:dd:95:bd:bf:
ee:79:2c:73:55:29:e3:7b:b0:20:11:56:4f:82:d0:d4:db:e0:
b0:91:0e:4f:26:55:08:bc:32:75:89:6a:02:70:c2:0c:59:6d:
b8:06:08:ce:71:de:71:c0:d5:81:bb:b2:7b:03:73:6f:93:a1:
23:15:68:63:ca:bc:ca:a1:2b:9f:7a:45:a6:8b:ff:7d:6d:4b:
68:20:15:b2:b9:fe:84:6d:6d:7a:7f:25:f2:2a:fd:8e:97:6e:
9e:61:78:87:43:0a:ad:f9:53:9f:09:e0:01:47:c1:1a:7e:98:
ad:3a:ca:84:e8:6e:e1:32:1c:4d:da:24:b8:ef:8f:c7:0d:60:
1d:a1:94:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:59:24 2026 by rpki-client