Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
File: lYs6eEkk73mV168fvRdniKbCt1Q.mft (raw, json)
Hash identifier: OTP890CyOPXloybHvIIroGFIt4jBj8EZ+Z3l1A8lrD0=
Subject key identifier: A3:16:15:69:46:D7:10:5A:5D:A7:10:B2:9E:2E:B5:F9:83:2D:6F:5C
Authority key identifier: 95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
Certificate issuer: /CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Certificate serial: 01A08C7B920438EBD82722D85F27979E398F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:43 +0000
Manifest this update: Thu 10 Sep 2026 18:01:43 +0000
Manifest next update: Fri 11 Sep 2026 18:01:43 +0000
Files and hashes: 1: BPt6RAa7ENrJmkVCFGkolciZ5ow.roa (hash: Qu8fUjGy1xxsRwZtDqrZ7qwLZ/hB6gVPADzDVKSoBIk=)
2: CuVc4PF5d3AMtHwH59bi3KpoEcU.roa (hash: YY5JT2rh1l3bec5cvOqTSnBQtzBt2nClBilF97d7XCU=)
3: aRQ9uwskWeFhYTdPjO7Okig-UjE.roa (hash: BkfwV9uzeeugOlyi0Sysa2EHfE+nO+JpIDCMPMrtqUc=)
4: lYs6eEkk73mV168fvRdniKbCt1Q.crl (hash: NfAVD062NzcKTN0J2l/b5aC85X914EONIMpNRcKPaNM=)
5: liKRFliJG9HmzqpkhjZr0nxWozg.roa (hash: /xPWEbs1m0lm+Et8vhC1fCxdl4sfLjj/5sEcemF1W1k=)
6: ytZvKlFnz1qSthhK5jm3iOrymuU.roa (hash: SEmRdwSemsDohtKTnRpE/p/H3uUMSjqwrsy6C4xgDao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:92:04:38:eb:d8:27:22:d8:5f:27:97:9e:39:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Validity
Not Before: Sep 10 18:01:43 2026 GMT
Not After : Sep 11 18:01:43 2026 GMT
Subject: CN=a316156946d7105a5da710b29e2eb5f9832d6f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:b3:df:45:03:9f:3f:ca:6a:8f:d2:66:60:
96:c9:21:6e:8e:8a:27:15:85:15:fc:09:c4:27:ec:
69:b7:b3:02:0d:c9:6b:21:58:df:f0:61:4a:0e:dd:
5a:94:59:49:cf:ce:1c:e6:7c:d8:ee:17:bd:2d:ad:
57:8c:b5:0d:d2:f6:ad:85:49:42:14:a1:9e:0f:0f:
ea:2f:5e:93:95:04:7c:13:67:a6:76:99:8f:fa:4a:
05:0c:de:7a:f9:47:60:24:06:ef:9d:36:a0:b3:46:
f2:3d:6c:c7:6b:8b:8b:ed:3f:ba:6d:8e:0f:b2:54:
24:e3:71:fc:bf:c1:aa:ea:75:7e:5b:8a:62:f3:11:
b2:b6:b9:41:e6:6d:f3:ae:c3:b4:a1:76:84:ad:2b:
ef:d7:a8:8b:5c:f3:03:e9:6c:6f:f9:89:5b:be:2c:
9c:c0:10:46:0f:b4:3b:1e:c3:fa:3a:7f:da:3f:02:
7d:06:a0:ba:a5:ae:27:3c:08:4d:fe:ee:34:bc:fb:
8d:91:46:3f:b5:ce:e3:f7:b5:82:8a:b4:45:ee:77:
6a:7c:c9:84:67:a8:67:e8:8d:d3:0a:0e:85:ce:70:
2f:71:67:0b:d4:02:d8:f6:16:90:ab:b6:5c:58:e9:
7b:92:f9:7e:3f:e4:15:4c:01:aa:fb:40:c8:22:4c:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:16:15:69:46:D7:10:5A:5D:A7:10:B2:9E:2E:B5:F9:83:2D:6F:5C
X509v3 Authority Key Identifier:
keyid:95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b2:cb:52:33:24:a3:9a:a7:6f:b0:b9:43:20:0c:d4:90:d4:
9f:3b:fa:62:c7:19:17:11:51:c2:fd:b3:d3:9b:6a:49:97:78:
74:2d:8b:0e:3f:f8:08:60:d9:10:b9:7e:2b:87:af:1b:d9:c3:
65:b8:80:bc:cf:0c:aa:45:35:90:de:2e:a3:2e:15:6a:be:51:
e7:61:54:9f:2a:c3:be:1d:6e:48:cf:04:80:02:90:05:1d:bb:
5a:4c:b9:df:ae:28:ec:81:db:e3:ae:26:7a:82:27:98:b6:5d:
30:58:13:dd:f3:2e:ca:3b:31:a8:15:c4:9e:41:35:b3:8d:9f:
f4:ef:7a:b9:91:a8:b5:aa:19:f6:9c:e2:32:ad:88:f2:98:d8:
f3:ce:61:9d:7a:f8:0a:72:d0:2b:05:5b:99:b6:61:1f:49:fc:
21:73:b3:31:d6:2c:56:fb:0b:3e:37:b9:d0:d0:a6:4a:d9:5a:
70:d3:83:cb:fe:f4:21:0c:e0:47:44:ac:b0:ba:e1:b7:09:f7:
fc:c8:af:8c:fe:eb:42:ea:9a:b4:70:73:a5:6d:46:42:11:07:
47:8b:64:15:da:9f:59:37:db:e8:12:a9:27:ad:2b:43:29:59:
4c:63:20:56:3d:c3:95:c9:a9:2a:8b:a8:66:52:2c:55:2e:80:
a8:96:da:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:41 2026 by rpki-client