Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
File: LYFCGstXhBVGXs3sRYHoleu_vH8.mft (raw, json)
Hash identifier: Owvp4DycC+vtHF+sGrh/QQ/aXwq28lPpjOSOuaRsrKM=
Subject key identifier: 3B:F5:8C:24:1A:70:92:70:4F:53:99:88:30:86:7D:1C:CA:95:A9:16
Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
Certificate issuer: /CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Certificate serial: 019E1DC77C3C3748BCD41DDDB425E48A5ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
Manifest number: 0364
Signing time: Tue 12 May 2026 20:01:13 +0000
Manifest this update: Tue 12 May 2026 20:01:13 +0000
Manifest next update: Wed 13 May 2026 20:01:13 +0000
Files and hashes: 1: LYFCGstXhBVGXs3sRYHoleu_vH8.crl (hash: vZD3PufBs6Oe67afX8SThP69LabA2y1J4lfT7j7Txb8=)
2: RML1TmbAZYHpyU26wWj03FjR3yY.roa (hash: PPBAB3g4x0UYNx5LUtlXQ+fhrj8l5E6PaVsjyetSSNY=)
3: v-yW23PUKxeOnQqPJF0a9ieiqkY.roa (hash: QA7GggYLqUF36MqITz5Sp/J8Iu+lSl6lGyrVjXlucb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:7c:3c:37:48:bc:d4:1d:dd:b4:25:e4:8a:5a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Validity
Not Before: May 12 20:01:13 2026 GMT
Not After : May 13 20:01:13 2026 GMT
Subject: CN=3bf58c241a7092704f53998830867d1cca95a916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:44:4d:69:be:f8:5e:28:5c:71:5d:86:78:08:
b4:22:b1:b5:03:15:63:b4:1f:cc:21:22:e9:9f:21:
fc:ff:2f:06:c0:6d:fe:21:38:47:eb:56:2c:9e:73:
0d:53:5b:8f:82:b1:75:7f:8c:38:ce:f0:6e:d0:b3:
7f:6a:1e:0e:60:67:cc:b5:eb:94:88:90:c1:cd:6e:
52:b9:ea:49:da:1e:f1:28:cf:b4:ae:49:94:05:b7:
5b:aa:98:71:9d:5c:87:5a:8d:36:06:8a:5f:dc:93:
08:a6:9b:dd:f8:3c:34:4f:23:49:57:33:e7:43:9a:
89:47:62:66:d2:e8:97:36:e6:ae:43:4a:21:6b:2d:
34:0b:f5:96:98:3f:7b:e7:32:fb:66:22:d7:b0:cf:
fc:fd:ed:53:61:84:ba:64:3c:dd:5d:8a:9d:8b:bb:
bf:1b:07:ca:59:46:a6:fb:80:e9:00:18:76:5f:cb:
8e:fe:24:f7:1a:9c:11:56:11:79:23:0b:a7:8d:8c:
32:5c:1e:ba:fa:5a:40:4c:cc:4e:fd:d8:6f:4f:76:
04:a2:a5:b9:7a:09:af:0b:6d:67:d5:04:c9:33:99:
9e:78:a3:14:9b:5c:70:4b:b4:a8:81:01:d0:9b:07:
d9:59:fb:c5:15:11:7c:01:40:9a:b7:da:b3:99:ff:
c8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F5:8C:24:1A:70:92:70:4F:53:99:88:30:86:7D:1C:CA:95:A9:16
X509v3 Authority Key Identifier:
keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:73:ff:bc:05:a4:f7:09:5f:a0:18:dd:81:c4:b1:91:37:f5:
