Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
File: lYs3Q2qJ-sosT35g-axNR6GZrWY.mft (raw, json)
Hash identifier: irotWvw/Avh2gGh2DfqA0kLQstbhGiGxN/vV1WSPNXI=
Subject key identifier: 62:BB:DE:F5:43:70:44:6D:7E:99:80:C0:FF:A6:6E:AD:99:FA:8E:F5
Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Certificate serial: 019D39AE93A3DAF41AA6555B6594BF594ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 13:00:35 +0000
Manifest this update: Sun 29 Mar 2026 13:00:35 +0000
Manifest next update: Mon 30 Mar 2026 13:00:35 +0000
Files and hashes: 1: lYs3Q2qJ-sosT35g-axNR6GZrWY.crl (hash: rdjye2ZzN1fxf24ijGeqpEQEGC5lwCgTcH94GWmW4S0=)
2: weY_2856hTe3pr2rRDSeNZrrwGY.roa (hash: AgQxLvovPKe7WQZGV1eUhCzA8gghQ7NklaBXL9qGr3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:93:a3:da:f4:1a:a6:55:5b:65:94:bf:59:4a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Validity
Not Before: Mar 29 13:00:35 2026 GMT
Not After : Mar 30 13:00:35 2026 GMT
Subject: CN=62bbdef54370446d7e9980c0ffa66ead99fa8ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a6:ae:a1:09:01:18:28:c8:8d:ec:4f:21:d4:
77:77:1b:b7:c6:00:27:00:8b:3f:48:73:46:58:0d:
76:36:e1:fc:7c:40:38:0f:9b:a9:f7:ef:c9:bd:22:
b4:c8:69:7b:7e:fe:2d:6f:54:3c:ec:29:d5:1b:9c:
fb:61:78:0f:2c:ec:72:03:68:fc:d1:ec:fe:63:de:
e9:03:07:db:5b:b3:66:04:a8:f8:cf:d4:07:0b:ba:
4f:3d:9a:a4:f5:34:a8:81:5c:f9:2f:57:6b:2b:e2:
63:0f:33:f7:02:03:58:25:5b:2a:0f:07:f2:77:c4:
bf:08:eb:c0:00:2e:66:64:c9:04:d7:48:2b:de:aa:
3c:58:fb:0e:c8:91:ab:72:20:ba:76:fe:4e:f9:fe:
8b:8d:a8:6b:0f:e8:a0:b8:c0:ed:c9:09:2e:4c:2e:
9e:91:89:37:b7:0a:36:37:cf:cf:36:26:27:ae:20:
03:72:05:93:c5:20:c0:d5:d1:96:c4:a6:0e:5d:88:
d6:dd:65:3b:d3:21:66:0e:5d:de:3a:c3:87:13:09:
17:7a:34:6b:39:2c:cf:ca:45:10:5a:b9:42:5d:58:
cd:e5:1b:c0:b1:8a:8b:32:a1:d5:5a:69:fd:e7:68:
7f:9b:e5:08:29:a8:cc:8f:77:31:19:28:03:e7:02:
5a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BB:DE:F5:43:70:44:6D:7E:99:80:C0:FF:A6:6E:AD:99:FA:8E:F5
X509v3 Authority Key Identifier:
keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f6:c6:e6:90:be:d5:5c:ae:88:d7:2b:35:64:22:61:8e:a5:
01:50:ed:a2:0d:ae:b6:e5:7d:cb:91:d5:38:8f:44:5d:da:b1:
65:e4:e2:9b:96:61:de:b6:eb:bb:99:4d:73:09:96:64:97:9f:
08:f9:bb:51:c1:ff:46:1d:eb:b4:a8:0a:9c:3b:99:3e:0e:d9:
