Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
File: LYFCGstXhBVGXs3sRYHoleu_vH8.mft (raw, json)
Hash identifier: tDrleUzOMidYu6sKVA//QlA18bhohcGOtSb9a0s987M=
Subject key identifier: 83:50:C4:9F:24:5C:C7:21:4A:F8:8F:67:88:5F:77:6B:0B:A1:F9:2B
Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
Certificate issuer: /CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Certificate serial: 019F8EA21CA39E33FBE1EA41E73E492A7CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
Manifest number: 0423
Signing time: Thu 23 Jul 2026 11:00:16 +0000
Manifest this update: Thu 23 Jul 2026 11:00:16 +0000
Manifest next update: Fri 24 Jul 2026 11:00:16 +0000
Files and hashes: 1: LYFCGstXhBVGXs3sRYHoleu_vH8.crl (hash: 9zyL4w9qJeawulDFU56WSY3EJ0tS5Fl4X6tIrTU3CMw=)
2: RML1TmbAZYHpyU26wWj03FjR3yY.roa (hash: PPBAB3g4x0UYNx5LUtlXQ+fhrj8l5E6PaVsjyetSSNY=)
3: v-yW23PUKxeOnQqPJF0a9ieiqkY.roa (hash: QA7GggYLqUF36MqITz5Sp/J8Iu+lSl6lGyrVjXlucb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:1c:a3:9e:33:fb:e1:ea:41:e7:3e:49:2a:7c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Validity
Not Before: Jul 23 11:00:16 2026 GMT
Not After : Jul 24 11:00:16 2026 GMT
Subject: CN=8350c49f245cc7214af88f67885f776b0ba1f92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:98:47:2d:f0:56:79:42:41:a7:0e:d8:fb:
90:f1:f2:76:e0:0a:51:53:35:96:ac:35:f0:0b:64:
2b:28:96:0e:82:4a:5f:bf:f3:5f:a8:b7:14:ce:fe:
f3:87:8c:70:d8:89:10:8a:0d:c9:06:c7:f3:42:c1:
50:4b:c5:bc:26:c6:b7:39:e1:5c:cc:10:02:47:85:
43:ff:1c:47:c2:9f:a7:ec:c4:d9:4f:88:ec:d1:40:
8d:0a:e8:34:ec:ed:7e:a9:0f:a4:0b:94:fd:c4:39:
5c:46:e0:d8:3b:4f:92:43:cd:f2:29:8b:0a:38:f7:
64:c9:cc:4e:09:1d:d3:9b:38:4c:7e:5a:5a:3b:71:
fc:9f:a0:c5:9c:84:21:25:fc:71:b8:f9:16:c2:67:
fe:8f:2c:70:f4:df:70:bb:61:ba:01:7d:28:ca:1c:
2e:cc:f0:7a:f8:26:7d:cd:a5:e1:12:11:37:dc:ed:
4b:4b:8e:41:86:7d:cd:30:89:7d:95:dd:57:9d:cb:
0a:ee:22:03:4d:14:a3:c5:73:47:1d:f6:a3:0b:98:
71:3d:bf:c9:13:12:07:17:22:35:03:67:9e:1e:2e:
aa:a3:0e:0b:b3:15:4b:8e:3f:77:da:b6:f7:75:bd:
8e:14:73:18:9c:39:0c:54:c1:e7:1b:15:34:2c:df:
53:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:50:C4:9F:24:5C:C7:21:4A:F8:8F:67:88:5F:77:6B:0B:A1:F9:2B
X509v3 Authority Key Identifier:
keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a3:fd:7a:64:b7:b9:08:96:83:60:88:31:1b:a8:0d:14:df:
