Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
File: LYFCGstXhBVGXs3sRYHoleu_vH8.mft (raw, json)
Hash identifier: dJRPEJLgJE5vRUvBhEsXpWA6ATqZSO6w+A88b8px6Ys=
Subject key identifier: 59:85:73:3B:2C:25:96:70:79:31:10:E0:95:07:58:69:FE:C0:1C:76
Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
Certificate issuer: /CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Certificate serial: 019D37F7637B5EA486BA33B6824EE886298D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
Manifest number: 02ED
Signing time: Sun 29 Mar 2026 05:00:52 +0000
Manifest this update: Sun 29 Mar 2026 05:00:52 +0000
Manifest next update: Mon 30 Mar 2026 05:00:52 +0000
Files and hashes: 1: LYFCGstXhBVGXs3sRYHoleu_vH8.crl (hash: d2FcMRoPgqjBzgINKAob+7yVjaxE4lHbZZ3fPhfKvBI=)
2: RML1TmbAZYHpyU26wWj03FjR3yY.roa (hash: PPBAB3g4x0UYNx5LUtlXQ+fhrj8l5E6PaVsjyetSSNY=)
3: v-yW23PUKxeOnQqPJF0a9ieiqkY.roa (hash: QA7GggYLqUF36MqITz5Sp/J8Iu+lSl6lGyrVjXlucb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:63:7b:5e:a4:86:ba:33:b6:82:4e:e8:86:29:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Validity
Not Before: Mar 29 05:00:52 2026 GMT
Not After : Mar 30 05:00:52 2026 GMT
Subject: CN=5985733b2c259670793110e095075869fec01c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:fd:98:2a:fc:15:f4:d4:00:67:1b:68:d9:
f1:0d:c5:8a:99:89:8d:63:c4:94:42:31:8b:42:b5:
40:91:f8:00:89:6a:22:62:40:73:37:63:89:be:de:
2d:05:44:4f:e8:29:86:6c:27:c0:11:51:9d:9f:47:
56:54:aa:85:70:81:6d:23:60:a8:28:92:3e:a9:7a:
f4:44:49:82:95:70:da:79:87:9e:98:e8:c2:70:a0:
09:17:73:74:dd:7c:5f:1f:6b:03:b5:22:de:73:c5:
7c:26:a2:9a:de:0c:cc:c2:23:8e:4f:bb:e3:fd:c1:
7c:f6:2d:be:63:ad:0b:0c:0e:89:de:fe:ee:a3:04:
55:32:da:c3:67:4f:06:52:75:c6:79:40:1d:36:12:
f8:1b:3b:02:4f:04:f8:8b:9e:49:b6:7d:9b:eb:8a:
4d:54:95:f9:8d:a8:22:6a:e2:95:b4:aa:d1:db:ce:
56:6d:94:4b:d1:95:4c:ab:08:28:fd:15:b1:70:0e:
21:a0:fb:3c:29:b0:ee:8b:c7:92:61:71:cc:01:6c:
69:47:5a:28:46:26:73:ec:2e:31:5e:e6:6d:fd:8a:
72:44:e0:5e:06:50:de:a9:7b:d9:37:79:7e:24:67:
ae:84:c2:65:8e:77:5d:14:b2:87:47:c6:13:d0:80:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:85:73:3B:2C:25:96:70:79:31:10:E0:95:07:58:69:FE:C0:1C:76
X509v3 Authority Key Identifier:
keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:af:95:ae:a9:3d:1c:51:ad:76:51:5d:96:c4:9f:0a:2b:d6:
08:eb:9f:a8:be:56:cd:ba:1b:9b:ce:ca:2f:ff:09:c2:33:db:
7b:99:cf:4f:82:54:66:7b:88:c7:51:fa:f2:6c:7f:ad:2f:24:
15:25:40:8f:77:ed:54:a2:89:40:00:2a:e2:56:57:2d:b6:32:
24:cf:13:7c:3f:51:67:94:41:90:4c:58:d8:6c:21:3c:dc:38:
d4:3a:b3:bf:4a:02:c9:ef:cc:28:16:9b:9c:36:5b:b3:ca:dc:
46:0d:4b:36:ff:44:90:79:5a:cc:5c:f7:6a:cb:66:34:94:ee:
c3:00:23:6a:14:97:79:bb:19:70:4d:7a:d8:f9:9e:e6:bb:ea:
60:3f:76:5c:84:ca:a8:58:15:27:34:1a:63:3c:14:4e:74:0a:
1f:a2:28:de:38:ff:70:50:f7:ba:83:39:30:27:27:38:0c:38:
91:39:8c:3a:ee:46:3a:cd:82:a8:91:2d:00:82:1a:59:94:be:
c6:8f:8f:a6:19:cf:e7:fb:26:8b:82:d8:25:69:f8:04:07:ef:
34:ff:40:7e:7c:b0:7c:c2:89:d6:aa:81:47:89:02:87:fd:f3:
2e:a1:9e:71:1a:96:4f:6e:c4:4d:b6:12:af:33:af:a4:c7:00:
d5:95:57:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:19 2026 by rpki-client