
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
File: LyoPogODMyo_QU8FR1OgtgsluhA.mft (raw, json)
Hash identifier: UArJXR+8g7ynHQAaon7dA7Wz/7pTo6D5oLg907otFiw=
Subject key identifier: 4A:B8:F5:2A:EF:C9:AD:82:D9:8A:E1:47:A3:D3:1E:28:8C:37:D8:7F
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 019FA8D06FB8088AE6823BD88B33DC7EBA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
Manifest number: 0842
Signing time: Tue 28 Jul 2026 13:01:00 +0000
Manifest this update: Tue 28 Jul 2026 13:01:00 +0000
Manifest next update: Wed 29 Jul 2026 13:01:00 +0000
Files and hashes: 1: 6QujOxzf4C6K0r-hHQOFn_yfCUI.roa (hash: VpztrU2iFQ8Ah/D8jT+xPTLG0sW08bpvg3e6MmJ6Zdg=)
2: A5lQjMuyEwnxIDxaUmDnFfxaoks.roa (hash: P6Mc4NENcql9pqKO6/1f2kVi6ScGBPjag1XyyEN7xRE=)
3: CnGC1xBcS_Hw0l7OYLlFgmMRghM.roa (hash: yl/TzXvizjcQkXaqTrcqSMtt/sGUH2HO4v5PSOx89k0=)
4: DlvqEbHES6ltEIxiAXhjM2CW4ec.roa (hash: Mj5DDW92tIkxs3VmT9Gs5UYbHsVDvGDo2+Bxg89LMQg=)
5: DwB6hCkbMaFBKRZqWfmt03tZkaQ.roa (hash: lu5eBLytjQ0/qRj8GGmMDiIsTss70m+efSZgH9kQHuY=)
6: E9M1Pbo6cojKNq6aCzRN9lYK2TI.roa (hash: 6xlPlwiU6/vgt77UfvKPKbZAHPmxOxzp9UBEFyHwp2U=)
7: IBVzEPC10N6US5KaErFSedKeI1Q.roa (hash: RU5umX0s3T/s0oLhPcgLEFjXt2aMHfj/aPPYStVkbnI=)
8: LyoPogODMyo_QU8FR1OgtgsluhA.crl (hash: WkdxNgrjNxySo14447G2xVo+VFVPG6ZjjOZJegclUdc=)
9: SX294m--1vDxMY6Pvv6-ci7dNJ4.roa (hash: bzsnnZDkBTJaiqPd5qwvFscE5qs3E0+zYHYP17Yj7CA=)
10: j24Xn1OVDzmRc0YHejjOlzAmgRk.roa (hash: /5EdM1LEZ2tK4zjsCtxS9n3mfLKzazy5AKKxuUfX/Lk=)
11: lNFX6JR33oagWwHcQSBTeat9zBY.roa (hash: peF00m3zIs2m9F1un51juc2YE8LDkrNqnwtvZ/TuqS4=)
12: nrx14wL0fPx4-9DshtLYIG-SPw0.asa (hash: tasi695yJoGT9axaG3Jwyukwoa6MAJVOedvjLTRox4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:6f:b8:08:8a:e6:82:3b:d8:8b:33:dc:7e:ba:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Jul 28 13:01:00 2026 GMT
Not After : Jul 29 13:01:00 2026 GMT
Subject: CN=4ab8f52aefc9ad82d98ae147a3d31e288c37d87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:c1:f8:81:85:02:40:bb:0c:78:28:6a:76:
c5:00:27:6a:95:b4:69:a7:68:2f:b4:22:d5:b0:a5:
7b:07:a9:35:87:5e:f6:e8:6b:9d:ee:7b:87:70:0d:
58:8c:8e:8d:8b:5b:60:a6:46:99:75:e5:d9:31:12:
bd:b5:c4:ba:03:9e:05:0d:42:81:2e:77:6b:9a:1e:
db:dd:7f:fc:c2:4e:31:58:00:27:1e:3e:2b:27:02:
54:e3:57:e8:2f:2e:7c:d8:49:59:20:7f:d2:74:ee:
49:42:85:c7:0e:d6:84:5a:5d:e0:33:6e:0a:e5:2c:
49:ff:21:9a:09:45:01:04:4f:f8:ed:69:92:aa:8f:
7e:ee:31:a5:19:d9:04:ae:90:ee:29:ac:5b:45:a1:
6c:fc:6c:2d:21:a5:8d:d3:fe:23:4c:2f:e3:0d:96:
e7:6f:f7:30:ab:4e:ab:7f:4e:40:2f:0a:0e:8d:4b:
