Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
File: LyRkddfJujmfB_hDYh9uCBNy11c.mft (raw, json)
Hash identifier: KWeSxv99MpW3SGPr6og1DQ1sCYsl/7xkQ433kbi0Jtc=
Subject key identifier: 8C:CE:48:32:21:BE:F1:A3:05:31:CB:62:A3:52:DB:2F:3B:E1:83:2A
Authority key identifier: 2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
Certificate issuer: /CN=2f246475d7c9ba399f07f843621f6e081372d757
Certificate serial: 01A17EF43BA924AFB09FE726BAC7F0A6E983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
Manifest number: 0AC4
Signing time: Tue 27 Oct 2026 20:01:37 +0000
Manifest this update: Tue 27 Oct 2026 20:01:37 +0000
Manifest next update: Wed 28 Oct 2026 20:01:37 +0000
Files and hashes: 1: LyRkddfJujmfB_hDYh9uCBNy11c.crl (hash: BAg3hyYdjXLcDnhWIlQeDrS4sXGKilKDlMNYKhg8gAE=)
2: rGAms1z6A-9ECUjJ26qD00dFB5M.roa (hash: TneAOJ5ow61DGzqx3O0Ri/mEpaW4EBKjztqT5e9vxSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f4:3b:a9:24:af:b0:9f:e7:26:ba:c7:f0:a6:e9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f246475d7c9ba399f07f843621f6e081372d757
Validity
Not Before: Oct 27 20:01:37 2026 GMT
Not After : Oct 28 20:01:37 2026 GMT
Subject: CN=8cce483221bef1a30531cb62a352db2f3be1832a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:e9:64:70:d3:97:81:83:fd:c2:d0:85:fc:
31:bf:f7:b3:44:ab:02:bb:55:96:1d:2b:44:d6:5d:
04:7b:60:24:c0:4b:9d:a6:b8:99:07:42:13:c2:1c:
22:76:71:14:3d:a6:ff:ab:91:68:f8:56:d3:d1:c0:
41:ec:6c:96:ab:8d:6e:cd:78:4c:62:e6:5d:e1:b4:
e3:8a:82:8b:23:d9:c9:64:41:5a:9d:82:83:b5:f2:
09:66:4f:ba:1e:82:a5:19:3b:aa:8b:5a:a2:d2:98:
c5:df:56:6e:fb:cd:ae:6a:91:a3:fc:39:bf:cd:8b:
95:d3:cd:3d:af:33:72:f3:65:11:8e:4a:1c:f3:68:
93:64:c2:3b:6c:f0:74:31:74:4d:22:e1:74:97:30:
7c:10:ee:88:4b:e8:fe:91:ad:48:7b:cc:c4:35:3e:
96:41:97:65:d7:04:18:48:73:7b:f4:59:38:0d:e3:
15:3a:68:58:b3:bd:28:c6:d8:af:52:46:cb:27:ea:
45:93:08:14:3b:fa:a3:a7:f9:5e:e5:fc:37:2a:dc:
2f:d6:ed:65:a7:53:67:8b:06:13:0b:5e:e3:41:bb:
21:c1:bf:67:ac:a9:06:19:90:84:3a:fd:56:3f:4f:
c4:6c:b5:13:8c:05:85:0c:2e:f3:ad:2b:62:c4:54:
95:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CE:48:32:21:BE:F1:A3:05:31:CB:62:A3:52:DB:2F:3B:E1:83:2A
X509v3 Authority Key Identifier:
keyid:2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:85:d9:c5:92:dd:31:40:16:79:bb:bf:d4:0d:74:b4:c1:61:
3d:cd:26:be:f8:1f:d5:92:d0:48:6f:60:f2:dd:33:d5:20:53:
