Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
File: LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json)
Hash identifier: QNJy65kFKnPtUSQ0rgfWCWfFKE3Pr2u0wmZ5B63nbv8=
Subject key identifier: 32:9F:4D:19:C3:F4:CA:4B:A5:6E:AB:54:2D:43:56:C1:5E:A8:BF:DF
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Certificate issuer: /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial: 019FCB5DE4682E2FAA0E1F66209D52DDDB3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
Manifest number: 0BE3
Signing time: Tue 04 Aug 2026 06:02:35 +0000
Manifest this update: Tue 04 Aug 2026 06:02:35 +0000
Manifest next update: Wed 05 Aug 2026 06:02:35 +0000
Files and hashes: 1: CVFC2AZT4zU7rxI78osYUeetX2c.roa (hash: ISGwaf6fRTl6b38lrffHUitVBZ3yWrYSjAcvo0Gl7Qs=)
2: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: JEpz7Lufxm1v9/GhBsZwB3vRvuWD7/WnAx66e1KLV2s=)
3: PHM1V2LiLUnh_dtpW6HSuR0CqtM.roa (hash: WaAP7/tUSsIc2V6rPX2u2qrSpkI6CsWvnNzs+Vmc/68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 06:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:5d:e4:68:2e:2f:aa:0e:1f:66:20:9d:52:dd:db:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Validity
Not Before: Aug 4 06:02:35 2026 GMT
Not After : Aug 5 06:02:35 2026 GMT
Subject: CN=329f4d19c3f4ca4ba56eab542d4356c15ea8bfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3d:6f:eb:62:94:f7:4c:7a:88:44:44:06:37:
0a:40:83:40:bb:2d:7c:2c:04:23:2c:bf:dc:70:9f:
1a:cd:03:f2:45:21:09:6f:89:01:45:a5:e6:d4:e4:
37:3e:72:cf:3b:8a:83:ef:1e:41:44:e2:8c:0c:c8:
8a:61:d3:e1:46:04:11:9d:32:05:ba:0b:f3:75:66:
4e:57:23:1c:df:df:25:ee:b3:3e:40:1d:c0:b8:f7:
18:cc:96:23:56:61:47:be:2b:26:c2:8a:f7:cd:dd:
5f:79:e0:ba:86:6a:a9:20:b2:e1:bf:7a:01:09:7b:
89:de:6b:48:9a:fc:3b:05:9a:2d:fd:d2:91:e5:68:
d8:ac:c2:1e:8b:2d:91:ba:79:a5:87:1c:64:fd:7a:
2e:0a:0d:6a:3b:3a:0c:94:f8:75:4a:ee:70:f2:15:
33:c6:a9:56:54:17:8b:8d:fb:4d:08:4d:7e:1f:ec:
5a:36:13:6c:cb:a8:78:91:a0:e7:4b:79:28:15:31:
b5:4e:33:d8:72:60:5a:c4:fb:ab:e9:d5:ec:f9:38:
f7:a7:d8:3d:d6:f0:11:b5:1a:0a:91:57:6e:aa:9f:
a4:f3:37:05:5a:55:77:16:2e:28:1c:e3:f5:1b:16:
25:52:da:9d:84:18:08:a5:94:e7:96:49:27:60:c3:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9F:4D:19:C3:F4:CA:4B:A5:6E:AB:54:2D:43:56:C1:5E:A8:BF:DF
X509v3 Authority Key Identifier:
keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:76:40:85:28:3d:ab:02:e1:a5:4c:35:f9:de:8f:6d:8d:1e:
11:f3:5a:24:9e:dd:0b:42:71:75:ac:f1:c7:4b:53:41:6b:07:
01:d2:12:53:4f:af:bd:77:34:52:27:3e:a3:4d:b2:0d:28:b1:
10:67:b8:01:8f:7a:6c:31:0d:d4:60:eb:ca:32:49:17:22:b9:
8f:f7:10:0e:e0:78:20:c1:66:86:bd:2b:3c:b6:35:28:81:7b:
40:02:ca:39:dc:88:57:32:9f:85:68:15:ca:d3:07:b3:6d:d9:
4b:b7:16:85:bf:d8:3d:28:5d:6b:d6:ce:25:ba:22:46:9e:a2:
3c:c4:ba:7c:db:8b:c0:f4:1c:66:d4:b4:e4:72:f0:ce:d5:a0:
29:91:83:5b:f1:ae:68:00:0e:79:51:25:39:fc:fb:fb:55:43:
73:3a:ae:7b:60:20:c5:73:dd:63:f5:2c:c6:eb:4f:43:89:f1:
fe:23:ce:dc:36:16:a6:dd:45:10:87:79:a8:89:7e:fa:f2:8c:
b2:5f:ab:77:36:31:d4:8b:a3:98:c0:99:14:77:11:0a:e5:3d:
bc:15:53:9d:d2:fe:fc:a1:0c:83:00:45:51:54:34:21:c8:bf:
47:13:de:54:fa:b7:25:0a:4c:65:e1:8e:fa:43:fa:34:d7:c6:
7c:91:00:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:58:37 2026 by rpki-client