Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
File: LyytEgqv-e_ffGlZpOBHDj4GJPA.mft (raw, json)
Hash identifier: LMBI6KR7MpIjB7E/lI/rRxNdhkVaeySXIRmryNCggRk=
Subject key identifier: 13:BB:08:09:7A:36:9C:9C:5C:A5:D1:9E:92:F6:D0:2C:8E:06:7E:BC
Authority key identifier: 2F:2C:AD:12:0A:AF:F9:EF:DF:7C:69:59:A4:E0:47:0E:3E:06:24:F0
Certificate issuer: /CN=2f2cad120aaff9efdf7c6959a4e0470e3e0624f0
Certificate serial: 019D2695C572B14FA3E1386A08F95F35E97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
Manifest number: 51
Signing time: Wed 25 Mar 2026 20:00:42 +0000
Manifest this update: Wed 25 Mar 2026 20:00:42 +0000
Manifest next update: Thu 26 Mar 2026 20:00:42 +0000
Files and hashes: 1: Hu4XjK4kmNzJLAM6_ajtwBsbj0A.roa (hash: ChkZxtf+f4NVFn48swM6zD1dQ21c3QT2WX6YtJDB51E=)
2: LyytEgqv-e_ffGlZpOBHDj4GJPA.crl (hash: 6or/Ymi6pvEWCT51qk9pX2CYoUivQUnU8BhY9Q6sGXw=)
3: oGY7ywjzIawiazxfJPdxsbpKwRU.asa (hash: bPFAxXTZvoR90j3k/VjW0y0gMph9xG0NmXzKwHJV27k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c5:72:b1:4f:a3:e1:38:6a:08:f9:5f:35:e9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2cad120aaff9efdf7c6959a4e0470e3e0624f0
Validity
Not Before: Mar 25 20:00:42 2026 GMT
Not After : Mar 26 20:00:42 2026 GMT
Subject: CN=13bb08097a369c9c5ca5d19e92f6d02c8e067ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:c3:29:bc:b4:c9:cb:f4:57:07:34:84:de:
fc:04:d6:00:2d:90:bb:6c:82:59:86:3e:87:fa:34:
6a:0c:e6:a7:1b:7a:02:e5:a5:81:e8:f5:29:24:b4:
4d:0a:2d:e3:ef:d3:da:48:de:e5:d6:56:18:3b:0b:
02:63:f3:d6:0d:ca:5b:49:4f:b8:c6:56:f9:b0:fd:
03:2e:94:03:4e:41:c6:7a:21:63:18:df:59:b4:77:
58:7d:35:6d:16:e5:36:75:32:86:6f:42:9a:2e:0f:
b4:7f:fd:8c:6a:45:b5:3d:39:e3:ec:d9:99:0f:6f:
48:38:29:21:f2:e4:7c:9f:98:c2:2f:cb:6b:8a:20:
cb:f5:c5:ad:ea:bb:28:47:2c:47:5e:92:0e:8b:ee:
a1:c2:d8:c6:52:36:26:e5:e2:5a:88:07:43:f1:cc:
20:be:e0:17:f2:fd:9e:59:d3:35:c6:f3:dc:2b:96:
e2:0c:86:b3:d9:c8:11:34:cb:48:b9:31:17:d6:9b:
cb:22:6e:45:7b:33:c3:75:8c:5b:7c:70:34:cf:39:
b0:a3:29:b5:2a:66:1f:f7:3f:97:5e:0b:b2:cb:72:
b7:bc:c8:d8:05:ee:79:3f:cf:68:4f:7e:c7:65:a1:
0e:87:84:ba:73:f0:b6:23:28:aa:31:70:b3:31:6a:
9a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BB:08:09:7A:36:9C:9C:5C:A5:D1:9E:92:F6:D0:2C:8E:06:7E:BC
X509v3 Authority Key Identifier:
keyid:2F:2C:AD:12:0A:AF:F9:EF:DF:7C:69:59:A4:E0:47:0E:3E:06:24:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e5:11:76:32:c1:01:4c:32:1f:3a:2e:0d:be:91:80:dc:a8:
fa:a1:d2:66:29:9f:8d:f4:5f:dd:fa:c3:b4:64:18:fb:0a:cc:
a0:df:79:73:ac:22:a4:e7:c7:71:8e:f7:74:d3:6a:31:37:d4:
c3:11:91:f4:37:7a:08:a7:d6:03:89:7e:fb:29:4f:08:62:03:
6a:e6:d6:2b:71:7c:91:e0:ea:6e:b1:4f:35:22:17:ad:a5:cb:
67:7f:c1:63:f0:17:ca:b6:ac:4d:12:f4:12:2e:a1:11:71:05:
58:ff:46:65:0a:d1:06:93:c6:96:d3:06:eb:80:63:ec:9c:18:
3e:3a:fb:d3:c2:5f:3b:b6:63:d3:e1:fd:1c:61:4f:e8:1c:ea:
49:01:eb:ec:22:5d:ad:0c:d7:dc:06:59:11:3f:2a:d6:5a:ba:
62:29:e0:03:d2:db:98:9c:13:4e:48:7a:38:d0:9c:7b:e3:38:
1b:65:eb:16:5f:3b:c9:70:ee:ce:7e:64:64:08:f4:30:c8:b2:
0b:5d:70:ef:88:ac:9c:30:62:79:cc:96:2d:b7:4d:b3:d5:b8:
cf:0a:db:06:f5:1f:7f:ac:c5:4e:31:85:dc:64:db:30:36:96:
f1:c2:df:63:86:ca:80:60:99:4a:3f:ee:af:5a:20:4e:04:69:
e1:d4:5e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:54 2026 by rpki-client