Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
File: LyytEgqv-e_ffGlZpOBHDj4GJPA.mft (raw, json)
Hash identifier: 6Ajl5ynWnE5nnstzBc3Xn65wJU8qCT5bD2JvgY0eGKY=
Subject key identifier: 86:5E:11:93:04:9B:ED:36:5F:BA:BA:5D:B5:76:F4:9B:14:62:80:FF
Authority key identifier: 2F:2C:AD:12:0A:AF:F9:EF:DF:7C:69:59:A4:E0:47:0E:3E:06:24:F0
Certificate issuer: /CN=2f2cad120aaff9efdf7c6959a4e0470e3e0624f0
Certificate serial: 019CF45FD6B7A2BE9AD6CBFAAF474C67B73C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
Manifest number: 37
Signing time: Mon 16 Mar 2026 02:00:47 +0000
Manifest this update: Mon 16 Mar 2026 02:00:47 +0000
Manifest next update: Tue 17 Mar 2026 02:00:47 +0000
Files and hashes: 1: Hu4XjK4kmNzJLAM6_ajtwBsbj0A.roa (hash: ChkZxtf+f4NVFn48swM6zD1dQ21c3QT2WX6YtJDB51E=)
2: LyytEgqv-e_ffGlZpOBHDj4GJPA.crl (hash: WJ64jESyaJOEYhCjx60+M4LVEQA9OGnM6mrq79GbezU=)
3: oGY7ywjzIawiazxfJPdxsbpKwRU.asa (hash: bPFAxXTZvoR90j3k/VjW0y0gMph9xG0NmXzKwHJV27k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f4:5f:d6:b7:a2:be:9a:d6:cb:fa:af:47:4c:67:b7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2cad120aaff9efdf7c6959a4e0470e3e0624f0
Validity
Not Before: Mar 16 02:00:47 2026 GMT
Not After : Mar 17 02:00:47 2026 GMT
Subject: CN=865e1193049bed365fbaba5db576f49b146280ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0b:16:29:e1:bb:a4:7a:79:ff:5b:9a:f7:d1:
03:9f:fd:b6:7b:32:6a:ea:73:77:69:7b:74:43:80:
4c:d7:3c:16:73:91:8b:73:8b:f1:f0:4f:f2:6d:6c:
37:8c:6d:fe:e8:56:7e:07:a5:3e:11:35:d4:4d:95:
a1:37:9c:a1:49:45:70:ed:44:a5:dc:5e:44:3a:4e:
3a:9a:d9:41:eb:f1:e4:ab:e4:87:ab:d2:08:61:62:
8a:02:cb:5b:db:72:a6:aa:85:ce:ff:e1:65:e0:d4:
8a:9d:f3:8e:51:1f:a7:d1:a2:95:49:2a:ae:00:3e:
97:db:eb:01:c2:f1:2e:0f:49:2b:be:ff:89:32:99:
c0:75:a4:63:a6:f6:94:0a:c8:02:a3:58:56:51:27:
cb:5f:e7:ae:4e:74:40:75:a5:e0:f5:10:8a:90:71:
20:e0:49:a3:2b:82:cf:c1:93:2b:fa:2d:f1:ce:0c:
12:75:e6:d1:3f:22:4c:02:13:4a:9e:74:4d:60:19:
7b:e2:c9:cc:8a:19:32:a6:06:1d:33:a0:82:2e:07:
50:72:b4:ea:c5:bf:48:32:55:66:f4:94:c6:6a:b4:
16:2b:85:52:bd:75:fe:d7:f8:2e:5f:39:dc:41:ab:
05:58:a8:3d:8e:d2:c4:66:3d:89:09:15:d0:b9:ae:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5E:11:93:04:9B:ED:36:5F:BA:BA:5D:B5:76:F4:9B:14:62:80:FF
X509v3 Authority Key Identifier:
keyid:2F:2C:AD:12:0A:AF:F9:EF:DF:7C:69:59:A4:E0:47:0E:3E:06:24:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e7:ef:2b:38:ec:9d:d8:16:28:74:74:df:b3:5a:a2:af:49:
