Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
File: lYBh2AAMuD07iWfmb7ikwn6RImI.mft (raw, json)
Hash identifier: T51an0WGJUEsEmB4zuFBMoWOpK6rXI+GLzxIlvBH2ik=
Subject key identifier: E2:DC:E4:11:47:10:7D:50:60:0C:DD:57:79:4E:A9:C9:14:17:A5:86
Authority key identifier: 95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
Certificate issuer: /CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Certificate serial: 019D39AEE8BCF7C5AD2B9F3383E8BC275D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
Manifest number: 32
Signing time: Sun 29 Mar 2026 13:00:57 +0000
Manifest this update: Sun 29 Mar 2026 13:00:57 +0000
Manifest next update: Mon 30 Mar 2026 13:00:57 +0000
Files and hashes: 1: lYBh2AAMuD07iWfmb7ikwn6RImI.crl (hash: 5JipAwcQHJzQWbyxq80bVNiSmMWeiFg7Q0s22WXLfWA=)
2: tV5_l1JoTOlyn1gV75xG7F66I9I.roa (hash: CQ36UA0MMoJmpBpprrqKcSAebezNWRbVUaxNQ4W1kY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:e8:bc:f7:c5:ad:2b:9f:33:83:e8:bc:27:5d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Validity
Not Before: Mar 29 13:00:57 2026 GMT
Not After : Mar 30 13:00:57 2026 GMT
Subject: CN=e2dce41147107d50600cdd57794ea9c91417a586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:88:1f:9f:a8:43:c8:27:bf:56:a8:f1:14:07:
e0:75:d3:b4:b9:c8:ee:66:b8:d7:67:e3:57:29:4c:
c5:f4:78:35:8f:ca:fe:45:cb:da:7c:8f:50:f8:ac:
fc:13:2b:7b:41:df:00:f0:e9:67:57:6e:c4:0c:61:
4c:62:a6:ad:fd:03:f0:5f:8d:ec:c7:72:4d:3c:3a:
7a:39:56:3c:f3:9f:c6:48:a6:b4:99:e9:2a:a6:23:
27:a1:59:31:56:1b:e7:40:cc:4e:51:ce:db:e3:2a:
ab:72:3f:2e:e2:0a:6b:d9:e3:f8:f7:dd:7f:b9:cb:
b1:8e:b2:16:09:37:b7:44:5a:1f:5c:55:4c:0e:55:
6d:60:d6:39:2d:13:be:a1:a9:0f:56:d5:b2:46:d2:
13:5a:2a:e0:1e:79:a0:ee:67:bb:48:e1:ba:42:91:
c8:11:cc:52:5c:7e:f7:a8:83:1c:15:8d:60:1c:a3:
49:49:a5:de:c9:4b:ab:0f:c6:ff:e3:89:6f:40:7a:
c0:e8:21:c7:67:eb:52:48:cb:dc:ee:ad:5e:97:2b:
27:a0:80:59:8b:53:1c:04:fd:95:fe:46:f3:ef:2a:
95:32:0a:eb:ff:b6:a8:0d:b9:4e:f1:61:30:93:59:
6b:97:4d:5d:cc:3e:61:a2:14:21:55:a1:3a:c8:d4:
78:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DC:E4:11:47:10:7D:50:60:0C:DD:57:79:4E:A9:C9:14:17:A5:86
X509v3 Authority Key Identifier:
keyid:95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:99:c2:4a:dc:3b:1d:eb:03:74:0b:f5:d9:0a:28:e3:8c:eb:
6e:33:12:b6:72:a1:9e:55:9f:68:57:b6:9d:5d:d9:b0:4b:90:
25:55:68:d9:63:c5:3e:b5:d7:91:60:3c:a8:ae:ae:71:f3:3f:
a4:fd:b4:14:3c:1f:64:44:1c:54:1f:a3:38:04:92:8e:ff:ef:
26:c6:53:5f:6e:56:ce:9e:b3:11:54:f2:cb:56:84:f1:3a:69:
a5:a6:10:7b:75:83:2b:49:40:9c:f4:ee:fe:1c:27:d2:4b:60:
e6:dc:ed:1f:94:26:34:65:92:d5:12:df:a0:bf:29:6f:ca:01:
b8:0d:0b:da:f3:35:25:02:fc:b1:f0:b9:19:13:98:1a:8b:57:
67:ab:07:4a:f2:90:29:4f:f4:7b:e8:f3:a3:96:8e:93:ba:c0:
29:15:3a:a9:06:82:71:69:f2:58:af:87:dc:45:e4:17:2f:25:
88:cb:dd:b4:4c:22:37:03:be:7d:c0:fb:59:a1:2f:f5:2e:2e:
b3:46:df:d1:ab:56:da:b8:69:bc:e4:df:06:c5:c4:26:bf:86:
b3:8a:e5:b2:42:59:ea:6f:64:a4:85:eb:5b:22:bf:56:74:ee:
8b:96:7f:3b:6e:58:e6:0e:c7:6d:51:8f:88:77:78:73:4e:d1:
4d:d2:6e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:32 2026 by rpki-client