Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
File: LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json)
Hash identifier: hrNG9Rv1trjUoJoOGRZmd8DPhOAEsa/KjOZUtQKnMWU=
Subject key identifier: D0:2E:A9:B1:56:F8:12:05:21:A8:3B:C2:A5:4D:6C:2B:3A:04:D1:0E
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Certificate issuer: /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial: 01A1DE70ADC0CC363E0A7B773B9D26642C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
Manifest number: 0CF6
Signing time: Sun 15 Nov 2026 09:01:28 +0000
Manifest this update: Sun 15 Nov 2026 09:01:28 +0000
Manifest next update: Mon 16 Nov 2026 09:01:28 +0000
Files and hashes: 1: CVFC2AZT4zU7rxI78osYUeetX2c.roa (hash: ISGwaf6fRTl6b38lrffHUitVBZ3yWrYSjAcvo0Gl7Qs=)
2: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: BypqY98aqFvu18h+9cO54OO0UGB3oXrJ4KX1AM7ivJk=)
3: PHM1V2LiLUnh_dtpW6HSuR0CqtM.roa (hash: WaAP7/tUSsIc2V6rPX2u2qrSpkI6CsWvnNzs+Vmc/68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:ad:c0:cc:36:3e:0a:7b:77:3b:9d:26:64:2c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Validity
Not Before: Nov 15 09:01:28 2026 GMT
Not After : Nov 16 09:01:28 2026 GMT
Subject: CN=d02ea9b156f8120521a83bc2a54d6c2b3a04d10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:85:62:37:b0:23:09:a9:76:c6:cb:f6:c7:
79:9d:1a:8f:88:d6:a6:0e:15:5c:8a:05:26:e2:4f:
97:0f:11:2c:63:a7:64:58:a2:e0:f9:46:e7:88:30:
a2:be:a3:e3:6f:30:25:b6:12:b0:32:8e:23:d9:32:
1d:c0:11:b6:de:f8:69:44:2c:90:3b:42:7a:f4:a9:
86:4f:28:da:b6:f2:97:ea:6d:96:37:fb:01:d2:6a:
91:ef:ce:f7:bc:e3:69:96:34:16:d5:85:70:cd:9c:
4a:bb:fb:5c:66:15:32:2b:20:42:b2:3d:5e:6b:9d:
16:c2:42:1d:e5:5e:c0:a1:9d:7e:16:30:01:d0:c0:
ae:26:9f:e1:bd:24:b1:6c:06:71:9f:ef:59:26:6f:
c3:da:b5:c8:c9:2e:25:fd:f6:c0:c2:d4:c4:90:79:
f8:ae:72:ef:55:62:c0:d3:b1:02:bb:40:ce:aa:e0:
fc:7d:e3:ae:9f:4a:7a:06:5d:2a:ce:ee:45:a2:49:
75:1a:3e:e3:a8:7b:97:ce:5b:e3:53:9e:d9:d2:7b:
1c:e2:7a:39:05:07:f4:bd:cb:1a:22:a9:9f:89:24:
ed:c4:2a:8c:05:54:c4:05:89:13:39:c8:7a:b2:c8:
8a:a4:f0:d9:36:a5:8b:88:6d:c4:33:3e:1e:f8:25:
ed:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2E:A9:B1:56:F8:12:05:21:A8:3B:C2:A5:4D:6C:2B:3A:04:D1:0E
X509v3 Authority Key Identifier:
keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:72:5c:b9:67:a5:cf:28:f4:4e:f4:14:06:48:a0:7c:d0:33:
af:d9:b7:e3:af:8e:d1:6f:aa:3e:bd:56:4e:2d:f3:cd:78:38:
5d:1c:a6:dd:1b:3c:7d:04:3b:2f:53:06:7e:05:0e:17:62:b6:
ee:0d:16:ba:02:3c:d3:5f:c2:f5:c4:10:2c:d1:63:64:fe:0d:
dc:96:6f:78:63:77:55:9e:42:47:93:c5:c9:fa:ab:fa:77:7a:
5f:51:78:bc:e5:8d:45:42:81:92:87:de:d1:61:72:41:08:4a:
8e:9e:7f:cc:27:0a:84:a9:68:03:7c:d1:5d:4c:2a:3e:57:43:
5c:ed:a3:7c:13:ec:45:05:03:d6:b0:c8:a7:a2:7e:b7:11:a3:
10:f4:c2:0d:6d:a3:65:a3:4a:1b:14:52:9a:ae:0b:93:aa:65:
c4:13:fa:26:cd:e6:94:f7:4f:0c:42:f2:d2:38:58:62:c5:f3:
bd:3e:8d:95:4e:ee:95:01:30:fe:ae:d0:91:3e:26:cd:97:ef:
21:0e:69:a0:a1:ea:d0:fc:6a:be:1d:53:51:50:a3:0f:8c:89:
5b:8d:6b:b4:76:f2:2b:16:9c:c1:98:5b:91:b8:d8:15:d0:03:
71:e0:b1:20:e5:88:b2:d6:80:25:5e:47:b8:bb:0c:58:81:5b:
f2:df:58:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:43:31 2026 by rpki-client