Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier: suiXWEhQfPyxG6LUDFgQOy4JJkaAr2A76nz8dTPkOqE=
Subject key identifier: BC:89:EF:78:9C:4F:99:38:6C:4F:21:60:0D:6C:83:3C:B6:25:5A:49
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial: 019DF8DEF8BE552F2CF79D5EF881A0B56E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number: 07FB
Signing time: Tue 05 May 2026 16:00:55 +0000
Manifest this update: Tue 05 May 2026 16:00:55 +0000
Manifest next update: Wed 06 May 2026 16:00:55 +0000
Files and hashes: 1: LMnW7BQw6VTniWIkmWbGGaakoOg.roa (hash: Xvh7VVkZUVV7AZo3Wz6W7iZLuuYv1DelOXPWWhTcB8A=)
2: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: /8D8fWhglbY1ngpZo9K+FgiCkO3beYvhMHtfjm4j+ro=)
3: q8TRW-nxF77mnHW626ye6CxptZs.roa (hash: tsP4mbqeyfW3lJKs8auJSMWq6KIkEBqI6CN97FBqDPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:de:f8:be:55:2f:2c:f7:9d:5e:f8:81:a0:b5:6e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Validity
Not Before: May 5 16:00:55 2026 GMT
Not After : May 6 16:00:55 2026 GMT
Subject: CN=bc89ef789c4f99386c4f21600d6c833cb6255a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:3f:f3:0d:ba:cd:4c:04:e1:49:0b:50:2d:
1e:30:14:94:d6:23:b1:5b:71:e1:23:47:d3:26:6d:
2e:39:3d:b4:3e:bc:c4:ec:39:f8:e0:d8:8f:90:1b:
00:39:c2:c0:69:28:62:11:16:e7:1a:88:95:c7:7f:
6e:f4:cb:77:4f:c9:c9:a6:d9:f4:4e:39:a6:1b:a3:
1f:77:5f:99:28:22:a2:78:4a:54:65:0f:c9:8c:45:
64:ae:0d:f1:d8:92:11:44:66:a3:3c:cd:dc:c5:5f:
a8:f3:d4:ba:16:ec:b5:68:cf:81:99:27:e8:9a:a2:
64:9b:1f:b2:1b:a9:cb:66:82:7c:19:6c:b0:1b:91:
50:c7:73:21:b7:20:76:b8:eb:69:22:9f:a5:01:c3:
4d:ba:66:f2:0f:11:bd:ef:dc:a5:3b:77:3a:de:83:
29:46:40:df:73:df:e3:66:04:1b:89:ef:ee:89:8f:
c7:04:2d:47:de:46:84:7f:d5:6f:64:cd:11:4d:e3:
be:9f:80:30:2d:14:c1:9d:3c:bb:4e:b8:56:76:be:
52:1f:79:d9:0b:85:44:3b:68:79:c9:df:72:bf:49:
91:f3:cb:b3:4d:11:67:fb:23:31:71:3f:c2:b7:43:
5a:f8:99:7c:4a:57:3b:1c:c7:d2:48:53:40:0c:63:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:89:EF:78:9C:4F:99:38:6C:4F:21:60:0D:6C:83:3C:B6:25:5A:49
X509v3 Authority Key Identifier:
keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c2:54:23:79:6c:ed:06:bf:0c:ef:cb:23:61:4b:a1:ae:da:
08:58:a3:84:71:b3:17:46:28:96:c3:5d:7e:71:51:7a:37:96:
b4:87:87:d5:73:c5:12:60:22:61:39:bb:28:86:b8:cf:34:31:
7b:be:d8:ba:04:f9:00:5d:7b:9b:6e:40:cb:fb:d4:8a:74:b4:
ac:6f:70:a8:19:88:a8:15:26:6d:2d:d0:03:dc:98:f0:77:b8:
60:80:e5:77:3f:7f:44:8c:50:86:fa:a4:2b:f1:59:78:3f:e3:
9e:ca:71:0d:4e:42:f6:07:9c:8d:44:a9:f4:49:9f:12:a5:61:
51:48:5c:eb:da:18:f7:88:c7:99:9b:91:b2:db:06:32:00:78:
1b:97:9d:1c:bd:c9:09:d9:d7:c4:3d:bd:c9:06:88:f1:42:17:
7d:50:8b:65:e9:e8:e9:80:fc:f9:a6:98:99:7d:7a:e9:af:ce:
5d:b9:d2:b4:eb:bf:42:9d:fc:cb:4d:f1:b3:6a:3d:ce:b2:23:
a8:a6:87:56:1d:c9:cf:bc:03:15:d1:11:11:35:8f:8f:4f:c3:
62:0c:74:21:71:7e:58:a0:b6:a7:1f:27:1e:6c:8f:d9:b6:a2:
62:fa:fc:74:36:10:bb:a5:2f:43:75:95:eb:39:b9:7c:72:c1:
be:1d:8a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:25 2026 by rpki-client