Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
File: LyYGSS1O272szm3JIfOG1idM8RY.mft (raw, json)
Hash identifier: DGhxDfroQoNepl2yEvUGXHI4ebWXKB2JIx6CET8Dk7Y=
Subject key identifier: F7:6D:82:F4:44:1F:1B:AE:08:A0:03:9F:A8:2D:CF:24:A4:F4:6F:0C
Authority key identifier: 2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
Certificate issuer: /CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Certificate serial: 019D24A780B1AD361B8B34F1CD39B2A2A88D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
Manifest number: 15
Signing time: Wed 25 Mar 2026 11:00:50 +0000
Manifest this update: Wed 25 Mar 2026 11:00:50 +0000
Manifest next update: Thu 26 Mar 2026 11:00:50 +0000
Files and hashes: 1: LyYGSS1O272szm3JIfOG1idM8RY.crl (hash: xoPl9d48YKroe3aWiRzGy/jjlGWoPkfEJgttAQyTkCA=)
2: QsgK3zmpC5fuQ0VVqi2BKwSAZT4.asa (hash: Ws1KiWB846RCi+ZBaMIy3xlo3+ka2MoAAIT33rXZvHU=)
3: TJmjHk7-IfOVndDk-rv5dxnB-Hg.roa (hash: Y93GXNgXRGo/l+Ahm8qFGyYePtPybIuW3rty/z9Parw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a7:80:b1:ad:36:1b:8b:34:f1:cd:39:b2:a2:a8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Validity
Not Before: Mar 25 11:00:50 2026 GMT
Not After : Mar 26 11:00:50 2026 GMT
Subject: CN=f76d82f4441f1bae08a0039fa82dcf24a4f46f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:8e:1c:7c:d5:99:70:a7:1f:69:de:6e:a1:
ef:0a:c9:00:9b:d8:1e:f9:86:52:71:9a:fa:31:5d:
e0:3e:4e:3c:6f:20:62:7e:f0:47:53:68:f3:d7:f1:
93:a2:68:a8:b6:9c:71:8c:05:c2:3f:ad:ef:1d:71:
2a:70:5b:00:7d:79:65:34:a5:84:c0:d0:e9:d6:c5:
6e:50:cf:1a:d7:17:d4:b6:dd:f7:f6:51:ce:74:fc:
de:62:33:18:b8:79:a8:3f:29:fa:7f:75:68:9d:4c:
d2:6d:13:7e:c4:dc:70:45:56:e1:ee:3f:82:d2:5a:
f7:8b:ca:a8:f7:61:1b:21:1c:c0:52:9c:94:36:b1:
84:1c:7d:50:70:98:f2:8f:89:c1:d9:e5:0e:e4:2b:
26:d0:36:13:b1:be:1e:26:ee:51:a1:27:ba:25:cf:
12:b7:b2:74:aa:9c:8e:14:0d:e2:b9:c3:ca:9d:27:
b7:46:75:ea:97:71:0e:e6:fb:89:11:25:ec:70:26:
41:e6:58:4d:8b:95:31:c9:5f:54:25:b6:67:c8:a7:
03:23:20:75:15:11:32:22:8f:88:b0:4f:44:ac:8c:
82:58:7e:c0:b3:44:d6:f0:2d:a4:dd:c7:8b:33:04:
0f:ae:29:8f:19:48:b7:aa:68:cb:c8:d2:c1:4e:a2:
a6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6D:82:F4:44:1F:1B:AE:08:A0:03:9F:A8:2D:CF:24:A4:F4:6F:0C
X509v3 Authority Key Identifier:
keyid:2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:34:a3:a4:f4:02:ef:b1:a2:e3:b1:8f:ce:b6:20:0b:48:96:
0d:75:40:d9:61:31:1b:a5:db:4a:f6:db:2e:db:d5:4e:cd:c9:
b5:9d:08:b3:1c:0c:d5:49:cc:99:2c:50:08:aa:0c:ab:cd:7e:
18:e9:ab:64:b1:62:c3:80:8a:72:70:c8:3a:47:3b:23:2c:b2:
dc:19:0a:a3:ac:65:91:8a:b5:32:bc:a6:d6:ac:8e:50:dd:25:
85:90:c2:98:fb:20:90:84:d8:f2:e3:ad:de:db:53:fe:a9:77:
1d:e4:51:de:dd:75:50:b8:32:2e:3c:b2:80:24:85:9f:9f:83:
fe:e4:67:92:67:92:22:44:9b:46:fe:d3:4a:a0:ac:96:e3:38:
99:57:9c:c0:69:ed:d7:88:b3:ad:09:f5:21:61:6d:fd:fb:7b:
96:7c:11:bf:7b:57:85:15:f4:72:bd:ca:45:cb:ce:9f:88:18:
fd:aa:2f:ca:40:95:04:5d:83:e9:5f:70:9a:b0:da:e1:e1:e0:
77:e9:91:a2:b2:c7:34:e0:c7:0b:d2:04:70:ba:4c:65:2e:b9:
dc:d9:01:37:1a:30:4d:2f:9c:9d:0d:67:e5:5c:12:ea:a8:7b:
2a:bd:35:ea:65:8f:fc:bf:77:b3:32:e2:6a:02:41:f7:81:9c:
5a:ae:07:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:16 2026 by rpki-client