Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
File: LyRkddfJujmfB_hDYh9uCBNy11c.mft (raw, json)
Hash identifier: IIrisZTtfVuYABK2nMpIOeaiGn3YlI/lR0rYrEkaMZg=
Subject key identifier: 44:50:A0:E1:DD:56:FB:B6:B8:E0:4B:F1:F9:28:C8:A8:4F:01:2B:B8
Authority key identifier: 2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
Certificate issuer: /CN=2f246475d7c9ba399f07f843621f6e081372d757
Certificate serial: 019D37F6DEF068CAF4A372B7471879651874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
Manifest number: 088D
Signing time: Sun 29 Mar 2026 05:00:18 +0000
Manifest this update: Sun 29 Mar 2026 05:00:18 +0000
Manifest next update: Mon 30 Mar 2026 05:00:18 +0000
Files and hashes: 1: LyRkddfJujmfB_hDYh9uCBNy11c.crl (hash: kow9lQTucSXcqOiIuJp1K8C/Bu0H4U1fDCKdFhNdF2M=)
2: rGAms1z6A-9ECUjJ26qD00dFB5M.roa (hash: TneAOJ5ow61DGzqx3O0Ri/mEpaW4EBKjztqT5e9vxSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:de:f0:68:ca:f4:a3:72:b7:47:18:79:65:18:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f246475d7c9ba399f07f843621f6e081372d757
Validity
Not Before: Mar 29 05:00:18 2026 GMT
Not After : Mar 30 05:00:18 2026 GMT
Subject: CN=4450a0e1dd56fbb6b8e04bf1f928c8a84f012bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:da:d1:be:6a:f1:f5:0a:c2:3b:f7:82:f3:
14:3f:11:5d:d7:d1:0e:a3:7e:fb:85:46:b8:64:39:
f7:a1:b6:83:cf:2f:74:54:a1:1b:34:fd:85:e3:d7:
2e:52:a5:dd:a2:e9:27:e2:f8:ce:46:3d:97:9c:df:
0a:b8:58:fd:29:5d:06:db:69:99:2a:11:ae:56:84:
61:e5:ae:1d:95:d6:fa:ed:e0:1e:d9:e2:3f:60:ce:
81:af:8f:5f:ad:8f:f4:68:8b:4e:92:cb:13:7b:6c:
db:14:1a:86:2e:74:fe:3a:34:33:58:7c:18:4a:84:
7f:f6:07:08:d1:38:cc:ac:b8:76:0d:18:23:4a:db:
db:26:c7:b1:e2:ab:43:b0:e0:ab:5e:34:db:08:da:
6c:a2:5b:91:10:82:45:88:04:15:3e:1e:96:21:d0:
44:71:f6:34:5c:42:48:54:ff:a3:c2:01:1c:d6:e3:
5e:ec:a8:c6:d5:54:a9:80:22:57:89:a8:71:2d:2e:
6e:82:dd:6b:57:61:c9:9b:5b:b3:dd:78:cf:00:54:
75:2c:60:b9:ef:14:10:21:5b:48:7d:c2:b6:d9:aa:
e5:ca:da:7a:e3:48:20:6c:d6:2e:95:20:86:84:47:
fe:35:fb:d8:6c:db:c8:5a:bf:84:90:31:2e:4d:fd:
62:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:50:A0:E1:DD:56:FB:B6:B8:E0:4B:F1:F9:28:C8:A8:4F:01:2B:B8
X509v3 Authority Key Identifier:
keyid:2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:54:9e:f3:b6:64:c1:ca:a2:37:16:df:b3:d6:f1:50:40:fc:
43:12:e5:2c:f9:c3:c4:71:c2:cf:04:f5:b3:9a:55:82:b6:f7:
c2:dc:56:c9:1d:cf:fa:6d:fb:9d:19:86:10:c0:19:77:4a:61:
55:6e:95:d7:81:f1:05:5a:d4:0c:0c:dc:39:7f:cd:c9:a9:ca:
ae:dc:88:f1:d1:bd:6b:ab:78:ee:ad:a9:a0:61:fb:31:13:c4:
eb:6c:c7:7d:80:bc:fa:0c:5d:41:d1:71:ca:79:de:59:07:b9:
10:0c:e0:50:ea:b3:4c:d0:9c:84:6b:1f:f5:29:8d:4b:a1:83:
2f:eb:09:06:70:90:43:43:5e:f1:c7:1f:cc:90:78:46:a6:82:
da:f0:3a:97:66:ea:5f:bb:07:df:4b:0c:2e:7c:ae:49:08:6c:
b2:f4:06:28:0b:9a:50:e7:12:f4:ef:a1:d8:65:f2:68:6b:12:
74:45:01:f4:f0:cd:96:aa:84:c0:b5:d1:ca:f1:e8:c4:2a:d0:
13:0b:49:52:e9:62:db:c5:8f:4e:6a:4a:31:9c:93:28:fa:e8:
6b:c6:c8:95:f6:f0:27:7f:e3:08:28:4a:ce:9b:f7:86:03:15:
c2:c5:ae:e8:25:45:d4:6b:3a:b5:12:f7:88:75:46:13:4b:15:
8d:ea:f4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:30 2026 by rpki-client