Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
File: LYaVbM1-OrtCkd1U29i0NCv5V8w.mft (raw, json)
Hash identifier: wmuz442GbuDG99XiC/tfaScdacHUnvXptPgfH2gArTI=
Subject key identifier: C6:B1:B2:B7:07:B1:98:CB:A1:73:91:31:E8:BE:B1:25:B2:BD:A0:0E
Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Certificate serial: 019D299710FF0A681D6A1F97CB685F25B7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 10:00:59 +0000
Manifest this update: Thu 26 Mar 2026 10:00:59 +0000
Manifest next update: Fri 27 Mar 2026 10:00:59 +0000
Files and hashes: 1: LYaVbM1-OrtCkd1U29i0NCv5V8w.crl (hash: jFKT1AqEa2zc74S8jbsspjbYtWMBuh3lp2wUefzVYRQ=)
2: UZ3Zh5sbw9GQyuWThFTa8ax6K-k.roa (hash: yAGOxTch7/IeLN3QFrJm+PJnLSPNYzzaqiRQZwJHefI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:10:ff:0a:68:1d:6a:1f:97:cb:68:5f:25:b7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Validity
Not Before: Mar 26 10:00:59 2026 GMT
Not After : Mar 27 10:00:59 2026 GMT
Subject: CN=c6b1b2b707b198cba1739131e8beb125b2bda00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:93:fa:49:e3:aa:65:7a:37:07:8f:df:72:0b:
d2:c1:f8:8d:ea:80:70:e5:c2:71:6f:9a:1c:db:bb:
24:31:49:02:df:4d:6e:39:66:08:ff:81:79:eb:0e:
e9:de:8c:56:d0:b8:4d:ce:b3:3a:54:7f:a0:1b:08:
b1:08:1f:70:88:85:3c:62:02:1e:66:43:d8:8c:13:
af:28:74:9c:a9:c2:25:15:7e:51:a3:c2:17:a3:93:
a2:eb:a2:b1:45:bc:c8:6d:7e:bc:82:ad:e2:05:e3:
23:09:21:73:87:df:25:1c:9c:2c:d4:80:13:9a:c9:
72:af:cf:3a:32:0b:86:3b:55:5f:0d:b9:93:44:01:
b1:b2:f8:30:d1:35:e2:95:f8:e6:ed:64:ad:04:1f:
17:c8:b2:37:65:ca:8b:5a:0e:5d:5d:13:bf:13:5a:
46:41:ff:55:ca:1f:2c:46:5d:1e:7b:13:20:ba:46:
9d:bc:24:33:35:31:e3:22:e2:54:f4:50:5d:e9:e5:
c4:e4:83:2d:2f:98:9d:67:53:47:3f:25:dc:7e:95:
70:a4:65:fb:89:bc:6e:e8:d4:16:21:65:09:19:58:
97:ca:1f:ca:ae:5c:87:4f:e7:48:ea:f1:73:5e:c3:
6a:c9:c0:f6:0e:9d:a0:86:8e:98:72:bb:5b:2d:c5:
e5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B1:B2:B7:07:B1:98:CB:A1:73:91:31:E8:BE:B1:25:B2:BD:A0:0E
X509v3 Authority Key Identifier:
keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5b:96:3f:93:9d:3a:5f:96:5e:54:ad:17:36:bc:9f:15:cd:
1f:f9:c9:30:78:03:9a:8d:f0:3c:10:54:6b:0f:7a:e1:ab:f7:
71:07:aa:20:63:1f:15:e1:31:ac:56:6f:48:28:b2:b7:9f:21:
d8:bf:d8:ab:d0:37:d9:23:7c:89:e8:96:f4:81:f7:c0:81:38:
61:f7:2f:69:74:93:e4:4f:22:1e:77:2f:06:d5:9b:2f:05:ee:
ae:3a:77:98:15:2a:b4:e7:39:6a:64:d2:be:8c:ed:f2:65:7c:
61:c7:e4:a5:70:d0:54:95:f7:e9:92:bd:48:8f:42:41:b1:47:
40:25:8c:ac:8d:be:a0:2e:7a:f0:70:86:90:69:9f:47:fe:88:
64:6b:17:3d:23:30:e8:a4:e8:4e:69:1c:cb:be:10:74:1c:22:
a4:00:44:01:cd:69:82:37:a8:e7:18:e0:5b:ca:21:e9:2b:4a:
47:5b:78:66:1a:11:f1:85:82:b1:c6:fe:97:e9:ae:0e:1f:a0:
cc:de:f0:53:81:93:19:07:e7:d2:a5:9b:67:0c:18:c5:4a:9d:
6f:6b:c6:0c:cc:98:c7:6e:6f:1d:5b:d2:6a:69:78:e1:cf:c7:
e9:7f:23:e4:8f:d7:b3:38:e9:eb:ca:76:00:12:1e:16:d7:ba:
d0:3b:ef:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plxD/Cmgdah+Xy2hfJbfcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkODY5NTZjY2Q3ZTNhYmI0MjkxZGQ1NGRiZDhiNDM0MmJm
OTU3Y2MwHhcNMjYwMzI2MTAwMDU5WhcNMjYwMzI3MTAwMDU5WjAzMTEwLwYDVQQD
EyhjNmIxYjJiNzA3YjE5OGNiYTE3MzkxMzFlOGJlYjEyNWIyYmRhMDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZP6SeOqZXo3B4/fcgvSwfiN6oBw
5cJxb5oc27skMUkC301uOWYI/4F56w7p3oxW0LhNzrM6VH+gGwixCB9wiIU8YgIe
ZkPYjBOvKHScqcIlFX5Ro8IXo5Oi66KxRbzIbX68gq3iBeMjCSFzh98lHJws1IAT
mslyr886MguGO1VfDbmTRAGxsvgw0TXilfjm7WStBB8XyLI3ZcqLWg5dXRO/E1pG
Qf9Vyh8sRl0eexMgukadvCQzNTHjIuJU9FBd6eXE5IMtL5idZ1NHPyXcfpVwpGX7
ibxu6NQWIWUJGViXyh/KrlyHT+dI6vFzXsNqycD2Dp2gho6YcrtbLcXllwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaxsrcHsZjLoXORMei+sSWyvaAOMB8GA1UdIwQY
MBaAFC2GlWzNfjq7QpHdVNvYtDQr+VfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wNjRlMzUtODgxNC00M2Y2LWI0OGIt
YTI2ZGUzMTNiMzRkLzEvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8wNjRlMzUtODgxNC00M2Y2LWI0OGItYTI2ZGUzMTNiMzRk
LzEvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcluWP5Od
Ol+WXlStFza8nxXNH/nJMHgDmo3wPBBUaw964av3cQeqIGMfFeExrFZvSCiyt58h
2L/Yq9A32SN8ieiW9IH3wIE4YfcvaXST5E8iHncvBtWbLwXurjp3mBUqtOc5amTS
vozt8mV8YcfkpXDQVJX36ZK9SI9CQbFHQCWMrI2+oC568HCGkGmfR/6IZGsXPSMw
6KToTmkcy74QdBwipABEAc1pgjeo5xjgW8oh6StKR1t4ZhoR8YWCscb+l+muDh+g
zN7wU4GTGQfn0qWbZwwYxUqdb2vGDMyYx25vHVvSaml44c/H6X8j5I/Xszjp68p2
ABIeFte60DvvvA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:29:16 2026 by rpki-client