bc:72:ed:00:8a:ff:e4:46:40:25:b8:1e:98:35:88:9f:f2:54:
aa:e1:13:6a:fd:1f:5d:b1:0d:bd:06:95:2c:56:25:3f:ad:8f:
78:41:32:07:6b:75:17:6d:ef:8d:9c:9a:a1:91:97:e7:c4:bd:
a8:ff:4f:7e:64:0a:62:2a:89:12:81:87:2d:78:e9:d5:ad:06:
7a:e8:f4:34:22:8d:8c:b5:8d:4b:9f:94:08:94:19:8e:0b:31:
59:ec:2a:be:40:ef:d3:c1:73:1d:f6:5e:27:8b:3e:4d:66:6e:
17:3a:e5:61:c3:62:9a:45:ed:db:e2:4e:93:7b:fa:4a:c7:6f:
e1:54:9a:1e:99:5c:78:9a:1e:f7:cc:da:cf:3b:97:7c:c8:1c:
99:22:57:ce:74:c2:ea:f3:69:cd:53:09:f3:ff:2d:57:f7:6b:
7f:58:23:6c:fc:3a:39:66:42:16:85:be:8f:85:67:01:06:45:
f7:62:68:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rpOj2vQaplVbZZS/WUrNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OGIzNzQzNmE4OWZhY2EyYzRmN2U2MGY5YWM0ZDQ3YTE5
OWFkNjYwHhcNMjYwMzI5MTMwMDM1WhcNMjYwMzMwMTMwMDM1WjAzMTEwLwYDVQQD
Eyg2MmJiZGVmNTQzNzA0NDZkN2U5OTgwYzBmZmE2NmVhZDk5ZmE4ZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKauoQkBGCjIjexPIdR3dxu3xgAn
AIs/SHNGWA12NuH8fEA4D5up9+/JvSK0yGl7fv4tb1Q87CnVG5z7YXgPLOxyA2j8
0ez+Y97pAwfbW7NmBKj4z9QHC7pPPZqk9TSogVz5L1drK+JjDzP3AgNYJVsqDwfy
d8S/COvAAC5mZMkE10gr3qo8WPsOyJGrciC6dv5O+f6LjahrD+iguMDtyQkuTC6e
kYk3two2N8/PNiYnriADcgWTxSDA1dGWxKYOXYjW3WU70yFmDl3eOsOHEwkXejRr
OSzPykUQWrlCXVjN5RvAsYqLMqHVWmn952h/m+UIKajMj3cxGSgD5wJajQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGK73vVDcERtfpmAwP+mbq2Z+o71MB8GA1UdIwQY
MBaAFJWLN0NqifrKLE9+YPmsTUehma1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFlzM1EycUotc29zVDM1Zy1heE5SNkdacldZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lMzFmMzktYzlmNC00MmMyLWEwM2Ut
MTIxMjUzMTJiMmEzLzEvbFlzM1EycUotc29zVDM1Zy1heE5SNkdacldZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9lMzFmMzktYzlmNC00MmMyLWEwM2UtMTIxMjUzMTJiMmEz
LzEvbFlzM1EycUotc29zVDM1Zy1heE5SNkdacldZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnPbG5pC+
1VyuiNcrNWQiYY6lAVDtog2utuV9y5HVOI9EXdqxZeTim5Zh3rbru5lNcwmWZJef
CPm7UcH/Rh3rtKgKnDuZPg7ZvHLtAIr/5EZAJbgemDWIn/JUquETav0fXbENvQaV
LFYlP62PeEEyB2t1F23vjZyaoZGX58S9qP9PfmQKYiqJEoGHLXjp1a0Geuj0NCKN
jLWNS5+UCJQZjgsxWewqvkDv08FzHfZeJ4s+TWZuFzrlYcNimkXt2+JOk3v6Ssdv
4VSaHplceJoe98zazzuXfMgcmSJXznTC6vNpzVMJ8/8tV/drf1gjbPw6OWZCFoW+
j4VnAQZF92JoLQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:48:19 2026 by rpki-client