
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
File: lYBh2AAMuD07iWfmb7ikwn6RImI.mft (raw, json)
Hash identifier: ISeNR9xsOZSR74kA6L11LI0DRQGWSqgRoY7xY7e86E0=
Subject key identifier: 91:8E:58:8A:44:83:71:22:82:43:5A:F3:54:84:41:76:F5:58:C8:87
Authority key identifier: 95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
Certificate issuer: /CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Certificate serial: 01A11974DB30FDBBEE975AFB5DDD24891259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
Manifest number: 0234
Signing time: Thu 08 Oct 2026 03:00:50 +0000
Manifest this update: Thu 08 Oct 2026 03:00:50 +0000
Manifest next update: Fri 09 Oct 2026 03:00:50 +0000
Files and hashes: 1: hzG3EgOx_N3fgyx_9u23eo8eYmM.roa (hash: ll5FuHzISV8wV67N7kq5bfMOA6gO76/cY1UBY4egjOc=)
2: lYBh2AAMuD07iWfmb7ikwn6RImI.crl (hash: HDeoSSePYwhfIG16d0SKQw2fSEJRd/ULcCCmpakC0f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:74:db:30:fd:bb:ee:97:5a:fb:5d:dd:24:89:12:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Validity
Not Before: Oct 8 03:00:50 2026 GMT
Not After : Oct 9 03:00:50 2026 GMT
Subject: CN=918e588a4483712282435af354844176f558c887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:5a:ce:c7:fa:57:b4:d9:29:85:d7:bd:c4:
31:bf:1e:a0:04:8e:e5:3e:83:c3:9b:0f:51:79:ae:
1d:d7:09:4a:e5:88:d3:8b:5e:c9:50:57:6c:ff:d0:
f7:01:8e:86:8a:32:a6:96:41:20:e3:89:e1:8c:50:
c9:93:21:c4:38:69:5e:c0:fd:75:23:94:d6:c8:9e:
da:f0:cc:39:67:ef:d1:10:59:05:84:98:b0:65:b5:
36:75:b7:94:a3:9c:5e:b6:81:98:08:85:b8:4b:1d:
23:13:26:88:d6:52:bd:2a:0a:82:22:78:19:ec:7c:
7a:b6:a9:0c:56:4b:45:e9:aa:c0:2d:08:57:27:34:
67:04:96:a5:48:7f:66:d6:ca:93:80:27:c7:48:bc:
6e:7b:94:0b:31:c0:e1:49:ba:99:01:10:7c:4e:eb:
4e:f8:17:cb:e2:85:6c:20:6e:d0:e5:1a:84:25:b5:
dd:34:b6:6f:55:5a:a9:32:d4:93:dc:62:99:8f:1f:
fb:e3:ce:67:ab:e1:33:e6:57:38:1c:1c:96:8a:16:
cc:8d:f8:75:a8:42:21:8f:62:24:b0:90:42:06:b3:
c3:14:ae:0a:fa:63:de:f6:d8:cf:6f:43:0e:87:9a:
ff:2a:dc:bc:75:7c:4d:73:9c:5d:1b:a5:9c:4f:bc:
92:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8E:58:8A:44:83:71:22:82:43:5A:F3:54:84:41:76:F5:58:C8:87
X509v3 Authority Key Identifier:
keyid:95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:75:08:16:92:36:b3:ee:e8:5a:db:84:e0:9b:53:aa:86:e7:
50:74:b0:c0:f9:3d:b7:70:b3:72:13:75:94:4b:18:8e:60:77:
