Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
File: LYFCGstXhBVGXs3sRYHoleu_vH8.mft (raw, json)
Hash identifier: eyTM1slaCyG7YLZd1x0Wgq+98gqAXwlTbnyK5FpGFeU=
Subject key identifier: 28:A2:98:F6:20:91:FE:86:1C:CC:09:83:60:4A:28:C2:18:F9:7D:DE
Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
Certificate issuer: /CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Certificate serial: 01A0CD47A8331782A08CF44E28C98D7DF78A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
Manifest number: 04C8
Signing time: Wed 23 Sep 2026 08:00:20 +0000
Manifest this update: Wed 23 Sep 2026 08:00:20 +0000
Manifest next update: Thu 24 Sep 2026 08:00:20 +0000
Files and hashes: 1: LYFCGstXhBVGXs3sRYHoleu_vH8.crl (hash: qZDPyk2P4+jdIKqDbsSCOoEbIZHOcp9b14Iw/c9yklk=)
2: RML1TmbAZYHpyU26wWj03FjR3yY.roa (hash: PPBAB3g4x0UYNx5LUtlXQ+fhrj8l5E6PaVsjyetSSNY=)
3: v-yW23PUKxeOnQqPJF0a9ieiqkY.roa (hash: QA7GggYLqUF36MqITz5Sp/J8Iu+lSl6lGyrVjXlucb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:a8:33:17:82:a0:8c:f4:4e:28:c9:8d:7d:f7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Validity
Not Before: Sep 23 08:00:20 2026 GMT
Not After : Sep 24 08:00:20 2026 GMT
Subject: CN=28a298f62091fe861ccc0983604a28c218f97dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6b:22:0c:1c:bd:4b:52:58:ee:f1:ec:85:41:
eb:20:49:2d:c3:f1:1f:10:27:f1:36:61:32:e1:dd:
a5:76:5c:03:11:d7:17:e1:63:1d:6d:67:84:56:fb:
b8:75:c8:c2:8c:4b:b0:2f:e0:76:fc:d4:08:7d:23:
e5:58:56:bd:6b:a1:25:cf:c7:69:52:e5:89:d9:74:
34:24:2e:e4:75:5a:99:ba:b8:3c:5e:a1:8d:8b:9e:
e7:68:1b:25:62:d5:05:7c:a7:ba:3a:c3:25:82:88:
81:b3:f2:6b:2b:75:e8:6f:7a:4a:1e:15:b6:d9:6f:
dd:c5:c1:23:65:89:19:a2:bf:90:50:2d:a5:1f:c3:
8e:55:cd:7f:1e:a7:bd:48:33:c0:26:8d:57:0c:42:
86:3c:21:6c:c3:75:e6:f3:28:b2:df:7c:89:48:54:
51:c9:70:c4:f9:04:d6:56:1d:16:61:36:48:16:98:
91:0d:80:91:f2:22:cb:a8:26:38:a0:70:0c:4d:94:
8b:9f:f5:39:ff:3b:57:60:55:a0:25:9c:ee:9b:d9:
f4:42:95:26:31:fa:1a:2e:82:4b:02:b7:e4:88:d8:
04:6f:f1:fe:d8:92:8c:dd:20:22:59:c9:3a:5d:cf:
37:10:9c:ab:28:e3:f0:4b:79:10:6b:da:c8:35:ce:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A2:98:F6:20:91:FE:86:1C:CC:09:83:60:4A:28:C2:18:F9:7D:DE
X509v3 Authority Key Identifier:
keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cd:a3:44:7a:b2:9d:48:cb:c4:f5:10:1e:51:b6:52:75:11:
a0:eb:b9:10:f0:c2:36:56:78:0b:fa:d8:69:41:4b:71:e2:d8:
af:c1:b1:29:aa:55:84:04:cd:cc:d3:f4:77:37:4e:1a:28:8c:
9b:7e:d5:9a:60:6a:2d:3b:6e:ba:c7:e1:7e:e4:05:5f:db:5c:
88:15:3f:72:80:b4:e0:cd:d2:1f:f9:60:d5:ea:e2:a5:7f:45:
6b:7c:ef:fd:cf:1c:7a:9c:2d:60:ce:7c:a7:4c:bf:78:a7:75:
60:c5:47:8f:d7:37:2e:4c:1f:1e:e2:46:82:82:ce:48:51:36:
6f:74:cb:45:0d:2f:f0:ca:58:2e:41:60:c5:45:a6:88:03:78:
2c:a3:2c:2c:72:08:90:2e:b9:f3:40:4a:2b:90:51:b2:74:15:
3e:46:7f:6f:5c:d4:51:93:01:c8:c1:c4:9d:20:a5:67:86:1b:
1e:df:80:f4:59:ea:aa:2c:0e:9c:87:f7:b5:ff:da:d1:13:60:
ca:30:78:7a:74:18:d2:27:bd:9a:06:7a:cc:3c:0b:9e:26:0d:
65:21:b7:6c:55:de:5d:cb:95:a8:72:b4:40:b6:ce:48:c0:5b:
20:43:f3:a6:21:34:26:67:8b:84:12:2b:16:48:18:1d:b3:0b:
c9:8d:19:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:03:44 2026 by rpki-client