Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
File: LyYGSS1O272szm3JIfOG1idM8RY.mft (raw, json)
Hash identifier: Npsy/ezW92bCy5GgxAsXNAfyScg/a/RtPVZDND/XNd0=
Subject key identifier: 5B:69:04:B0:36:75:8F:BF:8E:00:0D:6A:04:28:1F:F7:3A:16:25:9B
Authority key identifier: 2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
Certificate issuer: /CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Certificate serial: 019F111C65BD048089FCC12D118570F06E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
Manifest number: 0114
Signing time: Mon 29 Jun 2026 02:01:41 +0000
Manifest this update: Mon 29 Jun 2026 02:01:41 +0000
Manifest next update: Tue 30 Jun 2026 02:01:41 +0000
Files and hashes: 1: LyYGSS1O272szm3JIfOG1idM8RY.crl (hash: oOscyXs1xIVlIiLfYvPyyMDx1XfX2JWIK+VM+NBBrls=)
2: QsgK3zmpC5fuQ0VVqi2BKwSAZT4.asa (hash: Ws1KiWB846RCi+ZBaMIy3xlo3+ka2MoAAIT33rXZvHU=)
3: TJmjHk7-IfOVndDk-rv5dxnB-Hg.roa (hash: Y93GXNgXRGo/l+Ahm8qFGyYePtPybIuW3rty/z9Parw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1c:65:bd:04:80:89:fc:c1:2d:11:85:70:f0:6e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Validity
Not Before: Jun 29 02:01:41 2026 GMT
Not After : Jun 30 02:01:41 2026 GMT
Subject: CN=5b6904b036758fbf8e000d6a04281ff73a16259b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f3:1d:88:18:0f:66:13:62:c7:f0:1e:c3:93:
f7:be:6f:ff:6b:11:e8:d7:0d:a0:64:c7:ee:15:69:
2d:45:48:c1:08:4e:5e:21:89:28:6a:4d:98:f9:fa:
d7:f3:c4:98:7f:e8:f6:22:c5:62:88:e5:61:3e:dc:
d6:4a:dd:32:f8:0e:fe:26:51:1f:63:e5:4c:d4:b2:
a9:6b:19:a2:27:2e:73:a1:8e:bc:72:e4:0f:39:a7:
01:ee:75:87:66:e1:2b:50:27:3c:0a:77:8a:1e:4c:
23:51:98:ce:76:c8:e6:63:fa:ce:1f:3f:5f:db:ec:
f8:c3:09:0f:69:73:17:52:ce:b7:3b:00:1e:ff:65:
c1:fc:13:33:ca:b4:b1:a5:94:bf:62:2d:b4:51:a1:
c7:6f:63:36:58:5e:b3:85:ab:4f:08:f0:10:2f:db:
a8:e3:fe:7b:f8:06:15:3e:38:63:55:cb:93:5b:b2:
f3:c3:57:c4:d7:b5:44:ca:a5:b2:22:1d:e1:03:eb:
4b:e5:3e:e3:3d:59:43:a9:0e:23:21:74:08:c8:cb:
3c:db:55:dc:89:a4:cf:0a:ee:05:0e:b9:9e:f4:d1:
be:0c:81:55:fa:bf:31:27:4d:a6:68:9c:c8:33:f2:
79:22:a2:e7:b1:18:7c:68:e9:72:ca:d5:c8:ef:9b:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:69:04:B0:36:75:8F:BF:8E:00:0D:6A:04:28:1F:F7:3A:16:25:9B
X509v3 Authority Key Identifier:
keyid:2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8a:bd:27:eb:ca:58:87:4e:e2:f5:dc:6e:de:31:95:4e:32:
