Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
File: LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json)
Hash identifier: vMKIq/B1YDWOcQIpLrhIKHl2fchwqVoXz7CsJ2WRewk=
Subject key identifier: A8:B1:5B:FF:1D:0C:F9:16:DF:DC:27:DE:C9:CC:6C:08:18:69:F5:11
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Certificate issuer: /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial: 019D27727CB14D97CFAEA09CB35B6522C8FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
Manifest number: 0A85
Signing time: Thu 26 Mar 2026 00:01:47 +0000
Manifest this update: Thu 26 Mar 2026 00:01:47 +0000
Manifest next update: Fri 27 Mar 2026 00:01:47 +0000
Files and hashes: 1: CVFC2AZT4zU7rxI78osYUeetX2c.roa (hash: ISGwaf6fRTl6b38lrffHUitVBZ3yWrYSjAcvo0Gl7Qs=)
2: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: EZJYclTKV2vbJ2TpcwMyjCGynwqiHSG8IOmomaH/ZTs=)
3: PHM1V2LiLUnh_dtpW6HSuR0CqtM.roa (hash: WaAP7/tUSsIc2V6rPX2u2qrSpkI6CsWvnNzs+Vmc/68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:7c:b1:4d:97:cf:ae:a0:9c:b3:5b:65:22:c8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Validity
Not Before: Mar 26 00:01:47 2026 GMT
Not After : Mar 27 00:01:47 2026 GMT
Subject: CN=a8b15bff1d0cf916dfdc27dec9cc6c081869f511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:29:ff:48:96:f0:6d:ab:3d:e7:a8:d6:85:f5:
e5:af:4a:04:8e:68:ee:d1:ca:02:7f:c6:2f:41:40:
99:5e:9d:2b:35:56:02:e3:67:13:02:e9:59:2f:be:
07:18:e0:de:05:93:ae:86:5c:b9:27:a5:7c:e6:68:
99:b8:93:1c:7f:66:47:b5:32:c6:87:58:22:07:cf:
7a:85:a2:ec:38:82:da:cf:38:7a:9d:d4:7a:be:43:
e7:d1:b0:96:11:c9:9d:e6:8b:2e:30:ef:39:cf:a8:
a6:b6:2d:c1:f0:69:c6:e9:c0:75:6b:de:7e:f5:dd:
d4:b5:c0:a3:2e:93:13:85:69:02:24:79:14:11:1e:
d1:52:0e:c4:e1:12:3a:cc:9c:87:e3:d3:c5:ef:63:
75:0c:e8:d6:5c:88:cf:5a:49:22:50:f5:7d:83:0b:
13:08:28:e5:fc:a3:06:5d:9e:b1:0a:91:d9:cc:fe:
59:db:51:ea:b6:5c:19:1a:71:99:72:9a:2c:0f:b4:
11:5d:1c:b7:60:a2:a2:81:d5:95:88:aa:15:41:2f:
0c:af:c6:91:b9:b4:8a:17:fb:1d:8c:f6:82:e0:ed:
a8:1a:23:9b:61:ed:42:26:e1:2f:9f:57:62:1d:c1:
57:86:10:32:df:61:f2:d1:b5:67:51:bd:4f:70:59:
1d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B1:5B:FF:1D:0C:F9:16:DF:DC:27:DE:C9:CC:6C:08:18:69:F5:11
X509v3 Authority Key Identifier:
keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:32:9d:d0:bd:38:14:b2:79:e7:e5:4f:23:b3:1c:20:6e:4c:
11:d3:72:4f:c8:4d:e0:82:a4:3c:bc:5d:8b:18:55:df:ba:a1:
21:6a:92:e5:e2:5f:ad:5b:14:71:62:8f:f0:68:76:33:49:12:
1b:f3:bc:d0:19:10:1f:c3:80:a9:ae:58:6a:bb:a7:6e:2b:4e:
4c:69:ed:88:73:45:55:f9:38:6a:aa:bb:07:4e:8a:9b:27:b0:
86:3e:f3:77:7b:d8:e9:9e:52:0d:d8:1d:17:7e:dd:01:1e:06:
0f:20:20:f0:c3:5f:35:64:e7:7e:14:1f:55:f6:da:9c:2a:88:
40:0c:f6:36:07:62:41:07:ee:cf:3c:48:c2:d9:92:1d:53:64:
10:57:b8:50:5a:13:c1:5a:28:ff:67:15:04:a8:ec:de:f0:87:
fc:8e:e1:cc:36:4c:c3:6f:8c:45:9b:82:44:fb:60:62:fa:a4:
4a:5d:42:4c:37:73:41:94:9a:c9:a3:16:05:e6:4f:86:ec:95:
95:0a:0d:c8:d0:ca:d3:5e:91:d4:4e:8d:ca:b2:3c:e8:69:fa:
af:64:51:39:36:dd:52:f0:46:1c:a4:e4:be:ea:b5:e5:bd:a4:
7a:0b:a3:fa:1d:a7:b1:4e:55:fc:73:ee:a5:27:02:8e:63:a0:
a3:36:3a:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncnyxTZfPrqCcs1tlIsj9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMmIyNmM1NTI1NjMwMDYyMTNjZmU0ODE0YTlkYzJhMGZj
MTZmNDMwHhcNMjYwMzI2MDAwMTQ3WhcNMjYwMzI3MDAwMTQ3WjAzMTEwLwYDVQQD
EyhhOGIxNWJmZjFkMGNmOTE2ZGZkYzI3ZGVjOWNjNmMwODE4NjlmNTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Cn/SJbwbas956jWhfXlr0oEjmju
0coCf8YvQUCZXp0rNVYC42cTAulZL74HGODeBZOuhly5J6V85miZuJMcf2ZHtTLG
h1giB896haLsOILazzh6ndR6vkPn0bCWEcmd5osuMO85z6imti3B8GnG6cB1a95+
9d3UtcCjLpMThWkCJHkUER7RUg7E4RI6zJyH49PF72N1DOjWXIjPWkkiUPV9gwsT
CCjl/KMGXZ6xCpHZzP5Z21HqtlwZGnGZcposD7QRXRy3YKKigdWViKoVQS8Mr8aR
ubSKF/sdjPaC4O2oGiObYe1CJuEvn1diHcFXhhAy32Hy0bVnUb1PcFkd3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKixW/8dDPkW39wn3snMbAgYafURMB8GA1UdIwQY
MBaAFC8rJsVSVjAGITz+SBSp3CoPwW9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80Y2MxMTUtYWY2NS00OTEzLTlkNjkt
MWMzNWI4MzkzNzliLzEvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80Y2MxMTUtYWY2NS00OTEzLTlkNjktMWMzNWI4MzkzNzli
LzEvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjKd0L04
FLJ55+VPI7McIG5MEdNyT8hN4IKkPLxdixhV37qhIWqS5eJfrVsUcWKP8Gh2M0kS
G/O80BkQH8OAqa5YarunbitOTGntiHNFVfk4aqq7B06Kmyewhj7zd3vY6Z5SDdgd
F37dAR4GDyAg8MNfNWTnfhQfVfbanCqIQAz2NgdiQQfuzzxIwtmSHVNkEFe4UFoT
wVoo/2cVBKjs3vCH/I7hzDZMw2+MRZuCRPtgYvqkSl1CTDdzQZSayaMWBeZPhuyV
lQoNyNDK016R1E6NyrI86Gn6r2RROTbdUvBGHKTkvuq15b2keguj+h2nsU5V/HPu
pScCjmOgozY6Nw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:22 2026 by rpki-client