Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
File: LYaVbM1-OrtCkd1U29i0NCv5V8w.mft (raw, json)
Hash identifier: EZUtZa9OFW7OzUu+I1C5WXmOP+iqqxPtcOPXtATCNrE=
Subject key identifier: 3A:E9:0A:D9:9B:DF:17:15:41:FB:40:A3:83:0C:1B:96:1C:C4:A6:53
Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Certificate serial: 019D3909D14E180EF6CE69115FA97B0B448A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 10:00:37 +0000
Manifest this update: Sun 29 Mar 2026 10:00:37 +0000
Manifest next update: Mon 30 Mar 2026 10:00:37 +0000
Files and hashes: 1: LYaVbM1-OrtCkd1U29i0NCv5V8w.crl (hash: yOaCYGUFkRrsA5sdGgH+wkY/S9v0nEpouTja7QHMK7w=)
2: UZ3Zh5sbw9GQyuWThFTa8ax6K-k.roa (hash: yAGOxTch7/IeLN3QFrJm+PJnLSPNYzzaqiRQZwJHefI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d1:4e:18:0e:f6:ce:69:11:5f:a9:7b:0b:44:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Validity
Not Before: Mar 29 10:00:37 2026 GMT
Not After : Mar 30 10:00:37 2026 GMT
Subject: CN=3ae90ad99bdf171541fb40a3830c1b961cc4a653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:04:ed:29:0f:97:60:7f:5b:3e:d6:45:58:
bc:90:5f:29:e8:05:96:31:91:ad:c8:6d:53:df:20:
59:13:0a:dd:50:43:eb:b7:5c:27:b7:0f:44:22:84:
67:92:b1:c6:03:dc:79:d4:82:b6:cd:c1:ce:f6:2f:
ba:15:69:95:97:9f:5c:ae:a6:fa:c5:d0:35:31:51:
c5:08:4a:6a:12:4c:b7:72:b1:1a:42:25:35:f6:5e:
d2:d4:4a:84:1b:59:d8:e3:6a:ad:f4:3f:9c:2a:f6:
f8:b9:50:37:78:6f:51:f6:87:35:46:a2:c1:fe:43:
50:a7:58:06:7c:ce:ca:36:84:b4:c9:e7:44:44:8e:
5f:63:e3:a8:77:57:5d:9b:75:a9:2c:71:cc:86:f5:
22:fc:e3:2f:d8:7e:86:4a:ce:48:21:eb:9a:f9:82:
1d:90:17:4b:40:41:8e:eb:e5:7a:76:8d:0b:84:56:
04:b4:64:98:0a:0a:a6:a4:88:7b:7e:b4:f6:f9:f3:
d2:8c:c1:a2:62:82:85:12:43:51:44:6a:31:61:5c:
c9:20:04:dc:28:6b:6b:0b:29:90:73:83:87:48:52:
80:24:26:59:25:da:6e:53:b7:4c:bd:96:1a:e7:fb:
ac:a5:c5:14:ae:11:1a:f8:33:cf:00:cf:dd:4f:c4:
1f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E9:0A:D9:9B:DF:17:15:41:FB:40:A3:83:0C:1B:96:1C:C4:A6:53
X509v3 Authority Key Identifier:
keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e0:55:78:56:32:17:e7:69:6b:cf:a0:bb:ba:6a:25:47:14:
ae:0f:7f:a5:7d:9a:6e:bd:c2:83:d9:a7:5c:80:05:f4:b5:c7:
c9:a6:cd:70:fc:fb:87:cd:19:18:8f:65:68:71:ee:dc:a4:dc:
6e:09:f0:bd:d7:62:fe:f3:c9:f8:a7:c2:2b:c8:5b:9b:90:5e:
88:1d:9f:e1:bc:d8:51:82:9f:88:0a:5d:ce:55:3b:58:28:70:
cf:9b:a7:ab:89:1b:84:51:d9:1d:5b:b5:11:ca:37:65:36:73:
30:05:c3:d7:2b:ce:b3:53:8a:50:ee:d0:9d:27:58:80:e0:ca:
20:68:ce:fa:3a:6d:69:3a:14:ed:2b:ef:79:dd:ea:e4:0a:4b:
2f:de:6e:0e:fe:24:07:95:db:a8:a0:87:01:61:8d:00:72:e1:
01:45:aa:50:88:2d:cd:51:3f:bb:56:35:ec:b7:05:8d:94:ee:
61:52:f8:6f:04:0a:62:70:0a:8f:5d:ad:bb:fb:f2:b4:c7:e3:
cd:e5:55:22:e6:79:ab:28:f7:1f:03:77:d5:9d:1c:18:06:b4:
f9:3f:75:37:b5:1b:dc:63:8f:84:4d:d5:ea:49:01:e5:a0:f5:
ce:b9:c2:1b:2d:63:7b:9f:a3:a5:a0:9e:2b:e1:2f:57:87:61:
66:f5:fd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:06 2026 by rpki-client