Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
File: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft (raw, json)
Hash identifier: yAC4kSNO02soDwrG3FjFkI/629R2KEhZWa+KTFxccSo=
Subject key identifier: 7A:24:5A:42:AE:33:17:8A:AD:5D:E9:CA:AD:69:50:EC:02:D3:B5:CD
Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Certificate serial: 019CABD8F4AF00DD3D15C0028D235C0B33D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
Manifest number: 1102
Signing time: Mon 02 Mar 2026 00:00:48 +0000
Manifest this update: Mon 02 Mar 2026 00:00:48 +0000
Manifest next update: Tue 03 Mar 2026 00:00:48 +0000
Files and hashes: 1: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl (hash: AU46uUaokoPYuTfk2zahUs7yGmhyrr4A0EpDaFzUkUk=)
2: qzDVPJjwkiKMmIw2RcHgiamnABM.roa (hash: xT+W6De5eWZz4XKVbRVPuP+LFXCQC6a/MFcFgjxi2KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f4:af:00:dd:3d:15:c0:02:8d:23:5c:0b:33:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Validity
Not Before: Mar 2 00:00:48 2026 GMT
Not After : Mar 3 00:00:48 2026 GMT
Subject: CN=7a245a42ae33178aad5de9caad6950ec02d3b5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:7d:bc:e7:47:f5:7f:7d:a7:31:c8:8f:4f:
26:37:44:f5:72:e4:35:cb:75:21:e0:e8:c1:5e:bc:
13:4f:fe:95:ee:e1:8e:65:57:2b:e0:27:9f:20:cd:
51:22:dd:40:ee:ab:63:ed:92:39:f7:10:54:29:ec:
78:f7:65:65:74:36:72:65:98:7d:1e:b5:21:96:d0:
68:a3:ce:ea:80:0f:55:d2:a9:6e:c7:3f:58:05:80:
19:ce:fa:00:ad:ec:10:3f:76:62:99:c5:ab:9f:ee:
2e:d2:8d:72:f5:ac:2e:a2:30:f4:52:ae:db:fb:d1:
80:a7:1e:81:a4:d7:84:1c:30:47:d9:ee:11:ee:a0:
38:82:5e:f4:21:91:3a:d4:2b:53:a6:98:24:c2:47:
c1:bb:0b:2c:bf:fc:22:52:4c:7f:03:1b:66:a8:21:
2a:9f:b2:9a:ee:71:a9:9f:18:96:d7:b8:d2:55:2e:
68:30:71:48:09:00:2b:81:0a:bf:2e:c9:f6:71:4c:
15:83:67:9e:f5:1b:4e:39:a3:f8:40:b6:c5:71:76:
af:a4:a4:5f:cc:6e:8e:66:79:6f:a8:af:7f:40:ec:
f8:15:ff:96:b0:5b:34:d0:cf:7f:14:98:ac:69:ad:
b5:1a:36:7e:16:a1:54:96:88:a4:29:86:80:93:9b:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:24:5A:42:AE:33:17:8A:AD:5D:E9:CA:AD:69:50:EC:02:D3:B5:CD
X509v3 Authority Key Identifier:
keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:bf:23:76:4e:60:7a:68:7b:eb:92:9a:aa:c2:96:31:1d:70:
cd:bf:d2:56:3f:c2:84:d7:cd:20:01:9b:fa:59:43:80:7f:ce:
89:1c:37:35:12:32:11:2f:ec:85:1b:35:03:47:0d:f7:1d:e6:
9a:a4:bd:c9:de:98:b4:ee:c1:ed:bb:1e:5b:0d:cc:b9:63:be:
a6:52:91:e0:ba:10:5f:2c:4b:9b:54:7e:b0:13:de:d3:9c:a5:
35:73:87:44:4d:dc:59:a9:ba:3b:d7:5d:a5:34:62:02:af:92:
41:33:2d:d3:e5:70:45:ab:0a:12:6e:2b:1c:5d:f6:3e:1f:0f:
d9:c8:47:d1:8a:04:1c:7d:df:a1:18:fa:4e:d5:7f:1d:9d:04:
aa:03:b5:cf:f0:bb:2c:bf:bc:aa:9c:b9:b1:ed:fb:7f:bd:9b:
8f:5f:2f:ab:c6:ef:80:54:e7:63:93:43:e4:86:f4:75:1a:21:
96:fa:be:ed:ee:5e:49:3c:79:cc:83:f9:dd:69:ed:46:ff:6f:
f2:af:ef:e5:46:f0:0d:88:39:3c:b2:cd:5e:f5:e0:75:d9:d8:
51:21:22:14:38:5e:8e:46:0a:98:ad:d9:2d:6f:03:75:3d:7e:
67:85:a4:7a:05:ed:92:db:33:50:c5:9f:b3:cb:b4:86:2c:6f:
b1:b0:f9:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2PSvAN09FcACjSNcCzPVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjRkMDU5MmFlMTJlOTUwZDg4ZjhjNmFlMGE5MmYwYjM1
Y2QwZTQwHhcNMjYwMzAyMDAwMDQ4WhcNMjYwMzAzMDAwMDQ4WjAzMTEwLwYDVQQD
Eyg3YTI0NWE0MmFlMzMxNzhhYWQ1ZGU5Y2FhZDY5NTBlYzAyZDNiNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoB9vOdH9X99pzHIj08mN0T1cuQ1
y3Uh4OjBXrwTT/6V7uGOZVcr4CefIM1RIt1A7qtj7ZI59xBUKex492VldDZyZZh9
HrUhltBoo87qgA9V0qluxz9YBYAZzvoArewQP3ZimcWrn+4u0o1y9awuojD0Uq7b
+9GApx6BpNeEHDBH2e4R7qA4gl70IZE61CtTppgkwkfBuwssv/wiUkx/AxtmqCEq
n7Ka7nGpnxiW17jSVS5oMHFICQArgQq/Lsn2cUwVg2ee9RtOOaP4QLbFcXavpKRf
zG6OZnlvqK9/QOz4Ff+WsFs00M9/FJisaa21GjZ+FqFUloikKYaAk5uFkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHokWkKuMxeKrV3pyq1pUOwC07XNMB8GA1UdIwQY
MBaAFC8k0Fkq4S6VDYj4xq4KkvCzXNDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUt
MzMxNGQxOTQwYmY5LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUtMzMxNGQxOTQwYmY5
LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn78jdk5g
emh765KaqsKWMR1wzb/SVj/ChNfNIAGb+llDgH/OiRw3NRIyES/shRs1A0cN9x3m
mqS9yd6YtO7B7bseWw3MuWO+plKR4LoQXyxLm1R+sBPe05ylNXOHRE3cWam6O9dd
pTRiAq+SQTMt0+VwRasKEm4rHF32Ph8P2chH0YoEHH3foRj6TtV/HZ0EqgO1z/C7
LL+8qpy5se37f72bj18vq8bvgFTnY5ND5Ib0dRohlvq+7e5eSTx5zIP53WntRv9v
8q/v5UbwDYg5PLLNXvXgddnYUSEiFDhejkYKmK3ZLW8DdT1+Z4WkegXtktszUMWf
s8u0hixvsbD5Gg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:35 2026 by rpki-client