
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
File: LyoPogODMyo_QU8FR1OgtgsluhA.mft (raw, json)
Hash identifier: bvTsvktx81gQX2/gmcqct8f+ciBOYbIrq96HgxF4Yjs=
Subject key identifier: F5:80:FB:C1:13:D5:5F:C7:65:40:E7:1C:C5:CD:7E:62:EB:D1:A4:56
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 01A0C1E8A014CBD633B8B60FA5433542DAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
Manifest number: 08D7
Signing time: Mon 21 Sep 2026 03:00:43 +0000
Manifest this update: Mon 21 Sep 2026 03:00:43 +0000
Manifest next update: Tue 22 Sep 2026 03:00:43 +0000
Files and hashes: 1: 6QujOxzf4C6K0r-hHQOFn_yfCUI.roa (hash: VpztrU2iFQ8Ah/D8jT+xPTLG0sW08bpvg3e6MmJ6Zdg=)
2: CnGC1xBcS_Hw0l7OYLlFgmMRghM.roa (hash: yl/TzXvizjcQkXaqTrcqSMtt/sGUH2HO4v5PSOx89k0=)
3: DlvqEbHES6ltEIxiAXhjM2CW4ec.roa (hash: Mj5DDW92tIkxs3VmT9Gs5UYbHsVDvGDo2+Bxg89LMQg=)
4: E9M1Pbo6cojKNq6aCzRN9lYK2TI.roa (hash: 6xlPlwiU6/vgt77UfvKPKbZAHPmxOxzp9UBEFyHwp2U=)
5: IBVzEPC10N6US5KaErFSedKeI1Q.roa (hash: RU5umX0s3T/s0oLhPcgLEFjXt2aMHfj/aPPYStVkbnI=)
6: LyoPogODMyo_QU8FR1OgtgsluhA.crl (hash: 1UTAfkQbXazQoBKZZ97yUvXKAC+srSdPXINcoPd7iM8=)
7: SX294m--1vDxMY6Pvv6-ci7dNJ4.roa (hash: bzsnnZDkBTJaiqPd5qwvFscE5qs3E0+zYHYP17Yj7CA=)
8: ThQUC52isDtb_-9iij-owp8YmEA.roa (hash: mEwbHKFNnMVNihOJAKuBMkpDxnn5mdN7MfY1PV/KiCU=)
9: UPGQyuJF5XvfV-n8Dh2Kr7JimFo.roa (hash: EGg+NvubqFkuj8dFzsWc+ym84uBkoMxYJfZdVzOVhC4=)
10: YcsByhB53GKxLT3dTdKtQcH3egc.asa (hash: W5NUR4wHaDrqknw9qJ6RUsilTsvNd7Z/qyrIz7nXJHg=)
11: j24Xn1OVDzmRc0YHejjOlzAmgRk.roa (hash: /5EdM1LEZ2tK4zjsCtxS9n3mfLKzazy5AKKxuUfX/Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:a0:14:cb:d6:33:b8:b6:0f:a5:43:35:42:da:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Sep 21 03:00:43 2026 GMT
Not After : Sep 22 03:00:43 2026 GMT
Subject: CN=f580fbc113d55fc76540e71cc5cd7e62ebd1a456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:0c:d6:06:29:e2:1b:90:11:2c:7c:aa:a4:
93:ca:17:3a:d7:2d:ee:f9:a9:e2:bb:9d:41:63:54:
af:76:f1:01:97:73:ea:fc:b2:b7:2f:50:70:2e:55:
c0:0b:92:a6:23:90:10:52:6d:52:88:ff:d4:1d:28:
c9:3c:86:fe:37:0b:58:cb:4b:89:f3:b7:98:b8:ca:
11:93:a5:7e:91:a1:32:10:7d:6d:65:1f:da:22:db:
87:2b:23:6b:14:82:4f:a1:c5:91:6c:32:bb:f3:e5:
2e:ce:c6:a1:28:27:9d:e5:b5:df:25:cf:85:3e:93:
a2:21:3f:cd:50:3d:9e:45:36:b8:ac:f2:11:58:1c:
a5:1c:1e:97:04:60:20:1b:99:4f:25:80:82:9b:53:
d7:2b:83:67:87:5f:f0:49:ca:c8:de:b5:da:b2:f4:
2b:5d:b5:aa:86:61:d0:fc:60:f0:16:f6:4b:fd:74:
2a:ea:f7:09:e4:ef:77:59:48:79:2a:7a:63:de:17:
