Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
File: lywzrtjvsmnTdEgT0oxTYJLnzzg.mft (raw, json)
Hash identifier: N7JlQpqOaJH8WAh/ynVtSQiixc/dm4eH0BEr9zmr2Ds=
Subject key identifier: DC:7C:8F:C2:7A:1F:F9:8E:A5:DE:8D:26:4C:CE:FE:46:40:47:CA:A3
Authority key identifier: 97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
Certificate issuer: /CN=972c33aed8efb269d3744813d28c536092e7cf38
Certificate serial: 019D37F7160D1510E8F7EEA1E7F094EEDB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
Manifest number: 0E60
Signing time: Sun 29 Mar 2026 05:00:33 +0000
Manifest this update: Sun 29 Mar 2026 05:00:33 +0000
Manifest next update: Mon 30 Mar 2026 05:00:33 +0000
Files and hashes: 1: lywzrtjvsmnTdEgT0oxTYJLnzzg.crl (hash: iCLxRpE39d1+jLoebdNeSqMEuQkofXuvEqff8KznCxU=)
2: qyXjUdsyD8Ul_eSPbkKBBLkd-QY.roa (hash: K5SK7KsksSiQa/QO/NP+4NIGvbz4hbAkl2e3OiIRMxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:16:0d:15:10:e8:f7:ee:a1:e7:f0:94:ee:db:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=972c33aed8efb269d3744813d28c536092e7cf38
Validity
Not Before: Mar 29 05:00:33 2026 GMT
Not After : Mar 30 05:00:33 2026 GMT
Subject: CN=dc7c8fc27a1ff98ea5de8d264ccefe464047caa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:9b:84:b9:3a:77:7c:88:11:24:f0:39:74:
cc:a0:39:af:61:02:26:ee:79:97:79:f5:25:5f:bc:
fd:93:f0:d9:d2:fd:8a:96:c8:f1:db:71:93:38:a9:
8f:d5:53:c8:32:06:a6:f3:9b:02:37:ec:18:e6:47:
64:68:83:96:12:44:ac:6d:e0:f5:8b:eb:88:8f:86:
5a:ff:58:a8:a6:d1:7c:5b:9e:1a:31:f3:4f:86:6d:
5f:8b:8a:cc:87:72:ba:5b:fc:24:d4:39:57:05:e3:
4e:ff:a7:c9:23:9c:22:f2:f9:18:74:78:dc:e6:49:
fd:f6:53:c9:95:cf:e4:aa:a3:e3:8b:59:42:ce:da:
f5:78:01:70:76:23:2c:34:4e:36:c6:ae:2d:f8:0c:
1d:32:d8:d8:16:dc:34:bf:61:8a:e3:82:2c:28:0f:
ba:7b:40:ea:c1:65:f1:24:19:ee:c3:66:af:82:06:
22:c9:c9:15:c8:e5:6f:68:60:cc:a3:0d:e9:62:62:
14:6e:a8:f6:b8:b3:17:c5:62:87:c0:97:35:7e:b3:
c9:02:c4:85:7f:98:27:9c:b8:6c:a0:8e:80:c6:f8:
d9:0f:3b:8c:36:d8:d1:c8:0c:ee:cd:b8:36:e9:ad:
6f:3f:58:f0:af:7f:37:95:34:a4:0d:9c:53:ec:1e:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7C:8F:C2:7A:1F:F9:8E:A5:DE:8D:26:4C:CE:FE:46:40:47:CA:A3
X509v3 Authority Key Identifier:
keyid:97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7b:3f:df:1d:98:56:f9:94:99:3d:d7:49:72:8b:81:93:2d:
8e:4e:f8:c2:ee:db:59:ac:48:67:ad:67:09:1f:8d:25:fb:67:
84:7b:39:03:f7:da:87:26:08:e9:b1:c6:cf:62:43:17:e4:1f:
76:72:c2:55:03:5c:f4:4a:7c:a4:9f:e1:b8:53:d1:6a:ff:45:
c0:ca:86:d4:e4:1c:d9:e7:4a:32:e4:40:51:4a:92:ea:0a:46:
b0:d4:ff:e8:a6:18:14:e2:3e:2e:c3:d2:30:8d:3b:8f:cf:e2:
13:f9:ca:2e:2d:78:d4:db:df:ff:bb:44:63:ea:5e:55:ce:09:
21:32:21:27:53:15:25:59:22:96:a6:2f:37:64:d4:26:92:82:
99:76:99:a8:a1:1c:4c:63:38:a9:94:5f:32:48:df:0c:2d:56:
e1:b6:b2:fd:56:59:15:61:be:62:2c:bb:00:10:c7:0b:6d:08:
16:ca:9c:06:30:04:db:a9:7a:ff:bb:31:cd:fe:34:0b:37:a2:
3d:c1:c5:fb:7a:be:5f:75:3b:5c:c3:41:17:27:1e:f9:43:5e:
84:4d:95:b8:6f:1c:bc:b8:ff:58:27:6a:be:51:49:bd:37:ee:
23:00:00:8b:b7:6d:25:54:94:20:d8:98:47:43:4c:7b:92:13:
e5:76:55:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:28 2026 by rpki-client