Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
File: LyRkddfJujmfB_hDYh9uCBNy11c.mft (raw, json)
Hash identifier: FmtTpwIC40ASGUlqdeL477LoGzb4CvpKIWH44wgfA8Q=
Subject key identifier: 5A:BB:D2:08:61:39:90:A2:F5:DD:86:97:03:5D:34:D7:52:8B:8E:9D
Authority key identifier: 2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
Certificate issuer: /CN=2f246475d7c9ba399f07f843621f6e081372d757
Certificate serial: 01A17927BC59244EAB96B108B34FAB008D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
Manifest number: 0AC1
Signing time: Mon 26 Oct 2026 17:00:09 +0000
Manifest this update: Mon 26 Oct 2026 17:00:09 +0000
Manifest next update: Tue 27 Oct 2026 17:00:09 +0000
Files and hashes: 1: LyRkddfJujmfB_hDYh9uCBNy11c.crl (hash: vF99U3cuAI2TCvRY0vr5DZ+Wol0DxAnNCPScRRz3XrY=)
2: rGAms1z6A-9ECUjJ26qD00dFB5M.roa (hash: TneAOJ5ow61DGzqx3O0Ri/mEpaW4EBKjztqT5e9vxSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:27:bc:59:24:4e:ab:96:b1:08:b3:4f:ab:00:8d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f246475d7c9ba399f07f843621f6e081372d757
Validity
Not Before: Oct 26 17:00:09 2026 GMT
Not After : Oct 27 17:00:09 2026 GMT
Subject: CN=5abbd208613990a2f5dd8697035d34d7528b8e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:75:a7:45:9a:2b:c7:29:ab:52:13:7a:55:
88:26:4a:5d:51:5c:1c:25:67:6c:0c:22:25:93:5e:
16:43:1d:cc:d9:9b:6f:2f:2d:41:2a:c7:f3:15:54:
d7:46:c5:68:6d:a9:03:cb:79:b3:91:36:74:d0:d9:
db:6f:9a:a2:5b:88:13:53:37:4d:cc:79:7e:0d:8a:
a3:18:27:90:fc:02:37:a7:b4:73:8a:b5:3e:ff:43:
52:18:15:9f:2d:af:09:1f:e8:68:9a:7c:59:16:aa:
42:07:0e:c7:59:b9:dd:c1:83:84:00:c3:cf:55:33:
95:a0:cf:d3:bc:85:be:7a:cc:05:6a:8b:94:ce:f1:
c6:39:b6:ec:cf:1c:ae:4c:2d:fa:69:37:ba:ed:14:
53:50:b3:63:6c:d5:05:85:7b:4f:79:87:41:5a:02:
49:5c:cc:77:16:18:6c:25:ff:76:9f:58:d1:e1:8b:
cb:b3:e3:51:47:04:d7:7c:8f:ad:2d:34:66:fa:4a:
8f:d8:fb:55:b4:bb:c8:b8:cf:63:88:60:69:79:3d:
80:a9:9a:eb:bc:32:b4:0a:d6:50:15:65:92:42:c6:
8f:a7:73:50:7a:0a:1e:23:53:39:e1:e4:98:c3:4c:
4b:94:be:80:de:5e:b2:d5:8f:ff:9a:2b:df:88:1d:
06:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BB:D2:08:61:39:90:A2:F5:DD:86:97:03:5D:34:D7:52:8B:8E:9D
X509v3 Authority Key Identifier:
keyid:2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:73:64:6a:43:e7:90:b4:e5:ed:b6:06:28:33:df:a4:00:d7:
ba:2e:20:7b:e7:14:55:b0:fb:db:18:c4:6f:f8:3e:84:b4:66:
