Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
File: LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json)
Hash identifier: zQ6EECaqBRgFdPdNNeaMQu5+YMb+nYaTLO+QBBKK20A=
Subject key identifier: 03:0C:27:12:3F:AF:1B:A2:8F:77:FB:14:23:50:62:74:55:C8:DD:9D
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Certificate issuer: /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial: 019DDCFAB99CDE88B941554077E0793AE1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
Manifest number: 0AE3
Signing time: Thu 30 Apr 2026 06:01:52 +0000
Manifest this update: Thu 30 Apr 2026 06:01:52 +0000
Manifest next update: Fri 01 May 2026 06:01:52 +0000
Files and hashes: 1: CVFC2AZT4zU7rxI78osYUeetX2c.roa (hash: ISGwaf6fRTl6b38lrffHUitVBZ3yWrYSjAcvo0Gl7Qs=)
2: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: XRqtsp9lbgx1uricJZkHK2d3vXwtjcqmBb6gqDmGQf4=)
3: PHM1V2LiLUnh_dtpW6HSuR0CqtM.roa (hash: WaAP7/tUSsIc2V6rPX2u2qrSpkI6CsWvnNzs+Vmc/68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:fa:b9:9c:de:88:b9:41:55:40:77:e0:79:3a:e1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Validity
Not Before: Apr 30 06:01:52 2026 GMT
Not After : May 1 06:01:52 2026 GMT
Subject: CN=030c27123faf1ba28f77fb142350627455c8dd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:0c:31:e0:10:63:06:c9:25:33:52:52:03:
f7:6c:aa:3f:92:ea:e7:ac:9a:9b:3d:06:e0:c3:39:
68:d5:67:fd:25:5c:bf:3d:53:d7:5f:37:2f:9c:3d:
09:d6:02:27:0c:9a:d6:d0:14:7c:80:89:bc:18:46:
b5:98:a9:b3:11:15:70:4d:94:5d:63:a9:07:db:64:
0d:66:68:9f:be:35:94:9d:5d:4d:2f:9f:94:02:4e:
69:b8:11:65:3d:e8:6c:69:a7:7e:af:84:ee:31:0e:
c5:aa:e1:6d:88:fa:ff:2f:af:0c:b4:63:3d:a3:76:
38:ab:f6:ac:61:4d:09:8b:ec:af:b8:47:c9:75:ab:
00:60:4d:a0:43:20:7b:e6:95:49:27:7d:e6:34:d7:
c3:da:2b:db:01:ac:e2:fc:67:81:9c:8c:f6:50:9b:
1a:f2:81:84:03:03:88:93:3c:e7:b1:6d:c7:b6:ef:
3d:1e:48:fd:cc:fe:b8:a4:83:f3:2f:b9:5d:00:25:
ff:ef:de:ed:54:03:af:1f:9a:09:2e:79:6d:e9:8b:
e3:8c:95:a7:f5:38:f1:15:42:89:04:7c:74:d6:25:
80:21:7c:b8:f5:8d:67:b1:bf:0a:2f:ae:f1:80:68:
81:f0:dc:77:fe:b7:db:c2:d0:ee:1c:63:12:77:56:
68:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0C:27:12:3F:AF:1B:A2:8F:77:FB:14:23:50:62:74:55:C8:DD:9D
X509v3 Authority Key Identifier:
keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:60:1b:6d:17:ae:5a:88:96:be:d5:95:28:22:10:42:6a:ef:
66:bb:83:21:df:19:df:92:1e:2c:59:7a:4b:cd:02:d2:c2:ee:
a0:c2:cb:0c:9e:6a:eb:ff:3c:17:f8:b1:87:0b:a6:ac:3f:5f:
5d:a6:bb:14:24:76:20:71:3a:fc:c2:95:b3:14:e4:90:09:91:
04:14:5c:28:6b:08:d5:84:3b:6e:14:cd:cf:67:7d:42:10:02:
49:7a:7d:fb:f7:b7:1f:e7:4c:a8:11:b7:3b:db:60:f0:0e:e0:
2f:df:2b:15:83:cc:59:63:6b:6e:ef:46:cc:6d:65:f0:77:03:
57:ae:ba:35:6c:ee:d0:21:59:c7:cf:cb:92:04:74:3d:75:a8:
e7:36:14:d4:0f:ce:64:40:5f:91:b5:16:32:b0:0b:6c:c8:b0:
a1:6c:ca:39:47:9b:03:4c:e5:fb:61:bf:78:3a:69:49:ae:e0:
51:2c:e4:7c:33:6b:01:1d:d8:96:b5:0c:b6:80:51:9e:08:31:
09:c3:7d:50:8c:bd:0b:1a:6e:0d:4b:19:b3:4b:5e:92:c3:99:
2a:3b:f7:d7:a2:45:cb:59:f1:5b:aa:e9:9a:6a:e1:11:eb:51:
65:ea:6f:68:a0:5e:3e:0d:d9:6d:bf:d6:5b:a1:74:cb:a5:a1:
38:99:5d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:47:42 2026 by rpki-client