c0:7d:06:f2:af:3b:c5:c3:ec:7e:eb:39:9f:6e:de:18:ea:e8:
65:e6:e0:f5:2f:d1:2f:52:87:ed:f8:aa:ba:83:76:ae:3c:b7:
e2:40:e9:99:65:ad:41:27:71:cb:cb:22:39:86:fe:25:42:ff:
c6:ce:49:cf:be:51:83:85:99:93:6a:9e:93:a6:28:83:99:97:
c6:f8:9d:d4:30:fc:fe:df:4c:26:14:50:97:87:ba:dd:47:fa:
73:61:7d:fb:eb:b2:7f:3f:35:9a:43:8f:41:40:90:f9:84:f7:
a4:15:52:fa:ab:8a:50:b0:ca:f5:53:39:ce:c1:b5:c1:aa:e1:
36:04:29:34:39:ab:8f:e4:3a:3e:f4:69:ca:6c:be:4e:39:2a:
6e:fb:c8:8f:db:d9:0e:44:e3:72:79:7c:99:12:c8:1e:3d:b9:
de:0f:ff:55:dd:87:f8:19:e2:48:9b:e9:1b:f2:c9:a9:a5:57:
62:4d:2d:c1:85:bd:71:6c:3a:3f:b6:2c:94:0b:d4:c7:ac:0f:
3b:71:eb:3f:16:ef:c5:7a:1f:3f:9d:12:07:56:b1:d5:b7:17:
db:89:94:ae:70:2f:96:d3:49:5f:64:50:ee:2f:52:96:7d:20:
10:e6:59:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx3w8N0i81B3dtCXkilrMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkODE0MjFhY2I1Nzg0MTU0NjVlY2RlYzQ1ODFlODk1ZWJi
ZmJjN2YwHhcNMjYwNTEyMjAwMTEzWhcNMjYwNTEzMjAwMTEzWjAzMTEwLwYDVQQD
EygzYmY1OGMyNDFhNzA5MjcwNGY1Mzk5ODgzMDg2N2QxY2NhOTVhOTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkRNab74XihccV2GeAi0IrG1AxVj
tB/MISLpnyH8/y8GwG3+IThH61YsnnMNU1uPgrF1f4w4zvBu0LN/ah4OYGfMteuU
iJDBzW5SuepJ2h7xKM+0rkmUBbdbqphxnVyHWo02Bopf3JMIppvd+Dw0TyNJVzPn
Q5qJR2Jm0uiXNuauQ0ohay00C/WWmD975zL7ZiLXsM/8/e1TYYS6ZDzdXYqdi7u/
GwfKWUam+4DpABh2X8uO/iT3GpwRVhF5IwunjYwyXB66+lpATMxO/dhvT3YEoqW5
egmvC21n1QTJM5meeKMUm1xwS7SogQHQmwfZWfvFFRF8AUCat9qzmf/I+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDv1jCQacJJwT1OZiDCGfRzKlakWMB8GA1UdIwQY
MBaAFC2BQhrLV4QVRl7N7EWB6JXrv7x/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zYjFkNWEtZmNjNi00YWUzLWEyYzgt
OTg0ZWVjM2Y3YTNlLzEvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zYjFkNWEtZmNjNi00YWUzLWEyYzgtOTg0ZWVjM2Y3YTNl
LzEvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3P/vAWk
9wlfoBjdgcSxkTf1wH0G8q87xcPsfus5n27eGOroZebg9S/RL1KH7fiquoN2rjy3
4kDpmWWtQSdxy8siOYb+JUL/xs5Jz75Rg4WZk2qek6Yog5mXxvid1DD8/t9MJhRQ
l4e63Uf6c2F9++uyfz81mkOPQUCQ+YT3pBVS+quKULDK9VM5zsG1warhNgQpNDmr
j+Q6PvRpymy+TjkqbvvIj9vZDkTjcnl8mRLIHj253g//Vd2H+BniSJvpG/LJqaVX
Yk0twYW9cWw6P7YslAvUx6wPO3HrPxbvxXofP50SB1ax1bcX24mUrnAvltNJX2RQ
7i9Sln0gEOZZNg==
-----END CERTIFICATE-----
Generated at Wed May 13 00:50:03 2026 by rpki-client