28:28:e2:85:ee:e2:5d:71:f7:09:09:4b:9f:31:00:24:cd:07:
72:06:9e:8c:ea:50:d4:d6:16:5a:11:76:b4:e0:fd:d7:19:e8:
1f:cf:cf:0e:f4:ed:c9:54:94:93:39:74:42:a9:1e:97:75:df:
2d:e9:23:1f:ef:23:4e:5b:9d:b1:e7:75:55:1e:2d:3d:9a:0c:
48:7b:fe:c1:c1:74:ec:c2:d8:97:78:78:3e:d4:3c:81:cc:b7:
b2:a2:b5:56:23:ef:62:dd:77:50:00:52:11:0e:8f:14:e3:ea:
2d:41:63:89:86:e4:7c:f2:6d:ef:50:5c:e2:3e:ff:0d:74:e1:
b3:42:e8:11:6e:5a:bc:72:5f:22:95:28:a9:f7:fa:d7:b1:5c:
a3:3d:2f:85:47:9b:2c:8c:18:56:cc:3c:c2:61:c8:7d:89:c5:
d0:be:59:65:95:d1:5b:70:cf:35:da:04:76:29:09:7f:54:e9:
17:77:e0:c0:30:c1:27:4b:fa:8d:6d:4b:7d:80:d4:1f:c8:1b:
cc:95:90:f6:3e:1f:e6:56:04:a8:30:f9:65:97:30:d7:47:1f:
ab:1d:32:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+9DupJK+wn+cmusfwpumDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjQ2NDc1ZDdjOWJhMzk5ZjA3Zjg0MzYyMWY2ZTA4MTM3
MmQ3NTcwHhcNMjYxMDI3MjAwMTM3WhcNMjYxMDI4MjAwMTM3WjAzMTEwLwYDVQQD
Eyg4Y2NlNDgzMjIxYmVmMWEzMDUzMWNiNjJhMzUyZGIyZjNiZTE4MzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2jpZHDTl4GD/cLQhfwxv/ezRKsC
u1WWHStE1l0Ee2AkwEudpriZB0ITwhwidnEUPab/q5Fo+FbT0cBB7GyWq41uzXhM
YuZd4bTjioKLI9nJZEFanYKDtfIJZk+6HoKlGTuqi1qi0pjF31Zu+82uapGj/Dm/
zYuV0809rzNy82URjkoc82iTZMI7bPB0MXRNIuF0lzB8EO6IS+j+ka1Ie8zENT6W
QZdl1wQYSHN79Fk4DeMVOmhYs70oxtivUkbLJ+pFkwgUO/qjp/le5fw3Ktwv1u1l
p1NniwYTC17jQbshwb9nrKkGGZCEOv1WP0/EbLUTjAWFDC7zrStixFSVqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzOSDIhvvGjBTHLYqNS2y874YMqMB8GA1UdIwQY
MBaAFC8kZHXXybo5nwf4Q2IfbggTctdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlSa2RkZkp1am1mQl9oRFloOXVDQk55MTFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kZjUyYTAtNTgyNC00MmFkLTliNGQt
ZDlhMWZhOTA4MTBmLzEvTHlSa2RkZkp1am1mQl9oRFloOXVDQk55MTFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9kZjUyYTAtNTgyNC00MmFkLTliNGQtZDlhMWZhOTA4MTBm
LzEvTHlSa2RkZkp1am1mQl9oRFloOXVDQk55MTFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYXZxZLd
MUAWebu/1A10tMFhPc0mvvgf1ZLQSG9g8t0z1SBTKCjihe7iXXH3CQlLnzEAJM0H
cgaejOpQ1NYWWhF2tOD91xnoH8/PDvTtyVSUkzl0Qqkel3XfLekjH+8jTludsed1
VR4tPZoMSHv+wcF07MLYl3h4PtQ8gcy3sqK1ViPvYt13UABSEQ6PFOPqLUFjiYbk
fPJt71Bc4j7/DXThs0LoEW5avHJfIpUoqff617Fcoz0vhUebLIwYVsw8wmHIfYnF
0L5ZZZXRW3DPNdoEdikJf1TpF3fgwDDBJ0v6jW1LfYDUH8gbzJWQ9j4f5lYEqDD5
ZZcw10cfqx0yJg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:14:29 2026 by rpki-client