Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
File: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft (raw, json)
Hash identifier: Wtm7v+SeCc9idJkW9eCtIDua9ld2fDQvpLtbTMJtQvU=
Subject key identifier: D5:FB:8D:D6:FF:D7:B5:D3:8E:6D:58:10:EC:F1:65:D0:DA:14:60:12
Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Certificate serial: 019D2960FB0B2A582BB915C6F63ED8DC374C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
Manifest number: 1143
Signing time: Thu 26 Mar 2026 09:01:54 +0000
Manifest this update: Thu 26 Mar 2026 09:01:54 +0000
Manifest next update: Fri 27 Mar 2026 09:01:54 +0000
Files and hashes: 1: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl (hash: M+VwnIOxFDJFxiVqPMAF0/VPAM/tDhAXpzoIs3UeWcM=)
2: qzDVPJjwkiKMmIw2RcHgiamnABM.roa (hash: xT+W6De5eWZz4XKVbRVPuP+LFXCQC6a/MFcFgjxi2KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:fb:0b:2a:58:2b:b9:15:c6:f6:3e:d8:dc:37:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Validity
Not Before: Mar 26 09:01:54 2026 GMT
Not After : Mar 27 09:01:54 2026 GMT
Subject: CN=d5fb8dd6ffd7b5d38e6d5810ecf165d0da146012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:3e:be:9e:14:ac:e3:36:81:39:69:4c:ae:
d1:c2:08:78:a3:eb:39:4d:46:90:1c:62:5f:62:f1:
31:5f:ef:00:38:3e:0b:4e:61:d4:30:79:0a:b2:8f:
32:92:7f:e2:03:05:54:3b:d4:85:f4:79:c4:a1:53:
55:58:cd:82:22:32:19:a7:c6:30:74:be:98:ea:7b:
0b:d8:02:94:29:b1:d8:be:e2:16:7c:8c:6b:8d:97:
16:9c:c0:ce:c6:86:67:6a:bc:1a:ff:fc:2a:ba:fd:
f6:1b:40:3d:4f:cf:f9:10:52:49:65:b3:fa:de:72:
21:5e:e5:42:b0:d7:1b:a1:ca:87:45:ee:fd:bb:78:
7f:71:53:58:b7:ec:c5:60:8a:80:35:e4:52:2a:ad:
63:c3:bb:d7:fe:5c:7b:1d:ff:85:a0:53:ae:99:d9:
c3:ce:72:b8:76:38:35:bf:9c:6b:b6:29:0e:2b:c6:
89:75:e5:98:55:90:ee:49:89:e8:96:37:5d:96:1b:
4c:f8:f0:a6:1a:fb:2c:a7:6b:9f:9b:44:25:98:c1:
81:ab:6d:49:68:95:2e:16:c1:78:9d:e7:4b:52:66:
f5:5a:3f:74:79:3f:21:46:29:78:a3:4f:98:30:21:
49:33:2d:34:a9:8a:b0:15:08:c7:85:07:0b:94:9b:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FB:8D:D6:FF:D7:B5:D3:8E:6D:58:10:EC:F1:65:D0:DA:14:60:12
X509v3 Authority Key Identifier:
keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e8:31:fe:22:e4:42:5f:36:c7:aa:00:4d:10:28:7d:cd:a8:
5b:51:c1:c9:4b:d8:43:dc:e7:e0:52:d2:f8:0f:51:3a:f8:40:
5a:69:93:95:a8:cf:4c:70:31:73:23:15:da:d4:9b:a9:7d:96:
23:6d:40:58:b1:8c:66:10:c3:73:75:fe:cf:87:ae:da:a8:6b:
df:34:3f:80:9a:65:d3:e7:6f:72:99:38:d8:4f:ef:16:bb:de:
6e:36:dc:f1:31:f1:00:11:97:48:df:4c:84:fc:76:d2:60:b1:
2f:cb:a4:7f:ff:f5:fa:4b:67:84:b2:f0:ed:23:17:5d:19:be:
b7:83:0e:f0:5c:77:2c:d4:b7:5a:37:b2:d0:92:15:7c:47:8a:
9b:16:66:a4:96:66:e0:3c:9e:d9:31:32:1f:85:8d:1b:75:c1:
4d:c2:b5:16:3e:a4:6b:04:22:f0:2b:8c:7c:28:3f:99:a0:0c:
fd:f8:bd:26:2a:a4:40:01:e0:90:7f:57:51:c2:55:21:75:2a:
fb:e1:db:69:6a:1a:e5:60:ac:a9:7a:20:c6:e3:0a:fd:b8:a8:
5a:1d:1a:61:4f:24:c3:5d:03:2a:ba:a8:64:38:6c:66:82:6e:
36:2d:b9:1e:20:29:38:dc:9e:bd:b4:46:81:ff:84:4b:4d:01:
81:35:35:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:31:52 2026 by rpki-client