Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
File: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft (raw, json)
Hash identifier: Sogx/lT7QHu3myrk/VgkTTaWZKAPD+bBpm4RuhIxW1g=
Subject key identifier: EF:B5:9F:F3:0D:89:7B:BB:70:73:DA:1F:D3:2F:A9:D4:A4:9D:B2:AF
Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Certificate serial: 019D38D337D644FC0BE77B6CED3EEE2D3F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
Manifest number: 114B
Signing time: Sun 29 Mar 2026 09:00:59 +0000
Manifest this update: Sun 29 Mar 2026 09:00:59 +0000
Manifest next update: Mon 30 Mar 2026 09:00:59 +0000
Files and hashes: 1: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl (hash: R10xuGD1IJ197lm3WoNN0HyI2sIWDI8xZj4zMxR2Nmo=)
2: qzDVPJjwkiKMmIw2RcHgiamnABM.roa (hash: xT+W6De5eWZz4XKVbRVPuP+LFXCQC6a/MFcFgjxi2KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:37:d6:44:fc:0b:e7:7b:6c:ed:3e:ee:2d:3f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Validity
Not Before: Mar 29 09:00:59 2026 GMT
Not After : Mar 30 09:00:59 2026 GMT
Subject: CN=efb59ff30d897bbb7073da1fd32fa9d4a49db2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c8:aa:de:4a:e4:6b:5f:7a:42:5b:f5:fa:8e:
20:21:6e:80:30:8f:e2:0e:e0:6b:b1:c2:a0:b2:43:
c3:57:d1:51:64:26:20:7e:55:80:fb:aa:e3:34:08:
58:18:1d:d4:91:a6:ed:97:cc:36:2c:74:72:f5:19:
1d:de:3b:fe:85:f9:34:0b:b6:08:64:50:62:55:96:
ee:fb:7f:00:47:bf:c8:d2:17:6e:13:a0:df:4e:6d:
6d:bf:7f:59:77:0d:0f:0d:41:e8:13:99:50:ce:84:
83:c2:d0:b3:af:d5:10:f8:85:e8:1b:ba:e5:0b:4a:
a2:ba:99:62:c0:46:e5:b5:1b:f9:40:c8:60:a0:3c:
43:c4:1d:7f:ed:21:ff:a2:88:3b:b9:53:df:22:13:
cf:32:ec:44:19:6d:23:72:3b:3a:9b:1f:60:e0:01:
7b:81:9d:4b:d8:b7:46:15:8e:e2:9b:8e:94:54:7e:
53:75:0d:b8:ed:2f:7a:ae:a1:ce:0b:60:37:12:96:
6f:ae:c6:1d:b9:47:e9:61:9a:e6:10:f4:d1:1c:bc:
a4:56:0d:2a:7b:af:b0:0b:ad:3f:7a:7a:01:76:ba:
75:f3:3e:5d:80:19:d0:6c:3f:a6:ad:9d:a9:01:06:
9d:d8:38:f9:5e:45:fb:97:9a:4b:7f:b2:24:d0:28:
e7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B5:9F:F3:0D:89:7B:BB:70:73:DA:1F:D3:2F:A9:D4:A4:9D:B2:AF
X509v3 Authority Key Identifier:
keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cd:ca:a0:99:c1:31:f7:13:a3:29:3c:c4:e9:d7:7b:81:45:
f0:63:9b:42:e6:30:1a:b3:12:a4:15:e5:98:33:af:92:5c:b1:
3a:5c:a5:9f:91:62:b2:53:4d:6e:84:1b:54:44:7e:c8:a8:32:
9a:6e:5e:02:db:ba:5d:41:e7:21:e2:04:7b:d3:66:15:1e:3d:
2c:94:1a:97:ab:9a:06:4c:02:52:d8:17:47:29:d2:eb:e5:3e:
04:fb:63:4a:0d:5b:b2:8f:67:f8:f1:65:0b:18:5d:9f:a6:05:
e1:d8:e1:6d:09:36:fc:9c:73:9a:52:b9:5f:bc:e4:ba:cd:df:
65:35:76:74:79:98:9e:ba:6a:bf:01:f4:38:df:25:b2:6d:5b:
b7:23:f7:ea:47:b7:fb:f7:28:51:8a:76:ed:6a:10:6d:62:16:
e6:18:c2:8b:40:2b:1e:cd:ab:fd:a7:31:56:2d:6e:50:e5:86:
5d:6e:56:bf:ee:d9:36:54:56:bd:1f:49:d2:85:65:d7:be:23:
7a:29:77:91:09:ae:4a:5a:ac:6d:2b:8c:7b:50:40:27:22:86:
e1:b2:3d:f7:25:25:a3:30:b4:c6:96:59:11:78:9f:19:8f:43:
41:74:f2:2a:86:0e:77:05:f9:ec:cc:b7:b2:77:5f:de:c0:51:
fc:11:53:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:41:00 2026 by rpki-client