Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
File: LyYGSS1O272szm3JIfOG1idM8RY.mft (raw, json)
Hash identifier: nkmCa+2yWBcLORqiDA1mKdwPK5pise2D296Xo6b+gak=
Subject key identifier: 07:BA:30:8D:16:E6:46:61:91:4B:4A:8E:B4:B2:68:3C:FE:12:C8:F2
Authority key identifier: 2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
Certificate issuer: /CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Certificate serial: 01A03894F53C4F23D06FC7E14425527CD699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
Manifest number: 01AD
Signing time: Tue 25 Aug 2026 11:01:21 +0000
Manifest this update: Tue 25 Aug 2026 11:01:21 +0000
Manifest next update: Wed 26 Aug 2026 11:01:21 +0000
Files and hashes: 1: LyYGSS1O272szm3JIfOG1idM8RY.crl (hash: nmdnIhX9kf/p56Ivz83N+mdjJhTRfe4DiFTEhqDeDcc=)
2: QsgK3zmpC5fuQ0VVqi2BKwSAZT4.asa (hash: Ws1KiWB846RCi+ZBaMIy3xlo3+ka2MoAAIT33rXZvHU=)
3: TJmjHk7-IfOVndDk-rv5dxnB-Hg.roa (hash: Y93GXNgXRGo/l+Ahm8qFGyYePtPybIuW3rty/z9Parw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:94:f5:3c:4f:23:d0:6f:c7:e1:44:25:52:7c:d6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Validity
Not Before: Aug 25 11:01:21 2026 GMT
Not After : Aug 26 11:01:21 2026 GMT
Subject: CN=07ba308d16e64661914b4a8eb4b2683cfe12c8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:83:c9:35:77:d0:0d:a0:ed:21:31:43:be:
95:e3:6f:dd:32:52:ff:ce:f2:25:90:77:cb:60:17:
d4:d9:ca:45:8c:63:72:6b:22:98:b5:6c:27:52:ca:
20:ae:42:8b:c3:d1:0a:05:5c:1f:c5:d8:1d:ac:86:
bb:13:ae:e7:d7:92:b2:79:38:32:e8:36:59:c0:61:
5f:ee:ab:12:ba:cb:e4:ff:53:26:ae:24:f1:60:a6:
b7:8a:a0:fc:31:d6:af:dd:92:7a:06:5e:7d:85:ef:
94:39:83:5e:5b:14:7e:b3:9e:fd:fd:5b:e7:62:f7:
3f:c6:0f:d4:6d:67:87:df:75:3c:8f:6a:e0:d5:ac:
81:58:50:79:e8:7e:a8:0e:89:27:fa:5b:2e:e6:11:
52:50:32:6c:cb:09:62:c4:3d:01:68:24:45:ca:89:
cc:56:32:f1:25:bc:5e:ca:41:48:a1:eb:c1:62:12:
58:29:24:25:a5:61:8f:73:6f:4c:01:8e:cc:df:c6:
45:3f:83:e6:4b:7b:33:99:90:ea:29:1a:23:01:b7:
2a:29:0f:a3:5a:36:ac:6d:d9:19:76:f1:dd:1e:3f:
e7:aa:94:47:c0:25:16:23:1b:5a:cb:48:ff:60:7c:
88:0d:d8:e0:fa:c8:e6:a7:f9:12:5a:79:79:a4:18:
aa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BA:30:8D:16:E6:46:61:91:4B:4A:8E:B4:B2:68:3C:FE:12:C8:F2
X509v3 Authority Key Identifier:
keyid:2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:00:60:86:6e:6d:74:53:14:1c:81:c4:18:9c:0d:a2:5c:6f:
a2:4a:b2:da:d0:f8:bc:53:a9:63:88:2e:7d:12:b3:c3:be:c3:
2b:dd:6a:2a:fe:85:a4:c2:d0:3d:53:5c:e4:33:e6:76:3d:cd:
48:94:31:54:96:5f:eb:f2:6c:15:3e:ae:05:7b:ec:36:4b:06:
20:95:3d:4e:30:d6:7c:2a:ab:ac:de:10:38:dd:3d:49:d4:f5:
b5:06:2c:f3:18:05:94:07:d3:cb:03:61:5a:bb:d0:53:af:ea:
8b:c8:f3:9d:36:36:e6:9c:1a:5b:83:9d:47:e7:34:c2:65:ca:
8b:bd:4f:79:5f:81:65:96:6e:14:5e:25:07:74:9d:73:f8:8d:
8f:5b:a6:d4:19:1e:e9:aa:48:d0:06:01:f2:dc:28:aa:d5:e4:
08:be:6c:42:d7:43:70:68:0c:65:fa:26:c6:42:8b:dc:b9:e3:
35:cd:e9:5d:e5:d2:30:1b:03:c0:53:ab:a8:2f:16:59:d6:55:
6e:a4:58:2f:3a:e3:65:4c:e5:b3:dd:e8:50:65:00:0c:28:95:
d5:6e:6d:cc:ff:67:0d:98:66:ed:0d:96:45:54:91:7c:67:94:
a8:7b:e6:4a:7f:42:86:1d:66:68:a7:19:3d:d5:88:e8:9f:d2:
5e:b7:a8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 19:21:37 2026 by rpki-client