Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
File: LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json)
Hash identifier: fFrZtuZnC1zhSynHgXSyCXa9+4qneTJ0ymVCtq795EI=
Subject key identifier: 2F:33:8B:7F:AB:B3:0F:D7:B3:39:A1:58:33:3E:8F:13:62:AB:32:65
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Certificate issuer: /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial: 019D25844ED8A7614FC5A7843E8D20C63D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
Manifest number: 0A84
Signing time: Wed 25 Mar 2026 15:02:01 +0000
Manifest this update: Wed 25 Mar 2026 15:02:01 +0000
Manifest next update: Thu 26 Mar 2026 15:02:01 +0000
Files and hashes: 1: CVFC2AZT4zU7rxI78osYUeetX2c.roa (hash: ISGwaf6fRTl6b38lrffHUitVBZ3yWrYSjAcvo0Gl7Qs=)
2: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: SqYlQA4f3jqFSGX7okXmZvbnij4t1YfG5JeJswp7PbU=)
3: PHM1V2LiLUnh_dtpW6HSuR0CqtM.roa (hash: WaAP7/tUSsIc2V6rPX2u2qrSpkI6CsWvnNzs+Vmc/68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:4e:d8:a7:61:4f:c5:a7:84:3e:8d:20:c6:3d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Validity
Not Before: Mar 25 15:02:01 2026 GMT
Not After : Mar 26 15:02:01 2026 GMT
Subject: CN=2f338b7fabb30fd7b339a158333e8f1362ab3265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ef:ea:33:51:7a:6b:01:b0:d8:62:fd:d7:62:
e6:3b:84:ed:fb:79:71:3e:67:ca:c6:07:d4:3b:29:
4c:51:4d:65:4c:9b:d1:06:20:42:cd:c2:83:6b:e7:
cf:3b:cd:a8:40:7e:e5:57:18:60:ee:5e:3c:1d:61:
61:78:9e:72:99:6d:4f:79:48:26:33:59:d9:a7:96:
2c:b0:ca:9e:0c:fa:4f:5c:c0:72:98:40:cf:50:da:
60:40:ab:b3:6e:99:1c:25:ae:17:bf:53:32:40:91:
7c:19:c2:0e:5e:19:28:c8:b7:94:32:02:15:2e:2b:
d4:a0:9f:be:3e:f1:e2:ef:98:df:1b:48:5e:13:2f:
29:83:9a:b3:03:52:c4:34:c3:cf:d7:3c:eb:bf:fb:
23:94:40:08:d9:bf:c6:bd:9d:20:16:0d:18:19:48:
3c:7a:49:e6:a2:0b:04:34:e5:fc:ce:83:df:41:68:
90:fa:d6:a8:33:e2:9e:1a:d5:f5:4a:d9:a4:40:95:
ed:b9:7c:b5:78:8f:bc:23:41:22:42:94:4e:5e:67:
2d:bc:2a:ef:58:35:58:b2:f3:df:8d:5d:d6:48:3b:
40:50:3d:0e:53:1b:ef:19:4e:32:1a:49:fe:b1:dd:
c0:36:07:6c:ce:68:61:26:29:68:5c:e4:92:6f:a9:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:33:8B:7F:AB:B3:0F:D7:B3:39:A1:58:33:3E:8F:13:62:AB:32:65
X509v3 Authority Key Identifier:
keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:82:bb:e4:17:42:95:18:25:eb:72:84:23:46:dd:a5:d8:32:
8d:f9:c2:29:59:7b:c0:44:42:ad:9b:a8:cc:6c:62:0f:da:a3:
82:81:8e:24:2d:46:4f:e9:2a:09:e2:43:b5:19:c6:32:2f:5c:
d4:ee:99:99:b2:72:6b:3d:16:08:1c:20:06:0d:a5:9f:ce:fd:
e2:37:05:8c:eb:fa:91:39:c4:e0:9d:f4:3e:be:82:bd:a1:80:
ca:99:36:9e:aa:cc:52:46:64:03:33:41:66:94:42:b3:d5:00:
d3:5c:0c:eb:d1:be:4c:18:cb:c3:8b:8c:9e:27:38:58:6e:c9:
97:2f:41:5b:8c:08:4e:df:45:7a:9c:a6:f7:cd:42:97:03:c4:
2a:e4:71:b4:a1:11:27:1a:5f:49:bf:88:03:f8:28:d5:6b:34:
99:7d:9c:d5:2c:d3:f0:b6:fe:18:ee:ab:1d:49:9a:a2:65:07:
a3:de:92:37:8d:e3:bc:a8:d4:3a:5c:52:18:d8:b5:38:1f:b1:
46:57:59:9c:b9:df:16:80:6c:62:97:ac:31:db:20:d5:43:89:
9e:81:f2:61:6c:e9:4a:08:b0:02:37:a8:8c:ea:70:e0:bb:33:
ac:6e:10:4b:cd:1d:32:6d:c8:4c:a5:1f:ac:a3:ac:89:de:56:
e9:e7:47:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:45 2026 by rpki-client