b3:5c:c7:f9:b5:21:8f:52:38:34:c5:2d:36:8d:8b:c4:2c:ec:
23:04:b9:27:80:de:ed:b1:a7:2e:29:ca:83:f0:d4:f5:1f:a2:
81:1d:62:23:6f:2d:05:8a:d2:33:92:ac:32:0a:31:40:f3:2f:
78:8e:1b:b3:5a:17:b2:7b:ed:c4:c1:71:fd:e1:6a:7b:27:f6:
6a:e9:ce:51:eb:f4:5c:0c:5e:1a:35:d3:10:09:26:93:51:f1:
39:9f:72:97:03:5a:13:e1:57:19:39:40:c7:64:ee:52:81:0d:
94:1d:e3:d9:cc:9b:fb:16:81:1f:85:ff:f0:03:04:a2:69:5e:
c7:e7:86:62:10:84:01:59:c7:6b:85:24:17:ab:ea:d0:a7:b2:
be:d6:ac:c4:b6:b4:83:0b:17:d1:a6:6a:1f:72:06:5a:f3:51:
25:af:3b:9f:fc:15:9b:d9:a9:05:94:f2:14:2d:38:f3:46:ca:
e2:31:8f:a6:89:fa:15:2b:04:a7:a4:ce:44:2b:21:bd:e1:8f:
f2:e3:2d:96:e5:f7:c4:f1:9f:32:70:b3:75:26:80:30:3a:82:
ac:52:8c:89:3a:f9:8e:1b:ee:40:33:01:b0:53:86:5c:1d:1f:
c2:a3:0a:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RHGW9BICJ/MEtEYVw8G5IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjYwNjQ5MmQ0ZWRiYmRhY2NlNmRjOTIxZjM4NmQ2Mjc0
Y2YxMTYwHhcNMjYwNjI5MDIwMTQxWhcNMjYwNjMwMDIwMTQxWjAzMTEwLwYDVQQD
Eyg1YjY5MDRiMDM2NzU4ZmJmOGUwMDBkNmEwNDI4MWZmNzNhMTYyNTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfMdiBgPZhNix/Aew5P3vm//axHo
1w2gZMfuFWktRUjBCE5eIYkoak2Y+frX88SYf+j2IsViiOVhPtzWSt0y+A7+JlEf
Y+VM1LKpaxmiJy5zoY68cuQPOacB7nWHZuErUCc8CneKHkwjUZjOdsjmY/rOHz9f
2+z4wwkPaXMXUs63OwAe/2XB/BMzyrSxpZS/Yi20UaHHb2M2WF6zhatPCPAQL9uo
4/57+AYVPjhjVcuTW7Lzw1fE17VEyqWyIh3hA+tL5T7jPVlDqQ4jIXQIyMs821Xc
iaTPCu4FDrme9NG+DIFV+r8xJ02maJzIM/J5IqLnsRh8aOlyytXI75vPWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtpBLA2dY+/jgANagQoH/c6FiWbMB8GA1UdIwQY
MBaAFC8mBkktTtu9rM5tySHzhtYnTPEWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlZR1NTMU8yNzJzem0zSklmT0cxaWRNOFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82MWFjZjUtYmFmNy00NDU1LWI3NjEt
MDk0ZmZlMDBiODc5LzEvTHlZR1NTMU8yNzJzem0zSklmT0cxaWRNOFJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS82MWFjZjUtYmFmNy00NDU1LWI3NjEtMDk0ZmZlMDBiODc5
LzEvTHlZR1NTMU8yNzJzem0zSklmT0cxaWRNOFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoIq9J+vK
WIdO4vXcbt4xlU4ys1zH+bUhj1I4NMUtNo2LxCzsIwS5J4De7bGnLinKg/DU9R+i
gR1iI28tBYrSM5KsMgoxQPMveI4bs1oXsnvtxMFx/eFqeyf2aunOUev0XAxeGjXT
EAkmk1HxOZ9ylwNaE+FXGTlAx2TuUoENlB3j2cyb+xaBH4X/8AMEomlex+eGYhCE
AVnHa4UkF6vq0KeyvtasxLa0gwsX0aZqH3IGWvNRJa87n/wVm9mpBZTyFC0480bK
4jGPpon6FSsEp6TORCshveGP8uMtluX3xPGfMnCzdSaAMDqCrFKMiTr5jhvuQDMB
sFOGXB0fwqMKlA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:21 2026 by rpki-client