15:b2:7d:ee:3a:76:cc:f2:d5:35:50:f7:6b:40:c2:
40:93:0c:e0:84:5d:af:43:6e:d1:90:54:cd:2c:09:
da:6d:0f:aa:f5:62:7f:19:7e:39:da:f2:bd:42:85:
28:91:31:96:72:2d:e8:5a:6b:2e:b5:f2:3c:37:49:
44:cc:2f:06:94:9c:6c:c6:14:05:54:94:6b:af:fa:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B8:F5:2A:EF:C9:AD:82:D9:8A:E1:47:A3:D3:1E:28:8C:37:D8:7F
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c2:f4:85:ba:58:49:67:bd:09:22:f2:d4:81:1c:92:27:49:
53:c7:a7:03:ba:f9:64:cb:89:86:42:91:c5:cf:76:6c:66:4b:
17:98:23:22:10:f7:6d:15:e9:7a:d8:d9:f1:69:c6:bf:51:71:
a9:2d:f2:ad:85:8f:0d:b7:e6:43:c3:9b:6d:8e:16:db:6a:07:
59:af:cf:b1:44:40:74:18:f5:e7:b1:5d:6f:3f:2a:72:f9:08:
05:30:35:ce:22:b7:4f:b3:22:1d:9e:54:3d:00:5e:c0:f8:d9:
c0:a6:29:bb:c5:88:a8:c2:9c:33:29:8d:07:18:fc:ac:7e:ab:
86:14:5e:f3:1f:64:c4:30:c3:0c:56:cf:27:bd:d4:bc:18:00:
10:90:a7:a1:d1:46:9b:6d:5c:5b:5c:ac:ae:c0:b1:a2:2d:40:
47:43:01:49:ea:d1:12:b3:78:75:6e:15:8a:7b:61:7a:2d:b3:
fe:23:f7:86:f4:bf:d5:4e:22:d4:b6:28:7f:d8:96:f2:ab:e3:
e7:d4:72:5f:51:63:68:79:20:75:00:20:32:f2:18:49:cb:32:
54:57:c0:5e:c2:63:a0:d6:3c:2e:c1:18:40:9e:dc:c3:b4:f1:
d7:cb:21:44:57:ca:1c:26:df:69:b5:b4:6e:f1:6f:b6:a7:79:
d2:5f:89:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0G+4CIrmgjvYizPcfrpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy
NWJhMTAwHhcNMjYwNzI4MTMwMTAwWhcNMjYwNzI5MTMwMTAwWjAzMTEwLwYDVQQD
Eyg0YWI4ZjUyYWVmYzlhZDgyZDk4YWUxNDdhM2QzMWUyODhjMzdkODdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWvB+IGFAkC7DHgoanbFACdqlbRp
p2gvtCLVsKV7B6k1h1726Gud7nuHcA1YjI6Ni1tgpkaZdeXZMRK9tcS6A54FDUKB
Lndrmh7b3X/8wk4xWAAnHj4rJwJU41foLy582ElZIH/SdO5JQoXHDtaEWl3gM24K
5SxJ/yGaCUUBBE/47WmSqo9+7jGlGdkErpDuKaxbRaFs/GwtIaWN0/4jTC/jDZbn
b/cwq06rf05ALwoOjUsVsn3uOnbM8tU1UPdrQMJAkwzghF2vQ27RkFTNLAnabQ+q
9WJ/GX452vK9QoUokTGWci3oWmsutfI8N0lEzC8GlJxsxhQFVJRrr/oz1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEq49Srvya2C2YrhR6PTHiiMN9h/MB8GA1UdIwQY
MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt
NTVhOTMwZmMwYzcxLzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx
LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8L0hbpY
SWe9CSLy1IEckidJU8enA7r5ZMuJhkKRxc92bGZLF5gjIhD3bRXpetjZ8WnGv1Fx
qS3yrYWPDbfmQ8ObbY4W22oHWa/PsURAdBj157Fdbz8qcvkIBTA1ziK3T7MiHZ5U
PQBewPjZwKYpu8WIqMKcMymNBxj8rH6rhhRe8x9kxDDDDFbPJ73UvBgAEJCnodFG
m21cW1ysrsCxoi1AR0MBSerRErN4dW4Vinthei2z/iP3hvS/1U4i1LYof9iW8qvj
59RyX1FjaHkgdQAgMvIYScsyVFfAXsJjoNY8LsEYQJ7cw7Tx18shRFfKHCbfabW0
bvFvtqd50l+JaQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:51:34 2026 by rpki-client