Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
File: LycJyzmcThaMy9oW2xNrW8i5bdY.mft (raw, json)
Hash identifier: VTvfDiIPQYerOcdMdKY1PyaN1F+5vbVFowoTz+pOawg=
Subject key identifier: 6C:3B:E0:6F:41:B5:73:27:E8:43:98:4E:4D:D4:F4:8C:62:3B:6B:8F
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial: 019D26CD94F35B0BB1FAF5632856A2177305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 21:01:40 +0000
Manifest this update: Wed 25 Mar 2026 21:01:40 +0000
Manifest next update: Thu 26 Mar 2026 21:01:40 +0000
Files and hashes: 1: 7kw5w-zJ_YXKIn037YAInaEUmZY.roa (hash: rVc7COjVzeYENlsZ2/JJMKf1JAN2bGVTLnuUK0NSgao=)
2: LycJyzmcThaMy9oW2xNrW8i5bdY.crl (hash: DJsFu+0IHRpEB33RHXBftOSP13vAaHL8UM3/2/v7yNM=)
3: sAjWputXETwsd0f5bPK9WwQfnp4.roa (hash: VHGAcT48PcqLVh4j4mpXHm+yifOjbnBfzwoffj3XsoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:94:f3:5b:0b:b1:fa:f5:63:28:56:a2:17:73:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Validity
Not Before: Mar 25 21:01:40 2026 GMT
Not After : Mar 26 21:01:40 2026 GMT
Subject: CN=6c3be06f41b57327e843984e4dd4f48c623b6b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:f1:5d:09:6c:53:47:11:a9:e0:53:07:93:
0a:0a:5d:2c:2b:b8:ad:4a:ae:f7:7a:56:52:73:9f:
15:14:be:b5:79:3a:12:ee:26:fb:b0:35:b3:6e:b3:
ef:2e:ec:ef:1c:6f:09:95:8e:81:d8:d9:ec:2a:53:
57:40:69:5c:bd:e8:72:1c:6a:3d:7e:18:d2:78:9b:
c5:fe:42:2b:9c:78:d4:e2:18:02:ac:e1:68:51:5b:
c6:76:53:b0:7f:b5:71:57:91:4c:e5:27:6b:0e:c1:
4b:5e:c6:d8:1a:d5:60:af:70:a5:d7:62:fa:aa:c1:
98:6a:c8:7f:59:ba:3b:32:f3:11:fe:a4:46:f7:fa:
9e:a0:df:99:6c:23:28:ee:53:9d:b8:49:cb:27:77:
13:d0:f2:43:ca:85:23:01:a4:f2:d1:ba:02:7e:6b:
50:78:32:ab:15:e3:75:dd:d9:dd:6f:3b:53:77:a0:
d3:c5:54:34:f9:04:6b:ed:e7:89:44:46:fa:3c:66:
6a:73:e3:4f:f4:26:41:dc:92:99:ca:e8:89:9d:a7:
6d:9d:62:49:18:42:11:56:5a:25:c3:16:ed:db:b1:
78:94:ae:5e:6e:53:91:73:b9:22:f8:42:c1:4e:29:
0c:3d:af:79:09:62:8b:88:87:f1:af:c4:6a:fc:98:
7e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3B:E0:6F:41:B5:73:27:E8:43:98:4E:4D:D4:F4:8C:62:3B:6B:8F
X509v3 Authority Key Identifier:
keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ee:55:c7:1f:cf:19:85:12:18:ac:4e:2d:bb:d1:f7:16:1a:
a6:62:91:db:8f:6a:0e:49:f4:44:18:4a:f6:ac:21:6e:b2:ea:
db:36:77:62:a0:83:21:03:92:bd:e5:e9:93:bd:f8:b2:89:66:
43:36:72:d0:06:52:bd:41:c3:45:dc:02:3a:6c:d2:1c:a9:c9:
5a:8e:a9:c1:4a:88:49:a8:f9:f7:bd:50:a9:77:17:f1:95:52:
92:4a:a2:6f:4a:81:67:1c:93:70:1e:15:fc:69:12:44:89:03:
6e:b5:cd:c5:3d:32:ac:44:2a:11:93:8a:f8:00:7e:51:3f:4e:
93:a5:7f:51:94:08:8c:93:34:88:c5:ce:47:43:a8:9f:68:0a:
4b:3d:4f:c5:2a:b8:dc:71:f4:90:34:92:0c:83:82:8c:00:48:
e3:2e:62:e1:9f:c0:b8:0d:a4:c0:ef:6e:ff:d9:69:dd:63:fe:
1d:6d:28:9d:32:e3:35:28:09:a2:99:23:b0:dd:97:9f:32:ba:
08:dc:8f:55:49:eb:64:fc:da:0e:70:a4:c3:7e:e4:74:3c:d8:
35:f0:10:e9:25:33:20:6e:d5:cd:bf:12:7c:28:e3:0a:79:9e:
4b:40:81:1a:93:db:20:36:fe:7a:61:4a:f2:84:f3:f8:67:25:
37:09:20:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:23:25 2026 by rpki-client