83:92:2e:8e:24:20:9b:3a:de:e6:16:3b:fb:b0:43:
1a:8c:bd:58:d0:a0:02:26:87:e3:c1:1a:22:26:d3:
bc:7b:ce:d3:f4:a9:8e:84:56:ec:15:8e:b4:b2:0e:
55:13:e2:f3:fc:fb:72:42:7c:62:0e:e8:2e:f0:de:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:80:FB:C1:13:D5:5F:C7:65:40:E7:1C:C5:CD:7E:62:EB:D1:A4:56
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ff:6f:b5:96:dd:bd:dc:d9:19:5f:0e:d3:69:6c:d7:53:b8:
b3:cc:e6:4e:11:b0:76:93:33:03:c1:47:d1:33:09:56:18:ab:
7a:22:2f:cb:d3:3a:ed:8f:83:6d:e2:84:d5:74:c2:7d:8e:77:
28:5f:6f:01:2f:a8:6b:e8:4f:4c:b0:cf:4a:5d:d0:d4:dc:a3:
77:1e:4f:85:81:e3:9a:89:63:20:9f:f4:f7:6a:93:2a:a3:c5:
10:67:a6:07:0e:c9:7c:84:60:d2:94:5f:0c:f5:10:6f:92:5c:
a6:c1:18:d3:b2:d3:60:48:77:ec:e3:f4:76:1e:77:b9:0b:af:
cd:e9:46:07:05:18:b4:e6:90:08:28:2f:d8:4a:37:5c:86:64:
f1:8a:64:03:88:e5:60:da:74:45:67:f0:d4:e0:a9:cf:90:8b:
ee:d6:f7:d2:3c:84:80:91:2d:f7:2a:55:ad:97:14:06:21:18:
e8:b5:1d:59:bb:98:8a:63:3c:f1:9c:87:32:dd:8c:d0:57:a7:
22:61:04:56:51:ac:36:1d:8a:16:3c:eb:94:b9:04:33:6d:d6:
a5:a4:bc:dc:2e:80:79:6f:04:d0:64:36:77:13:de:d5:0e:d7:
bd:7c:e9:e9:15:a9:bb:f9:04:16:ce:d3:cf:a8:b4:ff:ae:a1:
89:84:c3:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDB6KAUy9YzuLYPpUM1Qtq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy
NWJhMTAwHhcNMjYwOTIxMDMwMDQzWhcNMjYwOTIyMDMwMDQzWjAzMTEwLwYDVQQD
EyhmNTgwZmJjMTEzZDU1ZmM3NjU0MGU3MWNjNWNkN2U2MmViZDFhNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9wM1gYp4huQESx8qqSTyhc61y3u
+aniu51BY1SvdvEBl3Pq/LK3L1BwLlXAC5KmI5AQUm1SiP/UHSjJPIb+NwtYy0uJ
87eYuMoRk6V+kaEyEH1tZR/aItuHKyNrFIJPocWRbDK78+UuzsahKCed5bXfJc+F
PpOiIT/NUD2eRTa4rPIRWBylHB6XBGAgG5lPJYCCm1PXK4Nnh1/wScrI3rXasvQr
XbWqhmHQ/GDwFvZL/XQq6vcJ5O93WUh5Knpj3heDki6OJCCbOt7mFjv7sEMajL1Y
0KACJofjwRoiJtO8e87T9KmOhFbsFY60sg5VE+Lz/PtyQnxiDugu8N6TCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWA+8ET1V/HZUDnHMXNfmLr0aRWMB8GA1UdIwQY
MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt
NTVhOTMwZmMwYzcxLzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx
LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnf9vtZbd
vdzZGV8O02ls11O4s8zmThGwdpMzA8FH0TMJVhireiIvy9M67Y+DbeKE1XTCfY53
KF9vAS+oa+hPTLDPSl3Q1Nyjdx5PhYHjmoljIJ/092qTKqPFEGemBw7JfIRg0pRf
DPUQb5JcpsEY07LTYEh37OP0dh53uQuvzelGBwUYtOaQCCgv2Eo3XIZk8YpkA4jl
YNp0RWfw1OCpz5CL7tb30jyEgJEt9ypVrZcUBiEY6LUdWbuYimM88ZyHMt2M0Fen
ImEEVlGsNh2KFjzrlLkEM23WpaS83C6AeW8E0GQ2dxPe1Q7XvXzp6RWpu/kEFs7T
z6i0/66hiYTD4w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 07:55:30 2026 by rpki-client