Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
File: LyYGSS1O272szm3JIfOG1idM8RY.mft (raw, json)
Hash identifier: 9Q01CP5lh7Pyg7N4fFwPPrQrJHmgK/Wt++gOsimLqCY=
Subject key identifier: 54:A9:8D:47:DB:95:F7:16:D0:26:EF:DF:F0:C7:B0:0B:4D:FF:51:0B
Authority key identifier: 2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
Certificate issuer: /CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Certificate serial: 019F8EA25F5F69AC643FD5416B991F280469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
Manifest number: 0155
Signing time: Thu 23 Jul 2026 11:00:33 +0000
Manifest this update: Thu 23 Jul 2026 11:00:33 +0000
Manifest next update: Fri 24 Jul 2026 11:00:33 +0000
Files and hashes: 1: LyYGSS1O272szm3JIfOG1idM8RY.crl (hash: UKCHJGYSwak2vEVZ/t5vPildbQS27rb6RPuKQVFSLC0=)
2: QsgK3zmpC5fuQ0VVqi2BKwSAZT4.asa (hash: Ws1KiWB846RCi+ZBaMIy3xlo3+ka2MoAAIT33rXZvHU=)
3: TJmjHk7-IfOVndDk-rv5dxnB-Hg.roa (hash: Y93GXNgXRGo/l+Ahm8qFGyYePtPybIuW3rty/z9Parw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:5f:5f:69:ac:64:3f:d5:41:6b:99:1f:28:04:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Validity
Not Before: Jul 23 11:00:33 2026 GMT
Not After : Jul 24 11:00:33 2026 GMT
Subject: CN=54a98d47db95f716d026efdff0c7b00b4dff510b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d0:59:a4:2b:02:a4:30:4e:00:fb:c5:0c:38:
86:fe:61:1c:d0:a4:5e:c2:19:12:c9:b6:83:d3:e2:
34:06:bc:ea:c8:c4:15:01:91:eb:8d:a7:b7:a2:61:
83:ff:a4:5b:1a:9b:6d:87:98:3f:5d:dc:a8:c3:a4:
f4:7f:bd:f2:7d:72:d0:2b:3b:56:56:08:73:8f:9c:
72:30:2c:a9:5b:62:02:81:73:69:4c:e8:40:39:cc:
e9:02:76:cd:4e:1f:c2:d0:45:ee:6f:f9:aa:b2:f9:
86:7d:d3:22:e6:8a:06:93:17:24:01:c7:99:15:da:
ad:73:bc:32:51:24:3f:f6:27:15:13:3f:d2:49:b0:
c2:83:12:1b:dc:a6:83:d3:17:ce:0b:cd:82:0e:95:
47:a2:66:14:b4:90:e8:07:95:fa:23:b6:e6:f2:ae:
ce:c5:36:10:60:f6:66:2d:6a:6d:82:38:c6:38:77:
6d:cf:3b:c4:52:04:59:23:79:f6:47:dc:ab:67:6e:
37:94:98:6d:8b:76:a0:fa:ed:3e:2a:5e:66:bf:68:
70:55:f3:50:c6:e1:f7:4a:00:2a:6f:c3:4d:c2:56:
43:b1:1f:85:2f:4b:72:25:f6:09:c8:06:c7:b4:b4:
4e:3c:ad:c4:bf:98:a4:85:bc:af:89:aa:ca:fe:2d:
60:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A9:8D:47:DB:95:F7:16:D0:26:EF:DF:F0:C7:B0:0B:4D:FF:51:0B
X509v3 Authority Key Identifier:
keyid:2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:81:fc:a6:6e:1e:9f:64:ea:0f:f4:4f:09:0f:52:d8:a3:a7:
cd:3c:1e:0c:d4:6f:01:62:15:89:15:e7:50:bd:7d:90:27:c7:
00:13:34:88:fb:69:05:c9:76:03:3d:9e:1a:62:05:9c:8a:3f:
99:fb:73:45:c6:56:43:0a:0d:65:e2:71:de:9f:60:db:83:d7:
f0:b0:cf:33:89:df:bd:27:3d:70:4c:7f:8f:87:dc:f4:e8:97:
20:ef:b5:ad:14:4b:11:c4:a7:04:62:61:f3:96:b0:bf:77:9d:
29:8a:60:a8:1a:92:29:14:45:b9:50:59:20:ce:0c:20:27:2c:
f8:86:d4:4d:d4:59:8a:7e:74:48:11:db:60:c6:2a:a1:a3:13:
54:46:f8:86:01:4b:8f:94:0e:6a:bd:d4:2c:62:e7:20:24:24:
76:b4:f6:4f:61:5f:f6:7c:3a:d7:fb:18:77:80:4c:54:31:b1:
e4:9c:4c:f6:6b:67:4e:e1:34:43:9b:68:31:d7:07:a1:37:a5:
bd:ce:93:38:4e:94:ec:df:e2:a9:20:7d:44:2b:26:6c:fd:06:
39:8a:b0:eb:cb:b2:34:a5:63:23:4a:2e:a6:54:cd:5d:c1:3c:
1c:ea:9f:64:1a:3b:d3:6c:e9:e8:44:5e:ae:a4:a5:6b:64:5d:
d6:c1:e6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:55 2026 by rpki-client