46:9f:04:e8:87:64:47:2c:bd:27:06:9a:c5:10:f7:c3:91:4b:
77:70:62:f1:ca:70:15:a2:6e:1c:43:77:0f:68:20:0d:ad:c0:
15:07:ba:0d:34:ee:a1:c5:55:c0:52:9e:a5:71:62:06:bf:cb:
a2:67:17:3f:e4:d7:ba:df:49:5c:c8:eb:9f:b2:37:2c:4b:4d:
f1:f7:21:77:5c:bf:5a:ad:1d:9a:ea:e6:4e:fa:83:70:91:5b:
4e:5e:6e:95:88:fa:16:89:8a:32:45:4b:3a:2c:cb:ff:06:7d:
68:4f:4c:36:f5:62:ed:55:ba:bc:5e:31:c5:2d:00:d7:5f:bf:
2a:f5:65:3b:20:e8:0d:fa:2d:2f:76:90:99:b3:88:76:c8:53:
4c:62:7f:88:37:44:89:75:70:5a:28:ef:d4:94:5b:17:8d:52:
8d:d1:a5:c1:9b:28:54:a2:24:15:d5:64:71:a6:7d:17:bc:6e:
ae:a0:f5:0a:8d:74:14:26:fd:82:86:08:2d:47:af:51:1c:e6:
34:e6:19:7d:61:0b:53:f1:52:79:fa:6f:cb:bb:e3:d3:f6:90:
d9:fe:d9:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF5J7xZJE6rlrEIs0+rAI1hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjQ2NDc1ZDdjOWJhMzk5ZjA3Zjg0MzYyMWY2ZTA4MTM3
MmQ3NTcwHhcNMjYxMDI2MTcwMDA5WhcNMjYxMDI3MTcwMDA5WjAzMTEwLwYDVQQD
Eyg1YWJiZDIwODYxMzk5MGEyZjVkZDg2OTcwMzVkMzRkNzUyOGI4ZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk91p0WaK8cpq1ITelWIJkpdUVwc
JWdsDCIlk14WQx3M2ZtvLy1BKsfzFVTXRsVobakDy3mzkTZ00Nnbb5qiW4gTUzdN
zHl+DYqjGCeQ/AI3p7RzirU+/0NSGBWfLa8JH+homnxZFqpCBw7HWbndwYOEAMPP
VTOVoM/TvIW+eswFaouUzvHGObbszxyuTC36aTe67RRTULNjbNUFhXtPeYdBWgJJ
XMx3FhhsJf92n1jR4YvLs+NRRwTXfI+tLTRm+kqP2PtVtLvIuM9jiGBpeT2AqZrr
vDK0CtZQFWWSQsaPp3NQegoeI1M54eSYw0xLlL6A3l6y1Y//mivfiB0GtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFq70ghhOZCi9d2GlwNdNNdSi46dMB8GA1UdIwQY
MBaAFC8kZHXXybo5nwf4Q2IfbggTctdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlSa2RkZkp1am1mQl9oRFloOXVDQk55MTFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kZjUyYTAtNTgyNC00MmFkLTliNGQt
ZDlhMWZhOTA4MTBmLzEvTHlSa2RkZkp1am1mQl9oRFloOXVDQk55MTFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9kZjUyYTAtNTgyNC00MmFkLTliNGQtZDlhMWZhOTA4MTBm
LzEvTHlSa2RkZkp1am1mQl9oRFloOXVDQk55MTFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnNkakPn
kLTl7bYGKDPfpADXui4ge+cUVbD72xjEb/g+hLRmRp8E6IdkRyy9JwaaxRD3w5FL
d3Bi8cpwFaJuHEN3D2ggDa3AFQe6DTTuocVVwFKepXFiBr/LomcXP+TXut9JXMjr
n7I3LEtN8fchd1y/Wq0dmurmTvqDcJFbTl5ulYj6FomKMkVLOizL/wZ9aE9MNvVi
7VW6vF4xxS0A11+/KvVlOyDoDfotL3aQmbOIdshTTGJ/iDdEiXVwWijv1JRbF41S
jdGlwZsoVKIkFdVkcaZ9F7xurqD1Co10FCb9goYILUevURzmNOYZfWELU/FSefpv
y7vj0/aQ2f7ZwA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:41:11 2026 by rpki-client