Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
File: LyYGSS1O272szm3JIfOG1idM8RY.mft (raw, json)
Hash identifier: aroV6dq6fSD4jFRRgWDNbPXvSqStGXh/CYubtnM28Jc=
Subject key identifier: 35:26:48:3E:FE:71:EC:2A:09:AE:8C:3C:BD:B0:DF:95:94:A9:34:6B
Authority key identifier: 2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
Certificate issuer: /CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Certificate serial: 01A0D8DEC5BC29604E7686FAAE9D6E03AFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
Manifest number: 0200
Signing time: Fri 25 Sep 2026 14:01:13 +0000
Manifest this update: Fri 25 Sep 2026 14:01:13 +0000
Manifest next update: Sat 26 Sep 2026 14:01:13 +0000
Files and hashes: 1: LyYGSS1O272szm3JIfOG1idM8RY.crl (hash: CQDD+0G8FsbOzOoXo66OpR8I1UaymR9Nn3s4SKZklLs=)
2: QsgK3zmpC5fuQ0VVqi2BKwSAZT4.asa (hash: Ws1KiWB846RCi+ZBaMIy3xlo3+ka2MoAAIT33rXZvHU=)
3: TJmjHk7-IfOVndDk-rv5dxnB-Hg.roa (hash: Y93GXNgXRGo/l+Ahm8qFGyYePtPybIuW3rty/z9Parw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:c5:bc:29:60:4e:76:86:fa:ae:9d:6e:03:af:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Validity
Not Before: Sep 25 14:01:13 2026 GMT
Not After : Sep 26 14:01:13 2026 GMT
Subject: CN=3526483efe71ec2a09ae8c3cbdb0df9594a9346b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bd:7b:2c:1a:91:c8:41:85:3f:31:eb:92:ff:
33:c3:00:68:ec:16:2a:a7:46:66:7c:1a:5b:98:4d:
48:45:1f:9d:8b:e9:3f:5e:e4:ed:a2:ef:80:da:da:
c8:3a:64:36:fd:84:18:ae:d4:fc:8f:84:53:9b:fb:
9e:b9:be:fe:06:5b:27:c0:1a:a1:34:08:47:a0:5b:
68:5d:0c:06:71:e9:70:0a:7f:e1:c3:c4:7b:b3:b3:
ef:21:05:15:75:ea:6c:7f:d5:fe:bf:b3:4d:90:49:
7d:1f:a7:3b:44:c7:20:5c:cb:9c:23:1a:95:d4:ad:
8a:cc:2b:5b:80:09:c7:42:39:e1:5f:73:93:00:a6:
76:79:59:7e:f7:86:62:ac:3a:47:c8:28:bc:52:9c:
92:94:34:4f:71:2b:5e:41:7e:01:ec:ff:3c:59:6f:
2e:57:31:c0:77:c9:9b:a4:0e:76:77:72:ea:47:b5:
b6:d3:3d:af:7b:15:9b:fd:62:e0:89:d1:1c:7e:1e:
b7:23:0e:bf:36:c5:97:42:d0:ab:2b:7f:e5:77:51:
1c:ac:9a:84:88:61:21:62:fc:5d:24:7f:a3:3a:21:
5e:4b:aa:9c:fc:7d:0d:d1:9c:c7:d0:31:61:fc:53:
ff:09:01:98:9d:34:4a:7f:a2:8f:3a:1d:cf:e7:ac:
21:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:26:48:3E:FE:71:EC:2A:09:AE:8C:3C:BD:B0:DF:95:94:A9:34:6B
X509v3 Authority Key Identifier:
keyid:2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:88:40:f7:63:cd:40:6f:b5:b7:07:3f:98:28:e6:4b:ea:8b:
b5:22:16:d9:73:6f:3b:73:95:4f:30:bc:5c:56:50:be:5b:8b:
bf:9b:00:4a:ab:59:13:ab:38:15:76:fc:58:9a:4f:59:66:fd:
2d:22:c9:c9:b9:2f:55:1b:2d:b2:c4:aa:20:72:40:e4:8e:5d:
9d:43:61:19:6b:e2:ba:60:07:c1:16:d1:3a:b2:ae:86:ad:75:
db:55:22:c4:dc:3e:3b:4b:39:a7:b9:eb:ed:9a:9d:99:5b:3e:
4c:ca:6f:b1:96:2a:e6:9d:17:e2:bd:22:88:14:f3:80:1c:4b:
00:bc:fe:86:04:e7:5d:93:83:3e:02:58:fc:46:60:81:eb:3f:
d6:f3:a1:02:fa:e5:38:b2:db:9f:2f:92:fd:54:2b:f9:0a:38:
65:0d:d0:dc:e0:1c:c1:1c:84:5f:bc:08:ad:54:07:7c:02:bd:
37:7e:e3:e7:69:54:d5:01:0b:37:0c:ea:de:36:35:25:42:e0:
01:2a:da:59:f9:bf:44:9f:a9:a0:1d:1c:a4:18:c1:0e:d3:0f:
51:82:e1:e5:10:3c:84:18:0e:48:9d:32:4d:90:9e:ae:de:90:
c8:1b:f2:60:53:8b:4e:f6:46:23:b6:a3:d0:0c:34:71:d6:f1:
9a:cf:8a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:48:42 2026 by rpki-client