Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
File: LyytEgqv-e_ffGlZpOBHDj4GJPA.mft (raw, json)
Hash identifier: 31G4OTvXsiuR2eY/QjYZ9UXFJOB7DS4zEWXLfm1xzEY=
Subject key identifier: 73:07:B7:CF:84:50:30:22:68:8A:25:A7:8A:CA:EF:54:7E:1D:7B:7C
Authority key identifier: 2F:2C:AD:12:0A:AF:F9:EF:DF:7C:69:59:A4:E0:47:0E:3E:06:24:F0
Certificate issuer: /CN=2f2cad120aaff9efdf7c6959a4e0470e3e0624f0
Certificate serial: 019DDE0CB723618836B078D54B76DAB4BA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
Manifest number: B0
Signing time: Thu 30 Apr 2026 11:01:08 +0000
Manifest this update: Thu 30 Apr 2026 11:01:08 +0000
Manifest next update: Fri 01 May 2026 11:01:08 +0000
Files and hashes: 1: Hu4XjK4kmNzJLAM6_ajtwBsbj0A.roa (hash: ChkZxtf+f4NVFn48swM6zD1dQ21c3QT2WX6YtJDB51E=)
2: LyytEgqv-e_ffGlZpOBHDj4GJPA.crl (hash: fdhPkqDpItR521zcQH7nlcLbeCqvPiOtD/Yzgla3WR8=)
3: oGY7ywjzIawiazxfJPdxsbpKwRU.asa (hash: bPFAxXTZvoR90j3k/VjW0y0gMph9xG0NmXzKwHJV27k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:0c:b7:23:61:88:36:b0:78:d5:4b:76:da:b4:ba:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2cad120aaff9efdf7c6959a4e0470e3e0624f0
Validity
Not Before: Apr 30 11:01:08 2026 GMT
Not After : May 1 11:01:08 2026 GMT
Subject: CN=7307b7cf84503022688a25a78acaef547e1d7b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:da:33:02:ba:4f:44:77:73:2d:34:d9:63:95:
14:cb:36:e3:23:45:45:fe:5b:25:42:bd:10:09:09:
e9:85:5c:07:ed:42:4b:4c:ee:23:e0:2d:46:e5:24:
a7:4e:e8:81:7b:69:1d:fc:bb:17:e5:bb:a0:de:75:
04:4a:02:60:c6:e1:40:b5:2c:ff:8f:6f:78:1c:8c:
bd:8f:cb:50:3d:7f:85:a7:f0:18:51:a6:ff:57:11:
a6:dd:21:93:3e:0b:d7:75:cf:28:61:3e:cc:d6:83:
b8:d2:a5:a5:53:e2:1a:3a:be:42:bf:df:e5:e0:fb:
40:24:76:c6:8c:ae:13:f6:4e:87:89:c6:b4:c8:9c:
f7:35:4b:ea:6a:0b:1c:5d:dc:59:bf:15:11:32:05:
4a:ad:83:f7:da:d2:d4:ce:af:c7:a1:df:a6:c9:97:
e9:69:f8:f0:b3:a7:96:16:f5:6f:79:1e:93:0a:af:
dd:ac:27:cc:a3:27:5a:cc:fb:f6:bb:0e:3f:24:bc:
d4:79:65:32:73:02:f5:5a:a7:b0:0b:16:d5:de:3a:
93:f5:7e:68:9b:43:cc:96:d4:9c:e4:62:73:03:00:
ac:fb:62:64:89:28:ed:06:e0:9f:b8:dd:9a:76:52:
0a:f1:56:3a:7b:d0:c3:1f:18:48:0b:84:d0:1c:7c:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:07:B7:CF:84:50:30:22:68:8A:25:A7:8A:CA:EF:54:7E:1D:7B:7C
X509v3 Authority Key Identifier:
keyid:2F:2C:AD:12:0A:AF:F9:EF:DF:7C:69:59:A4:E0:47:0E:3E:06:24:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:26:39:3b:59:a3:a8:df:dc:81:68:f1:89:62:9c:fb:24:1c:
72:82:77:90:58:f7:b4:15:68:be:cd:28:32:4f:5d:06:22:b6:
9d:ef:f3:09:c3:0f:ca:0e:02:6b:c2:14:f9:0b:7f:49:63:da:
67:f8:66:ef:93:b5:15:f3:61:ce:64:c7:cb:3c:89:36:cc:3c:
f6:f2:ce:2c:1f:43:3c:04:fd:18:18:f9:9c:3d:e1:71:a8:f4:
ba:d3:12:86:e5:6c:62:32:d3:90:be:8d:e8:0b:7c:53:43:26:
08:a3:a6:b1:d1:18:13:60:cb:e4:89:a7:03:aa:82:bd:e6:31:
83:33:d5:92:39:2e:bb:1c:e8:04:bc:7a:02:cb:bb:3a:ac:3d:
94:5b:0e:c5:57:37:6d:09:65:62:a8:1c:38:75:9d:a4:9c:0b:
fc:6d:1c:e6:a5:41:0f:88:af:68:cd:85:28:59:ab:95:07:77:
18:ba:35:4d:d3:f5:f1:05:44:d7:d2:27:bc:2e:cd:95:87:cc:
1e:56:b0:af:30:59:2a:87:96:59:b7:9b:52:b3:ca:cf:85:ee:
7f:3d:c4:71:22:b4:11:43:d6:a5:ce:69:c5:3b:23:42:47:3d:
ea:61:ad:e3:f3:3b:dc:03:e8:30:30:5d:fd:b8:b5:5d:e1:91:
b9:36:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:58:34 2026 by rpki-client