8c:4c:20:75:cc:09:ea:8b:b4:bb:df:ac:5b:40:4d:bd:dc:41:
f1:64:83:2a:9d:1b:ba:6e:87:a6:8e:24:02:5b:0a:c5:3e:ff:
17:43:a7:93:42:4e:2c:44:06:6a:18:c9:a3:c9:9e:b6:7d:32:
9d:2b:ed:dd:1b:48:20:98:56:b7:bd:38:ff:59:ad:7c:0d:54:
54:e2:ab:4c:3d:71:e7:27:27:1c:7b:42:16:13:46:28:5f:40:
86:f1:45:41:6a:30:66:15:57:4d:25:e7:56:cc:9d:96:c1:2d:
27:48:28:a3:b7:2e:89:c6:a2:2b:0d:01:fa:51:47:10:69:6e:
5e:a7:46:5a:36:11:be:81:57:2e:cd:2c:87:ae:fa:b7:05:1e:
9e:04:64:73:d4:8a:9d:12:5c:4a:6d:7f:17:6d:e8:8b:5c:f7:
e0:00:1d:ba:f2:cb:8d:ba:8f:43:3e:00:c5:94:03:57:6c:3b:
e5:f8:c3:f5:81:c7:83:b2:56:c8:7b:8b:8c:81:a0:1c:30:1c:
86:03:04:46:13:48:c0:ee:42:c4:01:51:f6:23:83:43:2b:cb:
60:32:e1:f0:98:7c:10:93:e6:ea:a8:ce:2d:80:bc:e5:3f:3c:
33:65:5b:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz0X9a3or6a1sv6r0dMZ7c8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMmNhZDEyMGFhZmY5ZWZkZjdjNjk1OWE0ZTA0NzBlM2Uw
NjI0ZjAwHhcNMjYwMzE2MDIwMDQ3WhcNMjYwMzE3MDIwMDQ3WjAzMTEwLwYDVQQD
Eyg4NjVlMTE5MzA0OWJlZDM2NWZiYWJhNWRiNTc2ZjQ5YjE0NjI4MGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQsWKeG7pHp5/1ua99EDn/22ezJq
6nN3aXt0Q4BM1zwWc5GLc4vx8E/ybWw3jG3+6FZ+B6U+ETXUTZWhN5yhSUVw7USl
3F5EOk46mtlB6/Hkq+SHq9IIYWKKAstb23KmqoXO/+Fl4NSKnfOOUR+n0aKVSSqu
AD6X2+sBwvEuD0krvv+JMpnAdaRjpvaUCsgCo1hWUSfLX+euTnRAdaXg9RCKkHEg
4EmjK4LPwZMr+i3xzgwSdebRPyJMAhNKnnRNYBl74snMihkypgYdM6CCLgdQcrTq
xb9IMlVm9JTGarQWK4VSvXX+1/guXzncQasFWKg9jtLEZj2JCRXQua7AOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZeEZMEm+02X7q6XbV29JsUYoD/MB8GA1UdIwQY
MBaAFC8srRIKr/nv33xpWaTgRw4+BiTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHl5dEVncXYtZV9mZkdsWnBPQkhEajRHSlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8xNDNlMzMtOTMxMi00NTRmLWE5OWUt
Y2FhNjU4NGU5OTE2LzEvTHl5dEVncXYtZV9mZkdsWnBPQkhEajRHSlBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8xNDNlMzMtOTMxMi00NTRmLWE5OWUtY2FhNjU4NGU5OTE2
LzEvTHl5dEVncXYtZV9mZkdsWnBPQkhEajRHSlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkefvKzjs
ndgWKHR037Naoq9JjEwgdcwJ6ou0u9+sW0BNvdxB8WSDKp0bum6Hpo4kAlsKxT7/
F0Onk0JOLEQGahjJo8metn0ynSvt3RtIIJhWt704/1mtfA1UVOKrTD1x5ycnHHtC
FhNGKF9AhvFFQWowZhVXTSXnVsydlsEtJ0goo7cuicaiKw0B+lFHEGluXqdGWjYR
voFXLs0sh676twUengRkc9SKnRJcSm1/F23oi1z34AAduvLLjbqPQz4AxZQDV2w7
5fjD9YHHg7JWyHuLjIGgHDAchgMERhNIwO5CxAFR9iODQyvLYDLh8Jh8EJPm6qjO
LYC85T88M2VbQw==
-----END CERTIFICATE-----
Generated at Mon Mar 16 07:59:07 2026 by rpki-client