Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
File: LYFCGstXhBVGXs3sRYHoleu_vH8.mft (raw, json)
Hash identifier: 9r862zEmCdigBOyWOHf2vphWU+/WPRXDAC8Flj2GHh4=
Subject key identifier: 1F:40:49:2E:D0:87:44:43:7C:18:14:BF:90:1E:01:07:13:80:6F:F6
Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
Certificate issuer: /CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Certificate serial: 019D322C6A6FB9FACE2BFA3A9028E037D8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
Manifest number: 02EA
Signing time: Sat 28 Mar 2026 02:01:04 +0000
Manifest this update: Sat 28 Mar 2026 02:01:04 +0000
Manifest next update: Sun 29 Mar 2026 02:01:04 +0000
Files and hashes: 1: LYFCGstXhBVGXs3sRYHoleu_vH8.crl (hash: A2SFBFD+EylTOn1By58o7i18OFPpaAS+S0F55jMD76w=)
2: RML1TmbAZYHpyU26wWj03FjR3yY.roa (hash: PPBAB3g4x0UYNx5LUtlXQ+fhrj8l5E6PaVsjyetSSNY=)
3: v-yW23PUKxeOnQqPJF0a9ieiqkY.roa (hash: QA7GggYLqUF36MqITz5Sp/J8Iu+lSl6lGyrVjXlucb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:6a:6f:b9:fa:ce:2b:fa:3a:90:28:e0:37:d8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Validity
Not Before: Mar 28 02:01:04 2026 GMT
Not After : Mar 29 02:01:04 2026 GMT
Subject: CN=1f40492ed08744437c1814bf901e010713806ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:81:a1:fe:33:7f:2e:a9:7a:ba:71:cf:49:d9:
35:80:56:3a:25:60:1e:75:c1:79:77:14:9a:4f:0f:
5c:87:7a:1c:23:4d:f0:c7:fd:fe:f2:4b:85:55:03:
aa:f6:a0:9a:16:0a:cd:21:fe:ad:7a:a0:58:90:1c:
5b:c7:ef:94:e6:70:02:5a:e9:d7:ce:a7:c7:90:12:
8d:09:dd:0f:fb:5a:e7:bf:76:ec:fe:b2:1c:2e:31:
00:b9:d2:29:7d:dc:b2:0e:54:0a:62:c1:5c:cd:77:
26:ce:c1:39:b9:4c:4e:0c:18:44:89:8f:ab:f4:9f:
fa:ae:e3:f8:53:0b:67:6b:a2:d6:99:68:32:56:b5:
04:6e:a1:35:42:b4:83:c5:10:b7:52:66:56:08:22:
1e:cb:0b:c5:bc:ab:17:33:9c:d6:08:2a:24:7b:f2:
13:07:85:92:5c:2e:32:b1:52:45:4c:45:a0:dd:15:
95:02:ee:97:3f:17:60:dc:ef:61:60:a1:81:76:b1:
6b:01:de:87:ba:e4:e0:d7:19:40:26:2f:a0:e0:6b:
18:86:c1:49:02:12:80:25:91:ab:6f:23:80:ed:a3:
f6:b5:a0:72:28:54:66:ae:e1:b3:4d:7f:1f:1f:81:
10:8e:34:fe:12:8c:16:65:7e:32:fa:f5:75:65:80:
c0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:40:49:2E:D0:87:44:43:7C:18:14:BF:90:1E:01:07:13:80:6F:F6
X509v3 Authority Key Identifier:
keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3e:cd:34:33:4f:f9:2b:19:8a:f9:55:31:91:a6:34:5c:62:
77:4d:15:79:68:9a:5d:7c:86:cc:6c:e9:9e:98:a0:72:df:8c:
d3:9f:d6:48:32:e5:dc:95:9e:80:e4:0c:41:75:e7:13:7b:77:
9c:aa:d9:d9:89:57:0c:93:b0:98:17:15:d1:1e:0b:ae:8c:0d:
26:70:ab:b4:28:0c:9c:a0:24:4d:98:34:3f:03:ed:db:42:1d:
d2:eb:8d:cb:23:52:36:3e:28:ed:01:4b:c3:4c:b9:60:ca:3f:
4b:ab:5a:b0:a3:5c:1d:93:34:9c:67:6d:5b:7b:b4:21:b1:2f:
33:a6:71:30:3e:2a:25:49:2b:ef:80:72:13:cb:be:22:44:06:
25:79:38:02:cd:e1:1a:a4:43:28:73:6d:25:c2:92:9c:a0:f5:
f4:18:7c:26:98:09:43:61:ce:12:a6:f0:07:e6:0f:e1:99:ac:
67:07:64:55:29:ef:b4:78:38:80:75:53:20:fd:03:46:38:5c:
b8:74:a1:59:48:32:01:e7:ea:55:17:e5:fb:3a:e0:2e:ab:42:
0a:f7:27:b9:bc:ba:0e:3c:00:00:2e:eb:36:10:e8:d7:ef:b2:
12:46:d9:a9:4e:4f:54:91:ac:90:34:e1:64:d0:66:72:9e:fe:
7f:ec:79:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:27:57 2026 by rpki-client