Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier: hYEjyOg8usFMYvOS581nLMKjjXa5l4vnSr5uJHWCJ4M=
Subject key identifier: 15:52:CB:4C:89:44:34:35:38:06:4D:D3:A0:25:31:EE:0A:4F:60:BE
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial: 019D096745B0C2C81AF04C5CEABD5060AF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number: 077F
Signing time: Fri 20 Mar 2026 04:00:56 +0000
Manifest this update: Fri 20 Mar 2026 04:00:56 +0000
Manifest next update: Sat 21 Mar 2026 04:00:56 +0000
Files and hashes: 1: LMnW7BQw6VTniWIkmWbGGaakoOg.roa (hash: Xvh7VVkZUVV7AZo3Wz6W7iZLuuYv1DelOXPWWhTcB8A=)
2: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: 9Osqu4V6NsvFjgzb2cdszLGSAEkE6JR4EtVSZQ2Cdh4=)
3: q8TRW-nxF77mnHW626ye6CxptZs.roa (hash: tsP4mbqeyfW3lJKs8auJSMWq6KIkEBqI6CN97FBqDPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:09:67:45:b0:c2:c8:1a:f0:4c:5c:ea:bd:50:60:af:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Validity
Not Before: Mar 20 04:00:56 2026 GMT
Not After : Mar 21 04:00:56 2026 GMT
Subject: CN=1552cb4c8944343538064dd3a02531ee0a4f60be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:93:17:ad:5f:8f:6e:ff:81:37:75:7d:7d:
79:cc:a6:1a:de:b8:49:f5:fb:17:2a:cf:32:84:83:
b9:68:f9:9a:8b:cd:ee:45:67:68:11:8e:67:da:4a:
46:89:a3:d0:4b:3e:35:f7:af:c5:97:08:55:d3:04:
72:a1:c3:ed:48:34:63:91:d7:b7:c4:e9:9d:e8:f0:
ef:ac:1a:eb:b2:a8:00:33:66:19:4e:5b:8e:1f:b7:
79:b9:93:f5:8f:2d:40:be:a6:58:b3:5e:dc:47:7d:
f2:93:51:40:56:33:37:5f:5e:b6:56:c7:36:7f:32:
b3:27:2a:02:47:92:cf:4b:14:e4:9f:3a:09:ff:39:
3d:21:9f:75:13:77:86:61:48:54:0c:29:1e:d4:c4:
a3:6d:7e:31:f7:58:12:f3:76:a0:61:8e:cf:14:84:
bb:b9:e4:98:5b:13:61:e5:84:d0:7a:3b:2b:16:38:
e0:bc:10:b5:75:f4:72:db:ad:a8:78:90:76:f8:77:
0f:83:79:94:e8:0d:00:11:b5:65:89:e7:cb:9e:67:
7a:8e:e4:65:b4:fa:f1:b4:73:c3:ef:f0:07:c3:ef:
cb:c7:4b:9e:a5:e9:29:aa:79:4a:ef:18:42:74:5e:
be:f0:50:8c:39:fb:0f:29:69:55:a4:1c:ab:af:94:
4c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:52:CB:4C:89:44:34:35:38:06:4D:D3:A0:25:31:EE:0A:4F:60:BE
X509v3 Authority Key Identifier:
keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:08:20:9d:ba:51:14:3a:5a:84:10:32:09:80:3a:c1:cf:e1:
e3:a0:b4:ee:ed:b5:f6:01:9d:a8:d4:c0:b1:87:ce:4c:1e:e5:
35:41:1b:3f:a0:c9:c8:bf:b8:38:e2:62:e3:f5:b8:ed:14:96:
ad:a0:00:8b:a8:c9:d1:58:15:32:d8:c5:66:48:b9:32:a4:17:
21:b4:c0:1e:5d:a5:f4:e5:32:d5:66:3d:97:fa:d1:39:73:78:
c1:ce:27:4f:07:69:77:6d:2e:b8:62:3c:e9:9e:43:b6:77:0d:
c7:2d:ea:19:0d:92:97:0d:7d:54:ca:ab:25:a9:a0:a5:6d:eb:
8c:6d:d5:e7:99:98:7f:1d:ec:c4:ab:d2:72:24:22:42:71:54:
b3:44:99:3a:b4:4c:60:71:e8:c1:d3:71:40:1b:40:72:a8:51:
b8:e9:23:34:ce:7c:ae:21:5f:c1:be:ca:c5:28:8c:1d:86:19:
82:d9:2d:c2:b2:76:57:c3:4f:9c:29:8c:d4:93:c4:05:1a:11:
74:e0:34:34:40:80:ec:22:7f:ea:bf:28:30:da:41:59:08:25:
03:ee:c6:31:7b:2c:01:fe:9b:5f:3d:58:9b:79:e4:6c:b4:99:
74:4a:20:91:04:68:65:98:e6:87:d2:da:9a:28:57:35:8b:d5:
f6:fd:44:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 11:30:38 2026 by rpki-client