Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
File: lYBh2AAMuD07iWfmb7ikwn6RImI.mft (raw, json)
Hash identifier: 7iorr3LQV6AZReCrxRHkllJbjOfJ/07QpN7WJwToGrg=
Subject key identifier: AE:60:D8:5D:37:E5:FF:D8:93:97:13:36:F6:35:2C:AA:7E:6F:14:61
Authority key identifier: 95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
Certificate issuer: /CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Certificate serial: 019F19B19021E0E557FCE5658C3F82E070ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
Manifest number: 012B
Signing time: Tue 30 Jun 2026 18:01:34 +0000
Manifest this update: Tue 30 Jun 2026 18:01:34 +0000
Manifest next update: Wed 01 Jul 2026 18:01:34 +0000
Files and hashes: 1: hzG3EgOx_N3fgyx_9u23eo8eYmM.roa (hash: ll5FuHzISV8wV67N7kq5bfMOA6gO76/cY1UBY4egjOc=)
2: lYBh2AAMuD07iWfmb7ikwn6RImI.crl (hash: d1+N7GbuxWK22iLSxYFkEvr+7clAXw/Vat9iZ4S171o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 18:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:90:21:e0:e5:57:fc:e5:65:8c:3f:82:e0:70:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Validity
Not Before: Jun 30 18:01:34 2026 GMT
Not After : Jul 1 18:01:34 2026 GMT
Subject: CN=ae60d85d37e5ffd893971336f6352caa7e6f1461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:b0:40:c3:2b:35:20:db:d0:72:82:b4:5e:
7f:68:06:7b:3c:e1:23:33:04:ed:ec:04:81:9e:1d:
e8:3d:b1:00:6f:d0:b2:f3:b4:b3:57:e0:2b:b8:a3:
44:1b:e1:7d:13:0c:4a:d2:ca:e6:f8:0a:93:58:41:
83:24:af:27:a2:fc:4c:ea:e2:2f:c4:29:1c:83:33:
e4:1b:fc:c3:ac:db:eb:4d:3d:2c:5f:98:22:c5:10:
14:31:b0:c8:c0:c3:41:17:62:86:64:64:bb:b6:e3:
ab:21:b8:61:bf:bb:55:fb:71:36:9b:83:45:63:93:
de:03:d1:d1:77:56:c4:9d:d3:d8:26:ff:8e:cf:65:
d1:63:b3:7a:a2:1b:a0:a2:b8:17:7a:78:26:a3:a5:
a0:a9:8d:27:ad:18:1e:2e:18:58:f6:08:66:f7:3a:
c6:34:7a:7d:24:4e:6c:24:2d:66:5a:5b:ee:0f:dd:
ae:2b:1b:65:c7:a9:28:27:e9:d3:f8:bb:b4:eb:09:
11:a4:bb:b3:67:65:47:ed:fb:d1:66:a2:62:30:43:
d6:07:92:c9:87:75:22:ef:3a:a5:0e:09:88:d4:16:
62:66:21:f7:2f:bc:bb:f4:36:1b:60:50:5f:a3:cf:
cd:f0:3c:90:b1:ae:6a:35:2b:85:a7:42:c8:70:de:
cc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:60:D8:5D:37:E5:FF:D8:93:97:13:36:F6:35:2C:AA:7E:6F:14:61
X509v3 Authority Key Identifier:
keyid:95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f8:4c:c5:e3:29:db:19:08:6d:ee:0d:7e:7e:32:e6:43:27:
90:ae:68:b1:63:0f:7a:d5:92:78:a6:55:9c:89:f8:cd:44:0b:
62:0e:6c:85:5c:5e:29:01:ac:07:71:3b:6b:f7:73:ca:c3:71:
27:fd:42:a3:48:49:ce:0d:ce:2e:dc:8c:e3:57:d3:16:5d:a1:
89:b5:cb:d1:84:5e:e1:9f:03:8d:f3:fa:91:53:5b:19:78:6c:
be:ff:77:92:0d:40:3c:ef:8e:80:a7:c3:88:ff:23:ac:26:6b:
10:3a:76:82:bd:6f:a0:3f:35:66:82:78:a3:1c:ca:bd:7c:c2:
26:8b:0c:09:a1:62:2c:c7:72:b8:3e:1c:3a:8a:8d:54:84:fd:
72:48:f9:fb:9c:45:c4:ef:0f:54:fa:96:a0:90:0e:ac:7b:07:
2e:98:bd:64:3d:df:36:61:16:1b:38:ca:62:2b:5e:74:59:d9:
11:ee:99:10:61:58:2d:66:56:9d:6f:c3:73:b0:a4:ba:84:20:
eb:c5:c6:bd:8e:06:79:3c:67:f8:af:9a:36:5a:d7:3c:59:78:
73:ba:df:7a:17:f6:c8:86:60:aa:a7:e6:11:4f:85:c5:c7:83:
4c:ef:1f:e2:76:13:a6:c0:94:ce:ba:6d:e4:b3:66:a6:ac:2d:
04:77:ac:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:18:25 2026 by rpki-client