Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
File: LyRkddfJujmfB_hDYh9uCBNy11c.mft (raw, json)
Hash identifier: wqdhMboMIwoIpRnJtl6lZJEJpbW0CUqvs9w9hGCjcxU=
Subject key identifier: F7:C4:87:F6:39:BC:2B:46:1F:3B:03:0D:A9:14:8A:9B:B5:65:30:A3
Authority key identifier: 2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
Certificate issuer: /CN=2f246475d7c9ba399f07f843621f6e081372d757
Certificate serial: 019D2884A91E0564D71FE27CF01F4B51C2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
Manifest number: 0885
Signing time: Thu 26 Mar 2026 05:01:15 +0000
Manifest this update: Thu 26 Mar 2026 05:01:15 +0000
Manifest next update: Fri 27 Mar 2026 05:01:15 +0000
Files and hashes: 1: LyRkddfJujmfB_hDYh9uCBNy11c.crl (hash: TaoFwhxS8GljiBq6bOrx65bZDJs271GZ4N4zRy6oYoo=)
2: rGAms1z6A-9ECUjJ26qD00dFB5M.roa (hash: TneAOJ5ow61DGzqx3O0Ri/mEpaW4EBKjztqT5e9vxSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:a9:1e:05:64:d7:1f:e2:7c:f0:1f:4b:51:c2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f246475d7c9ba399f07f843621f6e081372d757
Validity
Not Before: Mar 26 05:01:15 2026 GMT
Not After : Mar 27 05:01:15 2026 GMT
Subject: CN=f7c487f639bc2b461f3b030da9148a9bb56530a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f1:97:5f:a4:c6:11:ed:09:b2:b8:36:94:97:
90:94:df:bc:54:26:eb:58:c3:46:ba:50:b6:9d:c1:
1a:bd:d9:f7:9d:79:76:9a:a8:df:32:ae:eb:a2:7c:
01:3b:8e:d0:88:de:5f:74:cc:40:10:7a:10:f3:63:
17:a2:8b:64:b8:e1:23:cc:df:00:9e:2a:26:06:46:
e1:1c:ca:df:06:b0:c1:e2:4a:a0:45:d0:90:1c:65:
c4:34:97:0d:e4:c5:2d:ed:5b:5e:53:9a:ed:00:71:
c9:1d:63:19:f8:2e:24:2b:3c:e0:e8:29:26:f9:9e:
ec:cd:82:ab:b1:de:94:a9:ae:5c:ec:43:7b:ba:2c:
54:8e:a8:bd:8f:20:fc:52:de:82:d9:e5:33:ec:1d:
a3:85:81:df:6f:2a:9e:12:19:0f:97:8e:5c:4a:38:
80:e5:10:e4:f9:e2:5a:11:ca:93:7d:ab:88:25:28:
41:49:02:91:8d:8a:b6:4b:dd:c6:a5:0d:6d:86:fe:
95:15:f8:33:8d:ca:b1:59:5d:37:49:1a:1e:1b:18:
e5:5d:4e:9a:c7:af:da:c5:c6:20:4f:3c:2d:e5:03:
fe:29:e5:ef:79:2c:1b:5d:a2:66:67:1e:10:dd:6c:
34:93:19:d6:a5:fd:d8:ad:20:b3:d7:03:a2:54:d6:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C4:87:F6:39:BC:2B:46:1F:3B:03:0D:A9:14:8A:9B:B5:65:30:A3
X509v3 Authority Key Identifier:
keyid:2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d4:63:ba:38:83:54:b9:21:a7:81:9d:9e:af:75:ca:d6:08:
28:43:9d:70:0d:42:8d:4c:81:67:04:c0:52:3b:05:b8:ce:a7:
80:99:f3:55:e2:e9:39:e3:c0:cf:4b:85:71:f6:cd:24:f8:56:
be:6c:78:f5:b6:03:74:7b:2f:85:7b:83:12:bf:cf:e8:15:38:
09:d6:f5:28:57:08:50:35:d3:be:42:88:be:e3:14:6b:db:a3:
e4:29:6e:9e:f4:a1:b1:7b:f2:e7:e0:36:11:ac:60:bd:81:db:
d1:56:20:0b:2a:52:95:af:5f:55:58:e1:d0:ae:ed:65:34:84:
d5:5e:d8:7c:69:da:79:96:26:8a:d6:74:0c:f6:42:8f:91:48:
66:28:6e:ad:76:c8:da:8c:61:46:f4:4e:00:46:f5:02:03:f0:
b0:00:28:ec:bf:26:49:61:e6:55:20:0b:b4:80:ba:fd:20:ee:
c4:ef:b4:0a:1c:79:ac:e2:6f:ef:ec:40:ff:cb:3f:be:06:96:
99:69:40:60:e7:5d:ed:0d:d6:0d:11:49:d4:29:4c:cf:c4:a6:
5b:94:68:9b:b6:f0:55:04:07:85:73:5c:f6:ab:87:71:02:a9:
90:ed:79:ff:78:67:db:7d:46:47:44:dd:f7:e9:9f:7e:42:72:
f4:3c:71:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:05:40 2026 by rpki-client