
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
File: LyoPogODMyo_QU8FR1OgtgsluhA.mft (raw, json)
Hash identifier: juXfeGIpeHWjOB6syRSy01HdsumoJIETMLzVg9TuJsQ=
Subject key identifier: 08:B1:37:D2:35:31:FF:F2:65:34:17:23:57:ED:C9:33:6B:6C:03:37
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 019CE4B5B6F0BD039E64D6529CBD03C704EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
Manifest number: 06CB
Signing time: Fri 13 Mar 2026 01:00:39 +0000
Manifest this update: Fri 13 Mar 2026 01:00:39 +0000
Manifest next update: Sat 14 Mar 2026 01:00:39 +0000
Files and hashes: 1: 6QujOxzf4C6K0r-hHQOFn_yfCUI.roa (hash: VpztrU2iFQ8Ah/D8jT+xPTLG0sW08bpvg3e6MmJ6Zdg=)
2: CnGC1xBcS_Hw0l7OYLlFgmMRghM.roa (hash: yl/TzXvizjcQkXaqTrcqSMtt/sGUH2HO4v5PSOx89k0=)
3: DlvqEbHES6ltEIxiAXhjM2CW4ec.roa (hash: Mj5DDW92tIkxs3VmT9Gs5UYbHsVDvGDo2+Bxg89LMQg=)
4: E58PWBUn7UtEVZL4CFS_NBdEtXk.roa (hash: 1fq0CFgVJSOFX0KGo6OeqqqkhCNxlNXWTCFmXVDzLkA=)
5: E9M1Pbo6cojKNq6aCzRN9lYK2TI.roa (hash: 6xlPlwiU6/vgt77UfvKPKbZAHPmxOxzp9UBEFyHwp2U=)
6: IBVzEPC10N6US5KaErFSedKeI1Q.roa (hash: RU5umX0s3T/s0oLhPcgLEFjXt2aMHfj/aPPYStVkbnI=)
7: LyoPogODMyo_QU8FR1OgtgsluhA.crl (hash: z89Dc+8bhV7VZs/7bNX6ngPKo3pmP4cqxL4KJE7be3o=)
8: OLmArH5IwWhE4X1-1oyWlt70SoU.roa (hash: qoAN1qHyDfHOZo1EmYKxtK2xB81mzjXDuLB7f175zdw=)
9: SX294m--1vDxMY6Pvv6-ci7dNJ4.roa (hash: bzsnnZDkBTJaiqPd5qwvFscE5qs3E0+zYHYP17Yj7CA=)
10: j24Xn1OVDzmRc0YHejjOlzAmgRk.roa (hash: /5EdM1LEZ2tK4zjsCtxS9n3mfLKzazy5AKKxuUfX/Lk=)
11: oLV5SKfY-zjLqIyOW6zU-bz_SA4.roa (hash: w/7dM9IZeNCiZ2By+1jxyO/EjmzKRQDY0Hhm0lNI5M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:b6:f0:bd:03:9e:64:d6:52:9c:bd:03:c7:04:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Mar 13 01:00:39 2026 GMT
Not After : Mar 14 01:00:39 2026 GMT
Subject: CN=08b137d23531fff26534172357edc9336b6c0337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:9b:43:95:01:82:e6:97:6a:93:db:86:36:
32:99:89:35:e4:b0:d6:94:6e:bd:34:9c:4f:20:1c:
e7:26:72:5d:98:9b:4b:31:0f:3b:34:9c:22:8d:95:
cf:d3:44:e3:07:9f:ce:7c:fa:0c:1e:3f:a0:72:e4:
19:f2:33:f8:76:f4:1b:ef:65:25:0d:ff:96:2e:a0:
6b:d4:49:5c:2c:3e:c7:59:7a:c9:e0:74:54:af:54:
2b:16:24:d1:4c:7c:32:34:2f:bc:b7:c4:7b:1e:2e:
2f:56:12:a0:f3:2f:b4:27:25:ad:c8:57:a5:9a:8b:
cb:d8:4f:3a:e9:80:15:15:cd:00:15:36:0e:b3:f5:
e8:ff:96:e3:1c:93:a6:4f:30:8f:c7:ce:5b:cb:7d:
60:f5:7c:cf:4d:bd:9c:98:80:01:8e:89:a7:c5:c0:
b5:cc:e4:cb:77:07:47:71:29:c2:51:d3:c0:0c:a9:
82:65:86:a4:f4:d0:ff:96:09:6c:e5:2d:87:f3:7b:
79:cb:17:d6:ee:f8:a8:dc:d5:ad:d5:fa:95:18:bd:
b3:89:e2:f4:7f:6a:f9:19:bb:86:25:6d:d5:9c:e7:
d2:5c:ea:50:51:41:a0:30:5a:75:a2:35:05:e4:01:
b8:60:75:45:6c:ae:84:38:66:b8:b7:9f:75:97:c8:
e5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B1:37:D2:35:31:FF:F2:65:34:17:23:57:ED:C9:33:6B:6C:03:37
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:77:14:c5:37:09:9f:b2:7e:22:3b:0a:8b:b8:29:72:e9:1a:
09:74:75:88:7a:9f:b1:9a:1e:5f:17:90:32:43:a0:3e:5a:3d:
57:31:0a:ab:a3:eb:ed:b6:e9:e2:23:e9:3f:8c:84:40:d6:b8:
16:ce:4d:e8:c4:e6:db:02:78:37:9e:98:29:81:1f:47:71:ba:
a4:21:8d:bb:f6:59:74:48:3e:ee:a6:b7:bb:f6:9b:0a:a8:e7:
e7:f0:9e:b2:4a:d9:97:4c:8e:89:8e:64:be:54:54:e5:24:57:
b8:2d:dd:81:56:03:b1:c3:19:82:67:a8:be:9f:31:db:b5:ff:
f4:8c:fc:f5:9b:41:fc:a8:40:f3:33:3d:ab:75:ce:ef:fa:5b:
fe:d2:4a:e1:1b:13:ae:c2:9a:ea:48:6c:af:20:d3:56:5f:12:
97:93:24:21:8d:be:a2:ba:e4:42:0d:31:c6:ed:c2:82:97:ed:
a3:78:b5:4d:ac:c6:71:2b:e1:bf:9d:27:8c:c7:7d:8c:86:55:
60:94:c1:3e:09:91:07:b6:ac:c3:e0:cd:7e:c9:71:57:fe:60:
96:02:6f:fc:30:88:5a:b3:75:a8:ca:5a:d3:60:81:f6:14:62:
24:cb:40:5c:c7:a5:17:04:30:d7:fb:bc:6d:7b:98:5b:dc:d4:
6c:d5:e5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:08:37 2026 by rpki-client