Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
File: LYaVbM1-OrtCkd1U29i0NCv5V8w.mft (raw, json)
Hash identifier: Btupy/mI2pFhPtgHjVYrEMaI5vn8lW15hhO+ZcNTUU4=
Subject key identifier: 11:A0:73:0A:53:3E:1A:4F:27:4E:2E:C4:08:22:4D:B6:0E:E7:55:C0
Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Certificate serial: 019CAC1060A6BB4E4D96E775301AAFED567A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 01:01:20 +0000
Manifest this update: Mon 02 Mar 2026 01:01:20 +0000
Manifest next update: Tue 03 Mar 2026 01:01:20 +0000
Files and hashes: 1: LYaVbM1-OrtCkd1U29i0NCv5V8w.crl (hash: MjQCgW4VUeDXq6nvmPO4mFNWSiIAW/sqDUZCUesjj6o=)
2: UZ3Zh5sbw9GQyuWThFTa8ax6K-k.roa (hash: yAGOxTch7/IeLN3QFrJm+PJnLSPNYzzaqiRQZwJHefI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:60:a6:bb:4e:4d:96:e7:75:30:1a:af:ed:56:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Validity
Not Before: Mar 2 01:01:20 2026 GMT
Not After : Mar 3 01:01:20 2026 GMT
Subject: CN=11a0730a533e1a4f274e2ec408224db60ee755c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fc:25:21:f9:58:d8:ae:33:b2:aa:b7:ed:b2:
11:fc:62:9e:ce:3d:7f:84:f9:90:c3:d3:9d:25:7a:
59:57:d0:4c:4d:19:aa:d1:b5:6f:a9:fd:24:58:8a:
82:97:e9:c9:74:4a:10:ad:84:f4:fe:be:45:32:0a:
90:62:19:c5:09:c2:c6:cd:af:6e:6d:4c:fc:fa:07:
8d:71:7e:b8:72:e0:ea:00:a7:16:5f:2d:89:ab:7d:
37:37:e2:42:77:48:f3:0b:15:37:53:08:ec:0d:3a:
d6:df:4f:a9:7f:d8:44:76:bc:c9:89:0d:ca:76:47:
fa:be:aa:95:d3:5d:91:48:3b:e9:22:4c:cd:28:8b:
aa:54:fd:ae:68:8a:5a:de:7a:bd:49:f2:b6:e1:e3:
9e:83:92:57:29:90:63:d1:cf:0f:11:c1:61:ad:ca:
b5:6d:80:3e:c0:50:50:c8:21:77:e9:77:a7:95:68:
66:6a:b2:9d:28:f4:95:84:7b:20:29:27:a6:11:5b:
e1:81:a1:17:49:2f:9b:ec:e0:91:3c:33:df:d7:52:
c0:f9:95:8d:9f:99:fb:6e:5c:ec:20:ce:7d:04:b4:
06:12:e0:f6:3f:c4:38:f9:be:7e:eb:45:ba:8c:c7:
bb:45:59:d7:7e:3c:ce:75:9e:96:18:92:89:02:e9:
e2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A0:73:0A:53:3E:1A:4F:27:4E:2E:C4:08:22:4D:B6:0E:E7:55:C0
X509v3 Authority Key Identifier:
keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:12:da:3d:7d:38:e3:56:e6:7c:fa:bd:cd:a5:e0:84:0f:5f:
ca:80:01:cf:55:b7:4c:95:25:20:67:01:73:34:86:00:e6:1b:
e6:2a:57:d2:e0:eb:cf:86:e5:89:b5:fa:2a:18:25:9a:27:d0:
15:3f:a2:39:3a:51:f1:de:3f:69:2f:e7:c3:c7:25:c6:23:47:
b6:df:0e:dc:33:b8:e2:f4:8e:07:fe:db:35:f1:10:e4:ff:28:
fe:4f:c0:4f:ba:38:74:2f:05:a1:5a:7c:30:22:6d:cd:2f:54:
f6:6f:81:b9:28:20:ad:b1:44:78:72:e0:bd:c5:0c:6e:a5:31:
50:e7:2d:c9:7c:8b:f0:bf:99:37:17:a6:0b:86:bd:c5:ed:59:
bd:93:2d:1f:1c:60:6a:e1:b8:05:e0:0a:b8:3c:02:b8:9f:b7:
3e:54:e8:53:dc:dd:35:8d:83:fb:4a:9f:4c:66:a6:b0:cf:a4:
e1:13:8b:dc:88:ab:9e:69:db:6a:40:28:84:3d:25:a5:37:8d:
bb:96:6d:d9:bb:49:78:18:13:90:2e:59:39:51:9a:82:db:7b:
7c:92:78:6b:36:78:66:48:6e:3b:3e:1c:23:80:25:78:27:70:
cd:44:d0:a8:0a:e8:ad:6a:ad:1a:1d:5f:c5:62:8f:09:7d:8e:
e7:00:11:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:05 2026 by rpki-client