Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
File: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft (raw, json)
Hash identifier: uXqvSAfJ1Cm6GYbyQc9ms51G6GZPqBoWeg+fa5unE2k=
Subject key identifier: E1:2A:FB:57:F9:80:2B:50:C3:E5:C3:88:D0:95:55:67:36:B1:6D:AE
Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Certificate serial: 019D996226B3400E21375FA14E888C699BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
Manifest number: 117D
Signing time: Fri 17 Apr 2026 03:00:39 +0000
Manifest this update: Fri 17 Apr 2026 03:00:39 +0000
Manifest next update: Sat 18 Apr 2026 03:00:39 +0000
Files and hashes: 1: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl (hash: 2kPFubZYiCbodm/i/dFyVRGXkSbkm8h2xEM/sXbepOk=)
2: qzDVPJjwkiKMmIw2RcHgiamnABM.roa (hash: xT+W6De5eWZz4XKVbRVPuP+LFXCQC6a/MFcFgjxi2KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:26:b3:40:0e:21:37:5f:a1:4e:88:8c:69:9b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Validity
Not Before: Apr 17 03:00:39 2026 GMT
Not After : Apr 18 03:00:39 2026 GMT
Subject: CN=e12afb57f9802b50c3e5c388d095556736b16dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:14:94:01:08:a2:37:88:98:96:84:d3:15:
ec:c1:0f:8d:22:1c:77:52:a4:e7:09:ed:64:bf:fe:
3b:49:86:45:e0:17:a2:18:db:6a:e6:14:b4:62:08:
87:c5:27:75:99:6e:c0:1b:b5:6e:39:1a:5a:e1:28:
9f:22:11:3a:42:64:c4:ee:0f:d2:51:49:51:5d:71:
d0:3d:7b:bb:7c:5b:0d:bb:87:ce:4e:64:0d:a7:cd:
46:f8:c5:b6:9a:d0:8e:d0:27:c2:cf:3e:0f:81:9b:
b6:25:f6:31:b2:cb:55:bf:b4:91:05:65:a2:5a:98:
60:9d:bb:7c:b3:42:33:02:c3:07:72:04:28:72:2d:
e6:32:21:dd:15:02:ab:b2:e4:9f:02:30:78:9d:74:
31:3b:df:1b:bb:13:14:50:39:d4:a1:01:c7:2b:ad:
bc:34:20:df:34:71:f9:76:b8:73:eb:1a:39:ed:48:
96:61:40:74:2a:fc:b0:25:8b:59:7b:7e:11:d9:33:
2e:0c:6f:80:d0:da:3b:5b:16:20:8d:44:70:42:79:
95:11:29:f8:b2:15:77:90:72:38:df:33:b8:6d:61:
57:51:b2:9f:98:dc:fd:36:9e:53:ef:40:f1:4d:f7:
b9:93:d4:d6:f1:61:40:dc:e4:4f:6c:d1:86:da:7f:
df:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2A:FB:57:F9:80:2B:50:C3:E5:C3:88:D0:95:55:67:36:B1:6D:AE
X509v3 Authority Key Identifier:
keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a0:fa:a0:1f:82:b5:b2:bc:41:1d:ba:35:11:14:04:47:5d:
08:09:18:45:18:48:60:c0:54:2f:75:ac:97:b4:68:dd:67:77:
cd:65:3f:f7:80:00:1b:40:c0:81:95:e1:dc:80:ee:65:06:e3:
d6:da:8b:1a:91:de:74:71:d6:7d:0e:c2:46:ce:6d:8a:c2:7a:
ff:77:fe:48:e1:c9:f4:2a:00:bd:ab:88:fd:ac:35:75:cd:c2:
57:c0:7f:ec:a6:4a:9d:98:77:3f:9c:37:c4:ab:15:16:b0:26:
b9:df:30:cf:9e:09:28:56:e7:f1:9d:21:99:b8:fb:b2:3c:49:
6e:d9:7f:93:d4:27:fe:de:d7:86:cd:28:d0:4e:2a:03:5a:7c:
a0:20:1a:ce:c1:37:a2:bd:b9:e7:7a:ab:c7:bc:e5:79:41:97:
26:27:6f:21:27:ae:a3:49:30:9a:df:36:93:1d:06:00:8f:99:
2a:2a:bb:91:61:8a:af:45:ec:09:5a:c7:6e:88:5f:bf:88:23:
bb:0c:53:7e:9a:ba:df:1b:8a:82:b7:bf:aa:2b:e7:28:27:40:
2d:f3:c9:76:5f:08:52:79:26:a1:67:35:0c:e9:70:cc:30:26:
56:ae:05:4f:99:d9:42:94:db:6f:c0:1a:95:cc:c6:dd:eb:7c:
31:fa:cc:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYiazQA4hN1+hToiMaZvvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjRkMDU5MmFlMTJlOTUwZDg4ZjhjNmFlMGE5MmYwYjM1
Y2QwZTQwHhcNMjYwNDE3MDMwMDM5WhcNMjYwNDE4MDMwMDM5WjAzMTEwLwYDVQQD
EyhlMTJhZmI1N2Y5ODAyYjUwYzNlNWMzODhkMDk1NTU2NzM2YjE2ZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGgUlAEIojeImJaE0xXswQ+NIhx3
UqTnCe1kv/47SYZF4BeiGNtq5hS0YgiHxSd1mW7AG7VuORpa4SifIhE6QmTE7g/S
UUlRXXHQPXu7fFsNu4fOTmQNp81G+MW2mtCO0CfCzz4PgZu2JfYxsstVv7SRBWWi
Wphgnbt8s0IzAsMHcgQoci3mMiHdFQKrsuSfAjB4nXQxO98buxMUUDnUoQHHK628
NCDfNHH5drhz6xo57UiWYUB0KvywJYtZe34R2TMuDG+A0No7WxYgjURwQnmVESn4
shV3kHI43zO4bWFXUbKfmNz9Np5T70DxTfe5k9TW8WFA3ORPbNGG2n/faQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEq+1f5gCtQw+XDiNCVVWc2sW2uMB8GA1UdIwQY
MBaAFC8k0Fkq4S6VDYj4xq4KkvCzXNDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUt
MzMxNGQxOTQwYmY5LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUtMzMxNGQxOTQwYmY5
LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6D6oB+C
tbK8QR26NREUBEddCAkYRRhIYMBUL3Wsl7Ro3Wd3zWU/94AAG0DAgZXh3IDuZQbj
1tqLGpHedHHWfQ7CRs5tisJ6/3f+SOHJ9CoAvauI/aw1dc3CV8B/7KZKnZh3P5w3
xKsVFrAmud8wz54JKFbn8Z0hmbj7sjxJbtl/k9Qn/t7Xhs0o0E4qA1p8oCAazsE3
or2553qrx7zleUGXJidvISeuo0kwmt82kx0GAI+ZKiq7kWGKr0XsCVrHbohfv4gj
uwxTfpq63xuKgre/qivnKCdALfPJdl8IUnkmoWc1DOlwzDAmVq4FT5nZQpTbb8Aa
lczG3et8MfrMgw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:10 2026 by rpki-client