a4:ab:48:27:7f:7f:c1:9d:43:78:17:5b:cf:12:78:d4:16:98:
68:73:5c:0c:d9:db:6a:0f:44:9d:01:a1:88:e4:9d:6e:50:10:
93:42:1e:78:2e:7d:35:a9:11:fd:49:7c:90:39:e0:87:c7:c0:
9b:d6:b3:a0:a4:32:62:81:c0:48:6e:5f:8a:8e:c5:56:4b:66:
f5:f1:49:73:b6:75:23:37:68:73:e1:91:7e:c3:69:b2:6b:da:
25:fa:9c:57:84:ae:9d:c8:d3:24:4e:a5:db:3e:eb:28:be:d7:
ce:b7:04:23:5f:5d:22:6d:e8:f3:4a:d9:85:ee:f0:fc:07:b4:
36:cc:1f:0e:fc:43:6a:af:06:af:69:49:e6:c8:11:c5:4d:29:
e0:6a:9a:27:43:0a:4d:2a:29:1b:11:39:29:27:e1:35:79:44:
af:32:d8:d6:c2:58:11:b7:f9:7b:70:54:4d:4e:70:21:af:88:
9e:c1:66:3b:e1:fc:9e:65:ac:99:27:7f:a0:e8:0d:91:8b:98:
90:49:74:74:31:6c:a1:85:28:46:fc:f2:2a:f3:dd:20:a3:32:
ec:d7:f7:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEZdNsw/bvul1r7Xd0kiRJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ODA2MWQ4MDAwY2I4M2QzYjg5NjdlNjZmYjhhNGMyN2U5
MTIyNjIwHhcNMjYxMDA4MDMwMDUwWhcNMjYxMDA5MDMwMDUwWjAzMTEwLwYDVQQD
Eyg5MThlNTg4YTQ0ODM3MTIyODI0MzVhZjM1NDg0NDE3NmY1NThjODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA1azsf6V7TZKYXXvcQxvx6gBI7l
PoPDmw9Rea4d1wlK5YjTi17JUFds/9D3AY6GijKmlkEg44nhjFDJkyHEOGlewP11
I5TWyJ7a8Mw5Z+/REFkFhJiwZbU2dbeUo5xetoGYCIW4Sx0jEyaI1lK9KgqCIngZ
7Hx6tqkMVktF6arALQhXJzRnBJalSH9m1sqTgCfHSLxue5QLMcDhSbqZARB8TutO
+BfL4oVsIG7Q5RqEJbXdNLZvVVqpMtST3GKZjx/7485nq+Ez5lc4HByWihbMjfh1
qEIhj2IksJBCBrPDFK4K+mPe9tjPb0MOh5r/Kty8dXxNc5xdG6WcT7yS6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGOWIpEg3EigkNa81SEQXb1WMiHMB8GA1UdIwQY
MBaAFJWAYdgADLg9O4ln5m+4pMJ+kSJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFlCaDJBQU11RDA3aVdmbWI3aWt3bjZSSW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xMjJmNmEtYzEzMi00OWFhLWI0OTYt
YjkyY2UyMWNhNDA5LzEvbFlCaDJBQU11RDA3aVdmbWI3aWt3bjZSSW1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xMjJmNmEtYzEzMi00OWFhLWI0OTYtYjkyY2UyMWNhNDA5
LzEvbFlCaDJBQU11RDA3aVdmbWI3aWt3bjZSSW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXUIFpI2
s+7oWtuE4JtTqobnUHSwwPk9t3CzchN1lEsYjmB3pKtIJ39/wZ1DeBdbzxJ41BaY
aHNcDNnbag9EnQGhiOSdblAQk0IeeC59NakR/Ul8kDngh8fAm9azoKQyYoHASG5f
io7FVktm9fFJc7Z1Izdoc+GRfsNpsmvaJfqcV4SuncjTJE6l2z7rKL7XzrcEI19d
Im3o80rZhe7w/Ae0NswfDvxDaq8Gr2lJ5sgRxU0p4GqaJ0MKTSopGxE5KSfhNXlE
rzLY1sJYEbf5e3BUTU5wIa+InsFmO+H8nmWsmSd/oOgNkYuYkEl0dDFsoYUoRvzy
KvPdIKMy7Nf34w==
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:42:40 2026 by rpki-client