Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
File: LYFCGstXhBVGXs3sRYHoleu_vH8.mft (raw, json)
Hash identifier: NHF+7Fw9AGPc+1IktFSO8ThcXoVKrT4i8U5TVVYmaGw=
Subject key identifier: 3F:1C:40:EC:E4:64:13:B4:20:8A:7F:74:B9:A1:0F:96:78:5C:7B:1A
Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
Certificate issuer: /CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Certificate serial: 01A15477F77D2E223680E056CA717041F9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
Manifest number: 050E
Signing time: Mon 19 Oct 2026 14:01:50 +0000
Manifest this update: Mon 19 Oct 2026 14:01:50 +0000
Manifest next update: Tue 20 Oct 2026 14:01:50 +0000
Files and hashes: 1: LYFCGstXhBVGXs3sRYHoleu_vH8.crl (hash: 3JyjsuCAE3p7L//c052AGmt8qv+Afd5V7gP8cCZtmxI=)
2: RML1TmbAZYHpyU26wWj03FjR3yY.roa (hash: PPBAB3g4x0UYNx5LUtlXQ+fhrj8l5E6PaVsjyetSSNY=)
3: v-yW23PUKxeOnQqPJF0a9ieiqkY.roa (hash: QA7GggYLqUF36MqITz5Sp/J8Iu+lSl6lGyrVjXlucb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:77:f7:7d:2e:22:36:80:e0:56:ca:71:70:41:f9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Validity
Not Before: Oct 19 14:01:50 2026 GMT
Not After : Oct 20 14:01:50 2026 GMT
Subject: CN=3f1c40ece46413b4208a7f74b9a10f96785c7b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:fd:13:50:36:80:dd:a3:5e:24:14:2f:41:
e5:61:c5:0a:4b:e5:41:31:d3:fb:3e:80:17:04:a6:
93:0b:2b:5e:8d:46:c8:b8:b1:53:40:46:d5:24:95:
be:17:a6:28:d6:65:2b:83:52:8a:01:3f:f9:9e:ca:
1e:c9:23:80:ae:e3:c0:9d:fc:47:85:7b:3b:36:6e:
b1:01:f3:19:4b:47:17:52:2b:c9:52:8d:7c:8b:63:
cf:08:2a:dd:f2:99:2a:c2:a8:84:9f:cc:ba:8f:80:
fa:9f:30:22:b2:b3:ec:a6:26:7d:53:9d:8f:64:b3:
01:3c:77:a6:9b:7c:9e:5c:7d:cd:3a:ca:7a:97:fc:
47:43:c2:f0:1f:8b:4d:6d:74:da:54:68:be:fd:e7:
c2:4f:33:19:82:6f:08:3c:c0:04:89:96:91:04:39:
2a:21:de:90:66:93:80:80:ce:ec:8f:c1:0e:6e:fd:
47:35:3e:c2:cb:23:fd:15:bf:af:ce:1c:87:87:17:
fa:71:08:1f:2c:2d:b3:b1:d5:77:4b:e4:17:68:d7:
1d:ef:d9:c7:83:7d:45:ef:be:e7:ab:44:8b:f9:1a:
bb:59:c3:13:a4:ac:5b:d9:33:38:e0:01:ca:88:9d:
9e:7c:af:57:8c:22:b2:aa:21:b6:5c:6c:f9:cd:15:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1C:40:EC:E4:64:13:B4:20:8A:7F:74:B9:A1:0F:96:78:5C:7B:1A
X509v3 Authority Key Identifier:
keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:55:df:1d:91:18:09:f2:fb:6b:0f:16:92:1f:d1:10:8a:07:
89:49:21:4e:00:68:e4:e8:00:e9:bb:97:c3:7a:78:01:1e:67:
2a:77:2f:fd:26:ec:07:a9:b5:a3:0d:42:2b:bd:21:e4:c8:3e:
5f:8e:0b:91:2c:4f:1a:f6:1e:4d:62:b7:99:51:fa:b2:22:a0:
4d:d1:22:a1:f1:5b:09:93:08:0f:9d:b6:ec:09:2f:79:be:88:
3e:af:52:02:cd:07:17:6a:78:5c:d1:49:81:71:2d:0a:cd:59:
f3:83:24:71:a2:7f:46:ac:74:de:59:b0:f1:d0:77:73:99:71:
d6:c5:78:5a:dc:5d:1f:8a:ae:3e:0a:96:71:8a:93:dd:79:95:
89:8f:e4:a0:ef:6e:95:d7:f4:9f:d3:6a:08:15:76:0b:97:c5:
38:ae:e3:b4:1b:24:e4:0c:0d:93:23:a2:81:7c:f7:9d:25:e8:
03:e5:d6:a9:62:e9:91:80:33:ba:41:2e:56:a9:33:65:20:90:
48:21:b4:3a:8c:e4:dd:9d:e4:6f:0a:09:53:32:4a:99:56:26:
f0:88:1b:c5:3a:06:48:5a:bf:42:a4:9b:c9:d3:87:13:7c:07:
ae:bc:60:d6:59:2a:c6:be:ec:a1:35:2b:c6:85:40:b5:e9:23:
5e:35:02:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:28:08 2026 by rpki-client