Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
File: LyytEgqv-e_ffGlZpOBHDj4GJPA.mft (raw, json)
Hash identifier: mlD8SYIiau95wbpTMRHWHRKIJUjGyQGq9V0TRdLGhBs=
Subject key identifier: 10:53:24:4D:9B:8F:CC:C3:8F:0F:75:84:3C:B4:39:8A:EA:7C:F4:B7
Authority key identifier: 2F:2C:AD:12:0A:AF:F9:EF:DF:7C:69:59:A4:E0:47:0E:3E:06:24:F0
Certificate issuer: /CN=2f2cad120aaff9efdf7c6959a4e0470e3e0624f0
Certificate serial: 019EFBDE48BE9A7573CF28C57CE4C60AB40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
Manifest number: 0144
Signing time: Wed 24 Jun 2026 23:01:49 +0000
Manifest this update: Wed 24 Jun 2026 23:01:49 +0000
Manifest next update: Thu 25 Jun 2026 23:01:49 +0000
Files and hashes: 1: Hu4XjK4kmNzJLAM6_ajtwBsbj0A.roa (hash: ChkZxtf+f4NVFn48swM6zD1dQ21c3QT2WX6YtJDB51E=)
2: LyytEgqv-e_ffGlZpOBHDj4GJPA.crl (hash: SLuzjg+ilABjA7zR9ybfGAdp5ATlDbj86JqrLF3h6dU=)
3: oGY7ywjzIawiazxfJPdxsbpKwRU.asa (hash: bPFAxXTZvoR90j3k/VjW0y0gMph9xG0NmXzKwHJV27k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:de:48:be:9a:75:73:cf:28:c5:7c:e4:c6:0a:b4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2cad120aaff9efdf7c6959a4e0470e3e0624f0
Validity
Not Before: Jun 24 23:01:49 2026 GMT
Not After : Jun 25 23:01:49 2026 GMT
Subject: CN=1053244d9b8fccc38f0f75843cb4398aea7cf4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:e2:ea:26:6d:da:9f:9a:75:b4:4e:90:e5:
e6:a3:89:2c:bf:f2:ad:56:52:bd:cd:b9:67:9f:32:
07:e6:cd:1f:06:2f:74:c1:92:92:ca:85:5f:d4:0e:
a3:2a:8b:0b:49:ee:77:3e:36:00:a8:b4:57:df:6c:
8d:5d:71:d7:99:bb:28:30:b7:13:3d:8b:60:3f:c6:
3b:83:22:82:72:1e:68:ca:72:25:50:fb:47:32:28:
93:c2:6a:40:7b:de:44:13:db:63:87:09:4e:27:4f:
51:a6:5c:99:f0:9d:fa:b7:77:d9:66:e6:a8:e7:8b:
fd:6c:60:11:75:10:6b:3d:88:4f:98:cc:a4:2e:71:
20:71:34:93:78:8b:10:98:b0:19:b2:44:38:d7:98:
d4:b6:67:fc:39:16:ca:5d:d6:ff:a2:9b:1a:5c:cd:
bd:4e:2c:97:dc:b3:2f:30:5d:8d:d6:2d:e9:f5:f1:
5b:3f:14:b6:d8:6f:19:1c:65:c9:cb:ac:38:64:93:
56:b4:77:cd:09:d0:6e:cb:86:e6:4a:9b:19:bc:57:
e1:d9:3d:4b:f3:06:6d:53:0d:d2:c0:ef:c5:8b:e7:
89:31:11:26:bc:ef:9f:83:2d:88:fb:82:2f:a2:69:
6b:47:ec:3e:79:31:f5:77:c2:8a:82:69:cc:d3:c6:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:53:24:4D:9B:8F:CC:C3:8F:0F:75:84:3C:B4:39:8A:EA:7C:F4:B7
X509v3 Authority Key Identifier:
keyid:2F:2C:AD:12:0A:AF:F9:EF:DF:7C:69:59:A4:E0:47:0E:3E:06:24:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:86:d7:04:ea:ea:dc:6a:4d:72:68:e3:ae:c9:a2:8e:15:97:
a6:3c:c9:85:3f:e7:ad:1e:b4:02:ba:d9:61:c2:49:e5:e1:b1:
75:c4:8d:54:14:2c:cc:bd:d3:6f:63:80:af:b0:b4:0b:e4:ae:
4e:60:9e:6f:b0:f5:a9:02:f1:d0:81:c5:54:d1:32:d0:47:5c:
4c:77:66:d8:00:96:97:ce:5e:5f:24:fa:98:bb:61:0c:be:76:
32:e2:94:cf:2c:af:15:86:8d:a1:9e:50:f5:fb:0c:56:00:8f:
7d:35:3e:7f:04:f9:90:21:64:21:1e:14:e1:a1:53:80:ab:ba:
99:0a:60:aa:5b:83:6a:38:db:e7:63:b8:f5:dd:8e:7e:96:93:
09:44:a1:2c:ad:fe:cf:d4:8e:f3:77:38:c8:09:8d:3a:ec:1c:
b5:bb:3e:77:bd:1b:19:49:a9:27:4b:0e:03:fd:43:ec:0b:22:
ce:dd:fc:b3:3a:9f:b7:a9:d2:2f:d3:fe:d2:8e:af:56:c9:16:
1d:e1:40:d2:6f:0d:ac:27:ef:ed:fb:de:5d:dc:99:84:8c:80:
eb:6a:38:d2:46:50:a5:41:9b:b7:78:53:9e:2c:49:3b:e4:de:
e1:90:fe:72:f2:8e:87:f5:38:cd:d0:6d:6d:af:09:38:6c:ad:
68:9b:7b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:29:20 2026 by rpki-client