Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
File: _lyk4qChgOsvKcyIdAqnB7iCHXw.mft (raw, json)
Hash identifier: dY8EtONxYLw/zeuNhBg7J7qGDHsswy2NZXwxCCDgJIY=
Subject key identifier: 73:11:0F:A3:55:C2:B7:DD:1D:5B:0B:AE:8C:9A:E7:87:2B:4A:5F:80
Authority key identifier: FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
Certificate issuer: /CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Certificate serial: 019D25F18DB1597A2E83E7461C720E16CFEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 17:01:20 +0000
Manifest this update: Wed 25 Mar 2026 17:01:20 +0000
Manifest next update: Thu 26 Mar 2026 17:01:20 +0000
Files and hashes: 1: NP5tK9sJqRpdt0WYxsVkCWjvRlc.roa (hash: l2Db7QyGTQEhegInLfDc9J67ROlsj8aNjEngOYZ1S48=)
2: _lyk4qChgOsvKcyIdAqnB7iCHXw.crl (hash: s1jtd6zzlJ8aC6BRXqqQ4yHjpEQL6Rrekd+Sp/xhhEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:8d:b1:59:7a:2e:83:e7:46:1c:72:0e:16:cf:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Validity
Not Before: Mar 25 17:01:20 2026 GMT
Not After : Mar 26 17:01:20 2026 GMT
Subject: CN=73110fa355c2b7dd1d5b0bae8c9ae7872b4a5f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5e:4c:1e:16:9b:cd:1c:92:ee:3e:76:d7:ae:
36:1b:23:2e:6d:1f:c2:5b:17:0f:1f:f5:15:62:cd:
49:57:3c:a1:76:76:a5:d2:36:53:dd:c8:cb:4e:e8:
13:c5:84:aa:06:ec:ae:b1:31:da:11:be:db:89:f0:
08:d2:c3:5f:d5:f6:ae:5c:f0:83:77:1c:70:5f:3e:
4b:5f:60:b4:b1:0f:5a:ea:1d:f7:23:38:38:d9:e5:
07:69:22:9b:61:3c:68:52:63:7c:e3:2c:38:18:fd:
8e:85:e8:17:9c:93:e6:8c:41:3e:d7:da:09:7d:f3:
ef:13:0a:2d:98:24:ad:a2:60:d7:e7:25:38:05:6a:
ba:38:2e:1c:b9:5b:1a:cf:54:c1:68:5a:9c:a4:26:
48:d4:cc:22:ed:f2:a6:cf:b9:cf:8e:d9:c6:b2:c1:
47:68:ca:82:32:5e:aa:51:7e:6e:d7:1a:62:49:38:
04:05:c5:f3:72:12:8a:1a:5d:e3:72:41:e5:a3:ef:
1a:06:d2:0d:29:84:32:c8:8a:8f:b7:08:f6:ba:62:
f5:f9:3f:01:c5:7a:f4:ea:53:4c:e7:9b:33:2e:0e:
f5:4c:2e:1c:c3:76:7f:7e:1b:3e:bb:8f:3d:cb:15:
f1:e9:31:20:02:4e:76:42:d1:f6:17:95:b4:d3:7d:
a1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:11:0F:A3:55:C2:B7:DD:1D:5B:0B:AE:8C:9A:E7:87:2B:4A:5F:80
X509v3 Authority Key Identifier:
keyid:FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:43:83:b2:ed:5c:1d:10:e6:c8:a4:16:a5:63:c3:ac:b6:a1:
43:97:3e:ad:19:fd:25:0b:56:25:69:28:7e:65:f6:67:d6:40:
c2:43:fc:1a:d2:50:be:04:6e:ef:a2:97:6a:5a:19:79:38:b9:
55:61:da:b0:62:f4:84:c2:98:8a:e3:17:b9:b1:9b:4e:a0:ec:
ac:67:c8:30:b3:ea:60:ac:bf:9e:aa:a8:d3:f9:cf:f6:63:1f:
2f:69:d7:71:6e:7f:33:1d:7a:46:90:7d:8c:0c:26:f2:4f:08:
0f:17:70:2e:a4:26:f9:01:71:85:fd:99:e9:6d:0c:f9:e8:97:
30:3c:08:ce:88:67:c1:15:fd:2a:1b:78:ee:a4:f0:8b:25:99:
9d:b7:eb:16:ae:89:84:db:1e:de:27:93:c1:67:ba:a2:66:63:
be:fc:9e:8b:0f:18:50:41:23:57:46:6b:92:89:52:47:37:b1:
fd:90:c2:b7:d3:b3:c7:94:91:ac:10:41:a3:bf:f2:d6:12:5a:
b9:4b:49:60:9d:26:ac:07:8a:36:a2:60:3f:e8:4e:00:49:20:
56:76:4e:ab:23:7f:cf:16:d1:b6:6c:36:19:cf:72:7a:4b:e0:
e3:6d:6d:9a:eb:d7:64:32:29:73:b7:45:e7:cc:11:e7:6c:aa:
ee:d2:45:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:12 2026 by rpki-client