Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
File: LyYGSS1O272szm3JIfOG1idM8RY.mft (raw, json)
Hash identifier: owHAF16c2v6FvReFrMzGZ/Ck40GzirpFWW7YMYv25n8=
Subject key identifier: 5D:8C:BE:64:DA:77:D1:E8:77:FE:BC:C6:0C:70:9F:9A:60:2B:88:9D
Authority key identifier: 2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
Certificate issuer: /CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Certificate serial: 019E1FB60DC11483541EA776A524628CE1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
Manifest number: 97
Signing time: Wed 13 May 2026 05:01:25 +0000
Manifest this update: Wed 13 May 2026 05:01:25 +0000
Manifest next update: Thu 14 May 2026 05:01:25 +0000
Files and hashes: 1: LyYGSS1O272szm3JIfOG1idM8RY.crl (hash: MDLpWtolJJsMRTF4b9VkNgiExGJxDy9ML/sBfIZXo/w=)
2: QsgK3zmpC5fuQ0VVqi2BKwSAZT4.asa (hash: Ws1KiWB846RCi+ZBaMIy3xlo3+ka2MoAAIT33rXZvHU=)
3: TJmjHk7-IfOVndDk-rv5dxnB-Hg.roa (hash: Y93GXNgXRGo/l+Ahm8qFGyYePtPybIuW3rty/z9Parw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b6:0d:c1:14:83:54:1e:a7:76:a5:24:62:8c:e1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Validity
Not Before: May 13 05:01:25 2026 GMT
Not After : May 14 05:01:25 2026 GMT
Subject: CN=5d8cbe64da77d1e877febcc60c709f9a602b889d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:ad:6d:c9:33:5b:fc:9e:0c:d0:50:73:54:
98:7a:dd:4e:3e:22:d9:23:0d:77:e7:37:95:b8:25:
78:9f:79:5b:00:02:3e:bd:f3:8a:ee:16:ee:82:7d:
95:1f:95:54:f1:8b:d1:1c:7d:e1:9e:0c:59:d8:a7:
6c:a1:25:89:90:b7:57:9a:bc:d4:a7:74:c7:63:87:
32:c9:cf:88:87:e0:45:57:85:06:47:a3:85:d8:40:
df:4b:e0:1a:76:42:3b:0e:da:bb:1d:2d:da:6f:83:
3b:b2:36:92:44:e2:82:2c:26:ca:e9:83:67:36:0c:
73:9f:31:40:b3:10:99:94:ea:89:73:21:3f:5e:8d:
d1:7c:34:d3:3e:97:8a:28:cc:11:16:ec:60:29:d7:
c7:55:96:46:8e:97:cc:5f:40:67:f2:b0:7a:64:dd:
a7:59:1f:b2:07:0f:db:f3:76:94:44:41:27:fe:20:
38:4f:07:f8:5d:af:cc:c0:49:89:87:4c:92:c1:66:
91:36:b2:1c:6c:55:55:8a:8d:4b:68:a9:dc:dc:80:
d7:60:16:04:8b:fb:e2:6b:76:cd:d4:ac:4f:07:c5:
91:01:b4:af:8c:64:d6:72:4c:ce:d1:37:90:1d:00:
58:b8:82:9d:3c:b1:e0:dd:6d:1f:5c:d7:43:30:fb:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8C:BE:64:DA:77:D1:E8:77:FE:BC:C6:0C:70:9F:9A:60:2B:88:9D
X509v3 Authority Key Identifier:
keyid:2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:db:47:4a:d8:58:57:64:f8:4d:f6:3e:ad:5a:0a:46:c2:d6:
0f:e6:9a:0a:70:60:d0:2c:0a:70:39:47:6c:b6:88:07:0b:3c:
c4:be:87:b9:47:31:84:3a:4c:aa:2b:df:e8:6a:cd:2b:e9:1d:
7c:44:cc:b9:0a:56:be:18:b1:95:6f:74:c2:26:83:53:7a:42:
9c:12:39:f8:33:c4:07:2d:6d:a2:c8:25:cf:4e:b6:63:89:66:
64:94:c7:b7:3b:5a:e3:76:83:60:a4:e4:1a:63:fe:59:94:27:
f1:25:89:64:e2:2d:cc:17:d9:10:04:c4:1e:f6:b2:9e:5c:ef:
f7:b9:6a:02:bb:99:c6:b0:0f:ee:21:40:fb:15:db:9b:2e:bd:
07:85:0f:05:ed:44:34:64:29:9c:7a:58:95:71:b7:0a:f3:95:
ec:60:a7:8c:b3:f5:1f:25:e2:53:bd:0c:3f:ec:d6:d0:3c:02:
38:50:54:f9:88:b6:0a:59:c2:e4:4e:16:64:2f:33:c2:63:0d:
78:d8:a7:df:12:ca:a2:0d:d4:67:31:d2:c9:6b:b9:bb:47:01:
76:27:fd:22:0f:51:0d:ae:01:f9:ba:ec:e4:6c:79:5b:01:f1:
3d:12:e5:09:f0:d0:2c:e1:70:ca:67:96:75:2e:08:e6:cf:40:
f1:6a:93:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:49:46 2026 by rpki-client