4b:66:6d:7c:df:ea:99:25:19:47:83:6d:46:bd:c6:18:3c:7b:
39:0e:c2:5c:56:98:bb:1d:b8:a8:4a:b8:4b:b1:9c:37:43:e0:
35:0b:11:b0:dc:47:fa:79:8e:34:0f:fb:69:21:a5:d8:7f:5f:
39:2b:dc:28:35:89:ac:2f:b6:3a:ad:c6:f8:2d:29:b7:f9:12:
b3:90:7c:d8:18:37:e0:29:13:2b:af:59:54:72:d9:7e:8a:6f:
1f:a0:ac:d7:ff:d6:30:71:08:31:67:8a:90:3f:7f:c5:cb:23:
69:7b:4a:ba:51:31:b5:37:18:7b:26:b8:2b:00:a8:b9:fb:fc:
8a:2e:02:2f:21:08:26:38:4f:77:41:3c:ee:98:4f:e6:c4:ff:
f7:b3:70:d7:ff:6b:ba:3c:a6:5f:d3:69:34:e4:66:6e:bd:93:
0d:c6:0e:24:9c:6f:e2:b6:c6:a4:3e:b4:90:28:e8:47:45:eb:
f0:d5:ec:c9:2d:79:fd:c2:68:50:8c:c1:c3:2b:80:30:03:ea:
af:31:e1:94:da:3a:d2:cb:fa:03:21:5d:90:25:68:0a:32:05:
3f:a8:d5:f6:ae:92:a6:60:8b:23:88:b8:1c:4a:aa:36:29:9c:
a7:dd:9e:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OohyjnjP74epB5z5JKnzQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkODE0MjFhY2I1Nzg0MTU0NjVlY2RlYzQ1ODFlODk1ZWJi
ZmJjN2YwHhcNMjYwNzIzMTEwMDE2WhcNMjYwNzI0MTEwMDE2WjAzMTEwLwYDVQQD
Eyg4MzUwYzQ5ZjI0NWNjNzIxNGFmODhmNjc4ODVmNzc2YjBiYTFmOTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlGYRy3wVnlCQacO2PuQ8fJ24ApR
UzWWrDXwC2QrKJYOgkpfv/NfqLcUzv7zh4xw2IkQig3JBsfzQsFQS8W8Jsa3OeFc
zBACR4VD/xxHwp+n7MTZT4js0UCNCug07O1+qQ+kC5T9xDlcRuDYO0+SQ83yKYsK
OPdkycxOCR3TmzhMflpaO3H8n6DFnIQhJfxxuPkWwmf+jyxw9N9wu2G6AX0oyhwu
zPB6+CZ9zaXhEhE33O1LS45Bhn3NMIl9ld1XncsK7iIDTRSjxXNHHfajC5hxPb/J
ExIHFyI1A2eeHi6qow4LsxVLjj932rb3db2OFHMYnDkMVMHnGxU0LN9TjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINQxJ8kXMchSviPZ4hfd2sLofkrMB8GA1UdIwQY
MBaAFC2BQhrLV4QVRl7N7EWB6JXrv7x/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zYjFkNWEtZmNjNi00YWUzLWEyYzgt
OTg0ZWVjM2Y3YTNlLzEvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zYjFkNWEtZmNjNi00YWUzLWEyYzgtOTg0ZWVjM2Y3YTNl
LzEvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6P9emS3
uQiWg2CIMRuoDRTfS2ZtfN/qmSUZR4NtRr3GGDx7OQ7CXFaYux24qEq4S7GcN0Pg
NQsRsNxH+nmONA/7aSGl2H9fOSvcKDWJrC+2Oq3G+C0pt/kSs5B82Bg34CkTK69Z
VHLZfopvH6Cs1//WMHEIMWeKkD9/xcsjaXtKulExtTcYeya4KwCoufv8ii4CLyEI
JjhPd0E87phP5sT/97Nw1/9rujymX9NpNORmbr2TDcYOJJxv4rbGpD60kCjoR0Xr
8NXsyS15/cJoUIzBwyuAMAPqrzHhlNo60sv6AyFdkCVoCjIFP6jV9q6SpmCLI4i4
HEqqNimcp92e0Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:16:10 2026 by rpki-client