Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
File: lYBh2AAMuD07iWfmb7ikwn6RImI.mft (raw, json)
Hash identifier: t6LycG1KBB7MpPMLJP/CpEkniqjWnjRfAVHkQnxpatI=
Subject key identifier: A1:DC:84:BD:C8:98:29:DB:1B:A6:F5:26:77:BC:72:53:9A:2D:84:12
Authority key identifier: 95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
Certificate issuer: /CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Certificate serial: 01A0035D23A5B5D1B4CCE28BE6AD8782DD87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
Manifest number: 01A4
Signing time: Sat 15 Aug 2026 03:00:30 +0000
Manifest this update: Sat 15 Aug 2026 03:00:30 +0000
Manifest next update: Sun 16 Aug 2026 03:00:30 +0000
Files and hashes: 1: hzG3EgOx_N3fgyx_9u23eo8eYmM.roa (hash: ll5FuHzISV8wV67N7kq5bfMOA6gO76/cY1UBY4egjOc=)
2: lYBh2AAMuD07iWfmb7ikwn6RImI.crl (hash: 2sPUDw0p6mHo9DaOFxcurMoaB+lW+HJrsiajnbGLuzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:23:a5:b5:d1:b4:cc:e2:8b:e6:ad:87:82:dd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Validity
Not Before: Aug 15 03:00:30 2026 GMT
Not After : Aug 16 03:00:30 2026 GMT
Subject: CN=a1dc84bdc89829db1ba6f52677bc72539a2d8412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:48:ef:9e:69:c9:c9:45:8e:3a:c8:b6:c8:
7a:dc:4a:b7:02:90:93:34:13:9a:3c:f6:b2:79:bd:
ff:c0:c0:a7:5e:1f:a9:6b:7b:73:f4:69:94:14:43:
d4:96:2e:25:c0:0e:6b:0c:27:dc:64:3f:c4:db:b1:
b7:4c:ae:ce:a5:3c:c6:87:c2:ca:25:be:ce:7a:0a:
ff:e3:97:4f:cb:e1:64:d2:a1:35:c9:fc:a2:55:a9:
7c:fc:e6:4f:48:15:12:90:22:e3:8c:70:fe:98:8c:
fc:14:e8:e6:f5:52:fa:e3:b5:12:ed:96:72:44:79:
6a:13:45:63:40:37:23:e7:64:ac:2b:b2:35:5d:12:
2e:c2:f2:3d:e9:97:62:1c:42:b0:c3:36:84:c6:17:
87:c9:95:a4:be:53:9e:8b:df:16:a2:bd:cf:98:0a:
ec:f7:13:99:50:ee:cf:b3:94:80:04:44:fe:ff:b5:
2b:64:5c:f3:62:9d:0e:ff:6f:64:3a:43:b2:85:e2:
66:04:0b:17:52:36:02:ae:8e:48:fc:66:40:9c:55:
77:d3:31:96:18:b4:6e:d4:ce:b3:09:fa:d8:8e:da:
0d:8d:33:02:1e:83:8c:f1:89:ee:55:b4:39:92:5f:
db:27:d5:51:6a:ee:7e:e8:ac:a9:25:7b:db:f1:42:
9d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DC:84:BD:C8:98:29:DB:1B:A6:F5:26:77:BC:72:53:9A:2D:84:12
X509v3 Authority Key Identifier:
keyid:95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6b:51:80:e5:47:43:18:35:bc:77:00:fd:f2:bc:9d:18:0a:
59:d6:c4:9e:5d:41:ae:19:17:9f:63:69:b1:66:93:fd:ad:e1:
54:93:57:ce:dc:64:9b:83:1e:fe:9b:9d:0d:52:06:21:be:da:
06:96:52:6f:94:51:86:4a:b2:a8:27:5e:0c:e0:25:88:a9:16:
29:9e:6e:52:ad:4b:f7:e8:57:f5:ec:d9:30:da:7a:84:73:c2:
4a:27:7b:08:63:36:a3:28:da:18:81:f8:a6:b3:f0:8a:45:ee:
17:b9:35:bf:05:83:a3:8c:c4:e4:4d:31:f8:25:34:14:4f:36:
48:d9:eb:a6:76:a2:69:90:a4:7a:d8:bd:fe:72:84:30:dd:c7:
d8:c8:f9:71:a3:4e:90:3b:dc:0b:2f:85:72:a8:8c:f5:02:dc:
30:48:b8:00:99:9e:c4:c8:3b:8c:01:06:9a:87:da:fc:5c:6d:
40:41:ae:66:58:ca:33:c1:88:41:46:dd:e0:b3:a9:c6:49:3e:
22:a5:39:cc:01:a3:38:93:d7:87:4f:e5:19:41:34:06:8a:f2:
21:87:36:b7:e9:97:59:e6:76:42:33:61:b7:39:66:9e:a0:d1:
c8:34:55:18:55:c1:c4:4e:03:57:b5:a8:2d:36:e7:17:c1:b0:
78:97:bd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:38:15 2026 by rpki-client