Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
File: LycJyzmcThaMy9oW2xNrW8i5bdY.mft (raw, json)
Hash identifier: ppQaV5Cwv6oMhXo0Cn4Zn7LM/XmyMSQp5pwOJUzU9/Y=
Subject key identifier: F3:5E:C0:26:90:8C:97:20:03:0A:6E:01:05:55:C2:EA:17:4B:29:33
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial: 019E1DFE6F3EB019992422B273C378010C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 21:01:14 +0000
Manifest this update: Tue 12 May 2026 21:01:14 +0000
Manifest next update: Wed 13 May 2026 21:01:14 +0000
Files and hashes: 1: 7kw5w-zJ_YXKIn037YAInaEUmZY.roa (hash: rVc7COjVzeYENlsZ2/JJMKf1JAN2bGVTLnuUK0NSgao=)
2: LycJyzmcThaMy9oW2xNrW8i5bdY.crl (hash: MCWSCUn8CYf+uoExuigTFwIZHIf00HQXduoI/jg2kp8=)
3: sAjWputXETwsd0f5bPK9WwQfnp4.roa (hash: VHGAcT48PcqLVh4j4mpXHm+yifOjbnBfzwoffj3XsoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:6f:3e:b0:19:99:24:22:b2:73:c3:78:01:0c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Validity
Not Before: May 12 21:01:14 2026 GMT
Not After : May 13 21:01:14 2026 GMT
Subject: CN=f35ec026908c9720030a6e010555c2ea174b2933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:55:8f:a0:2a:2c:87:d6:36:45:18:82:cf:
bd:38:14:4d:4a:37:02:a6:64:b8:77:f2:9d:36:19:
ba:c7:41:ce:ec:1c:36:b0:24:0b:04:83:09:9b:46:
49:9f:0b:ab:8f:8f:ce:4c:1d:81:08:f2:64:42:82:
5b:ae:7c:e7:cc:65:79:d0:cf:73:fd:05:64:31:cf:
c4:44:1a:9a:a2:37:82:d2:6c:9c:02:91:c1:95:f2:
52:76:e7:5c:70:92:11:98:b7:45:d9:17:73:68:f9:
be:ab:6b:05:96:c8:6f:d9:1e:dd:1c:6f:a1:89:ea:
82:89:fc:c3:c5:51:a8:8a:0b:06:75:08:82:8f:71:
51:27:e0:03:21:41:86:e7:3b:c5:8a:09:0a:3a:7f:
db:cc:ee:87:a5:91:2a:e1:2f:0f:53:fb:d7:64:13:
34:71:e9:47:93:e9:cf:bf:3b:ac:99:62:59:e5:e5:
a5:17:f7:3d:96:43:a3:ff:bc:a4:7b:6c:94:d0:63:
5b:89:0a:ce:48:c7:6e:f7:36:23:4e:ee:0e:5b:a9:
66:0d:6b:b6:f2:72:a4:cd:27:31:21:1c:1f:43:21:
72:8e:f3:28:f8:5c:e1:e7:cc:a6:70:52:55:c3:e3:
ed:ed:48:47:59:6d:53:11:02:4b:1e:0c:43:41:3c:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5E:C0:26:90:8C:97:20:03:0A:6E:01:05:55:C2:EA:17:4B:29:33
X509v3 Authority Key Identifier:
keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:19:6d:1d:e3:0c:9d:c6:86:48:7f:a5:1d:1f:a8:e4:4f:d6:
a6:97:9d:99:fd:9b:dc:de:b2:a5:4a:14:0a:e6:5d:6a:44:bc:
f3:bd:4e:95:23:5d:8d:e2:d3:d0:30:b3:92:bd:05:ac:0a:58:
38:cc:5a:57:ee:4d:d6:f4:c6:b1:7e:7b:23:c5:92:65:bb:3e:
96:8f:1a:b9:28:78:68:f3:04:94:52:9a:e2:f4:64:78:0c:95:
64:84:9b:6a:76:9c:2a:e9:b0:b7:5d:33:9b:6b:e9:e7:68:96:
24:26:b1:d0:62:44:95:59:29:50:29:67:2b:4f:60:e8:19:7d:
e7:83:3d:32:7e:8c:28:ba:ee:e2:f8:12:35:a1:a2:8e:e6:4d:
9b:eb:08:8f:8c:fe:b4:a3:40:32:af:05:71:f9:bb:9b:83:dc:
94:93:db:4c:15:e0:19:60:30:43:db:ac:4a:fd:55:2d:71:2b:
e6:d8:33:aa:e0:77:ce:ff:b5:3b:6d:e0:1c:44:39:e2:7a:3a:
11:d5:2e:df:f3:a8:fb:0f:d3:69:9b:49:17:4d:4a:f3:33:f8:
0f:1f:65:d9:bc:4f:f9:6d:bc:c5:c7:10:1d:a3:bd:84:47:fd:
8d:69:8d:79:09:d4:b1:96:73:26:e6:0e:60:6e:af:71:ea:54:
6f:a3:c7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:53:34 2026 by rpki-client