Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
File: LyYGSS1O272szm3JIfOG1idM8RY.mft (raw, json)
Hash identifier: cDw99yT+s2kMk0MWuoLgVP/1BNBSV7CJEdpsjdQ0CKI=
Subject key identifier: A2:8A:7B:BF:C8:D4:C6:78:15:E4:D2:35:42:20:AD:4C:33:F7:3E:4D
Authority key identifier: 2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
Certificate issuer: /CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Certificate serial: 019D39E565E56074B68F2EE0389AF7993F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
Manifest number: 20
Signing time: Sun 29 Mar 2026 14:00:28 +0000
Manifest this update: Sun 29 Mar 2026 14:00:28 +0000
Manifest next update: Mon 30 Mar 2026 14:00:28 +0000
Files and hashes: 1: LyYGSS1O272szm3JIfOG1idM8RY.crl (hash: GY96sYYqTdYHIHtmr6et/rJOFCco8jB0PGg+FDp0H7s=)
2: QsgK3zmpC5fuQ0VVqi2BKwSAZT4.asa (hash: Ws1KiWB846RCi+ZBaMIy3xlo3+ka2MoAAIT33rXZvHU=)
3: TJmjHk7-IfOVndDk-rv5dxnB-Hg.roa (hash: Y93GXNgXRGo/l+Ahm8qFGyYePtPybIuW3rty/z9Parw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:65:e5:60:74:b6:8f:2e:e0:38:9a:f7:99:3f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Validity
Not Before: Mar 29 14:00:28 2026 GMT
Not After : Mar 30 14:00:28 2026 GMT
Subject: CN=a28a7bbfc8d4c67815e4d2354220ad4c33f73e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:c9:18:de:11:d6:0b:77:65:ca:0a:68:98:
aa:31:f0:f7:f4:85:d9:c0:01:03:49:bc:2b:ea:ac:
a5:ae:93:de:e2:82:d6:30:f4:d4:2c:44:86:5f:25:
4d:d0:6b:b8:8b:8a:21:79:5f:36:1d:13:2d:3b:a2:
c8:35:2d:4a:f8:e2:fe:98:fb:f2:d7:da:99:65:a3:
25:58:89:97:e2:d0:20:1c:fe:2a:f3:35:fe:dd:37:
3d:dd:30:bf:82:b6:d1:d7:66:90:1b:ba:ca:09:4f:
e0:6b:73:cc:51:4b:82:78:ed:02:99:b3:a7:ec:3d:
57:1b:8f:82:62:d8:ed:7e:d5:f6:d7:3c:ba:15:c7:
82:cf:f4:e8:8f:e9:39:c6:16:6e:66:fc:82:72:14:
5f:ed:35:c0:36:5b:8e:4a:07:fc:6c:a9:c8:f9:d8:
7f:85:98:b3:59:7a:8b:8f:ac:dc:3b:a5:ff:9e:c7:
a6:45:b1:42:41:0e:51:fb:b8:d1:bc:78:64:b8:ac:
36:f0:0d:42:a5:ca:74:c7:a7:c6:a2:e7:57:bd:20:
86:33:51:f1:c6:15:7e:f2:f1:dd:5b:a1:9b:d5:a5:
28:16:8e:14:e2:c4:d1:7a:4c:ce:fb:43:6a:47:50:
e5:af:3a:c8:1b:30:ca:fa:05:bd:9b:4d:2c:0e:d3:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8A:7B:BF:C8:D4:C6:78:15:E4:D2:35:42:20:AD:4C:33:F7:3E:4D
X509v3 Authority Key Identifier:
keyid:2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:3f:f4:d9:49:b8:a2:35:06:39:7d:02:1f:52:a1:0b:c3:1c:
3b:90:0e:3b:31:90:5c:67:5c:63:11:2f:34:1e:43:82:3d:c0:
79:f4:69:5f:8d:fd:e6:c5:b1:aa:ac:84:3e:5e:ca:95:67:3d:
ce:bb:aa:ec:07:bb:d2:d3:41:43:ed:a9:95:31:79:e6:39:96:
e6:cd:43:9c:ff:b3:59:0b:dd:06:d7:2e:86:57:cf:82:b3:3b:
63:99:31:1f:a3:fb:0f:1a:9a:36:61:72:06:31:fa:ab:fc:ae:
2d:78:e5:73:b4:76:d4:4b:67:f0:f2:41:a5:99:01:01:64:42:
ed:7f:cd:7d:8d:da:9c:6d:32:f0:e3:6f:a6:b3:da:89:26:64:
59:4a:cf:a8:99:24:10:ac:a1:6c:f6:88:57:42:67:f9:f1:67:
11:d5:9a:67:76:b7:4a:47:f1:b9:97:52:3e:44:bc:04:36:7d:
04:d9:fc:93:99:6c:74:a7:bf:82:02:90:e3:74:07:f1:1c:4b:
cd:0a:0e:e3:4a:0c:b4:ab:b1:98:d5:03:09:60:52:ae:04:50:
21:db:13:93:1a:ec:99:16:a5:63:ac:b0:53:84:26:a2:44:0b:
8a:01:d7:6e:ba:dd:c9:0e:8e:dc:c9:1c:cc:26:8c:4f:8e:19:
6b:7f:0a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:31 2026 by rpki-client