Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
File: LyYGSS1O272szm3JIfOG1idM8RY.mft (raw, json)
Hash identifier: rZl8cLs1fjXTDHdyp4lVMi0m0gIPKj51zonnnvY++24=
Subject key identifier: 55:3F:CB:55:5C:40:EC:87:62:20:0B:77:1D:4F:24:A3:AB:85:F8:D9
Authority key identifier: 2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
Certificate issuer: /CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Certificate serial: 019E295DF905315F6B3434C87A56AF01537E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
Manifest number: 9C
Signing time: Fri 15 May 2026 02:01:24 +0000
Manifest this update: Fri 15 May 2026 02:01:24 +0000
Manifest next update: Sat 16 May 2026 02:01:24 +0000
Files and hashes: 1: LyYGSS1O272szm3JIfOG1idM8RY.crl (hash: mPILNoAOOmxZ+78qbAWSEGba0d3OM61SzP+aPfbRbVA=)
2: QsgK3zmpC5fuQ0VVqi2BKwSAZT4.asa (hash: Ws1KiWB846RCi+ZBaMIy3xlo3+ka2MoAAIT33rXZvHU=)
3: TJmjHk7-IfOVndDk-rv5dxnB-Hg.roa (hash: Y93GXNgXRGo/l+Ahm8qFGyYePtPybIuW3rty/z9Parw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:f9:05:31:5f:6b:34:34:c8:7a:56:af:01:53:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Validity
Not Before: May 15 02:01:24 2026 GMT
Not After : May 16 02:01:24 2026 GMT
Subject: CN=553fcb555c40ec8762200b771d4f24a3ab85f8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:65:f2:b3:e5:ac:14:54:52:8f:b3:84:a7:
25:e5:ff:f4:52:7f:5c:d0:26:49:71:08:ab:f2:8d:
f0:95:d9:35:81:95:d7:a4:73:1c:7c:80:83:46:39:
1b:80:96:13:cc:d6:76:dd:59:fd:94:b8:74:1d:51:
57:4e:8c:cd:c5:67:1d:6f:15:64:d4:5f:13:c7:d9:
73:ec:32:77:af:86:8d:d2:74:50:87:20:06:46:ad:
e2:70:05:00:ed:7b:bc:7a:da:8a:ff:97:53:d7:4e:
90:b3:41:2a:19:69:4c:26:9d:cb:d3:53:7f:fc:20:
ed:05:3a:7b:6b:7e:54:64:e5:2b:c9:6c:be:a7:e5:
1f:0c:a5:8d:1d:b7:46:ef:19:43:1b:f7:94:3c:67:
9a:48:4e:14:ca:5b:f6:28:78:86:52:08:59:74:f3:
85:05:9c:87:16:a8:22:78:ea:3e:31:2a:52:96:54:
a8:56:62:5a:94:5f:e7:bc:c7:5d:2a:7f:d9:87:18:
5d:c6:ba:e6:04:d4:fc:3d:9a:a9:3b:7e:d3:ec:84:
93:51:56:8c:58:c1:3f:21:59:17:15:db:96:38:7a:
67:57:97:c3:d5:e0:b3:00:7e:12:e8:b4:a7:ee:a1:
8e:6b:39:9f:19:5f:8b:78:37:6b:c4:58:ba:1b:da:
5a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3F:CB:55:5C:40:EC:87:62:20:0B:77:1D:4F:24:A3:AB:85:F8:D9
X509v3 Authority Key Identifier:
keyid:2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ad:a5:cf:d0:2c:f5:25:a1:78:97:2e:3e:7a:4a:2b:b4:9f:
87:db:42:7e:72:96:44:5a:d2:f2:8c:0b:e0:ed:e9:66:c0:ec:
4a:47:a2:51:1a:0f:07:36:f0:cd:97:c8:5c:d5:b4:0a:6e:ab:
e0:0a:0d:aa:ad:31:8b:3d:d0:60:2a:bc:1e:c0:a6:36:37:e5:
cc:cc:a4:2c:19:a9:1c:f4:a6:d6:e9:41:8e:ad:1c:fd:16:0f:
b8:d2:b9:f8:c4:7e:6b:6b:6c:69:07:ab:46:73:b0:d0:60:2d:
02:d4:3b:e2:88:1d:74:b3:75:81:18:35:3b:58:4c:19:ff:2f:
eb:16:e1:50:da:90:e9:0c:38:30:6e:ab:75:c8:6a:c3:70:92:
4c:4e:0a:44:23:57:1e:bf:56:19:79:db:36:29:2f:0d:7a:a9:
7a:96:7d:f3:e6:bd:8c:52:b6:87:09:0a:49:c5:00:6e:ab:91:
13:ff:7c:62:45:84:94:6c:f7:af:42:a9:ba:e0:b1:fc:25:1a:
fc:6d:ab:bc:b2:de:f9:99:c2:39:26:61:c3:84:7b:60:18:45:
2b:d1:23:2f:e3:c0:d9:c7:c9:6e:c5:13:7f:c7:17:88:79:bf:
7c:a6:89:ff:46:48:29:95:c4:20:a8:a1:68:4f:2d:fa:fb:8e:
95:0b:50:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:22:09 2026 by rpki-client