Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier: C/NOequ7AlyTQHwq7vv4L+DGtSHjGtGWD+NuhPwdrAg=
Subject key identifier: 93:BD:2E:05:67:8F:80:81:6B:2A:FE:7F:6F:87:5E:9A:3E:2F:36:E8
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial: 019D284DE66B9A7CC65845856250D6ED4196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number: 078F
Signing time: Thu 26 Mar 2026 04:01:26 +0000
Manifest this update: Thu 26 Mar 2026 04:01:26 +0000
Manifest next update: Fri 27 Mar 2026 04:01:26 +0000
Files and hashes: 1: LMnW7BQw6VTniWIkmWbGGaakoOg.roa (hash: Xvh7VVkZUVV7AZo3Wz6W7iZLuuYv1DelOXPWWhTcB8A=)
2: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: KiY+nNMZZgFbsQURlZTRz+yw8rW+zKBSUUqYmuBr6S0=)
3: q8TRW-nxF77mnHW626ye6CxptZs.roa (hash: tsP4mbqeyfW3lJKs8auJSMWq6KIkEBqI6CN97FBqDPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:e6:6b:9a:7c:c6:58:45:85:62:50:d6:ed:41:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Validity
Not Before: Mar 26 04:01:26 2026 GMT
Not After : Mar 27 04:01:26 2026 GMT
Subject: CN=93bd2e05678f80816b2afe7f6f875e9a3e2f36e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dc:1e:c1:e5:72:b3:88:98:ae:ce:6c:af:6b:
f7:a2:a3:83:8b:33:20:10:d3:38:4d:11:5b:dc:f8:
83:53:79:8f:ba:78:f8:aa:a3:ff:19:e4:93:13:9c:
6b:07:e3:32:50:5e:28:8a:41:26:be:0b:15:27:fe:
9a:20:a9:e2:f0:ce:8c:7d:e2:56:5b:fd:d7:58:4d:
3c:05:4e:e4:91:14:f7:ba:14:bb:c9:1c:a3:e0:c5:
5a:ce:38:e3:59:7c:98:40:60:da:bc:8d:27:30:51:
ef:6e:94:4c:39:94:ce:42:dc:b4:69:a4:88:87:32:
94:93:f1:af:63:28:76:56:11:02:e2:f9:6c:c4:37:
19:6a:58:70:37:9d:3f:68:50:61:51:d2:36:63:bd:
a0:80:93:43:e0:58:be:9d:01:b1:af:c0:df:d9:7c:
6b:ce:f5:b4:9f:b8:9f:50:32:d6:e9:e1:91:ac:42:
94:56:3a:01:71:1b:6e:e3:4e:72:75:2f:ca:1c:7e:
54:a4:2a:2a:97:cf:05:17:22:7d:8d:09:45:0e:3e:
74:f5:84:cc:38:72:0c:8e:33:ac:7a:20:90:da:4e:
8e:24:50:00:9c:f7:02:27:9f:87:a0:77:72:32:f7:
81:04:1a:75:34:21:28:a8:ee:eb:3b:a9:39:1a:18:
5d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BD:2E:05:67:8F:80:81:6B:2A:FE:7F:6F:87:5E:9A:3E:2F:36:E8
X509v3 Authority Key Identifier:
keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c1:df:f0:bd:37:5f:f6:d3:94:77:72:c5:50:a7:e7:f1:e8:
ed:3a:f4:e3:3f:56:e5:42:cc:4e:a2:59:87:ab:1d:54:c6:31:
7e:ab:22:94:26:a5:95:3e:90:ec:0f:83:4b:75:63:7a:37:ec:
56:bd:01:98:d0:1e:8c:ad:fa:70:d4:7b:41:0b:fc:68:80:83:
7f:d1:92:48:d2:db:73:c7:7e:64:b8:0d:72:32:ac:d9:17:05:
96:f2:1a:9d:35:47:4a:fd:a7:ab:57:42:8b:21:e3:ce:e5:5d:
35:6b:9f:04:71:dd:5c:f2:c2:14:9a:d0:6c:c4:01:21:80:4d:
03:c8:2d:1d:26:0b:89:b9:17:9f:65:a1:8e:b1:48:1f:54:5f:
e8:1f:2a:68:3f:a5:18:10:8b:a5:91:e6:69:fd:e4:e4:e4:50:
8f:3d:b9:69:e8:5a:a0:22:2e:4b:dd:3e:72:0a:fd:f3:fb:91:
70:ee:5c:94:b2:d3:31:b2:02:de:37:8a:34:e0:af:8a:70:ca:
3f:f2:a0:90:d6:10:9e:b1:3d:27:d3:db:0e:d8:69:ad:57:6c:
2b:9f:9a:e5:2f:01:38:2f:74:a7:fc:af:06:f0:3a:6e:23:ec:
d9:73:0f:9f:3a:77:f2:b5:4c:56:17:13:b0:b3:cb:dc:43:82:
e1:4d:50:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTeZrmnzGWEWFYlDW7UGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZjYxODJiZWI3YjgyYzg1NzNkZjhiNmQ1MTA0NGQ2YzY3
MjRlODIwHhcNMjYwMzI2MDQwMTI2WhcNMjYwMzI3MDQwMTI2WjAzMTEwLwYDVQQD
Eyg5M2JkMmUwNTY3OGY4MDgxNmIyYWZlN2Y2Zjg3NWU5YTNlMmYzNmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNweweVys4iYrs5sr2v3oqODizMg
ENM4TRFb3PiDU3mPunj4qqP/GeSTE5xrB+MyUF4oikEmvgsVJ/6aIKni8M6MfeJW
W/3XWE08BU7kkRT3uhS7yRyj4MVazjjjWXyYQGDavI0nMFHvbpRMOZTOQty0aaSI
hzKUk/GvYyh2VhEC4vlsxDcZalhwN50/aFBhUdI2Y72ggJND4Fi+nQGxr8Df2Xxr
zvW0n7ifUDLW6eGRrEKUVjoBcRtu405ydS/KHH5UpCoql88FFyJ9jQlFDj509YTM
OHIMjjOseiCQ2k6OJFAAnPcCJ5+HoHdyMveBBBp1NCEoqO7rO6k5GhhdCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJO9LgVnj4CBayr+f2+HXpo+LzboMB8GA1UdIwQY
MBaAFC/2GCvre4LIVz34ttUQRNbGck6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYt
Yjc3NmEyMjA0NTZiLzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYtYjc3NmEyMjA0NTZi
LzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksHf8L03
X/bTlHdyxVCn5/Ho7Tr04z9W5ULMTqJZh6sdVMYxfqsilCallT6Q7A+DS3Vjejfs
Vr0BmNAejK36cNR7QQv8aICDf9GSSNLbc8d+ZLgNcjKs2RcFlvIanTVHSv2nq1dC
iyHjzuVdNWufBHHdXPLCFJrQbMQBIYBNA8gtHSYLibkXn2WhjrFIH1Rf6B8qaD+l
GBCLpZHmaf3k5ORQjz25aehaoCIuS90+cgr98/uRcO5clLLTMbIC3jeKNOCvinDK
P/KgkNYQnrE9J9PbDthprVdsK5+a5S8BOC90p/yvBvA6biPs2XMPnzp38rVMVhcT
sLPL3EOC4U1Q2A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:35 2026 by rpki-client