Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
File: LyYGSS1O272szm3JIfOG1idM8RY.mft (raw, json)
Hash identifier: BYgVgB8dqgkpsL4ulU1qZndukv4rDrsLKjVP4j7cgwU=
Subject key identifier: 51:EA:61:4A:9A:41:50:DD:F7:F9:F5:54:09:AF:87:EF:C1:6B:D8:0D
Authority key identifier: 2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
Certificate issuer: /CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Certificate serial: 01A0C96ADE43AADD4DED02E2F86E1ADD119A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
Manifest number: 01F8
Signing time: Tue 22 Sep 2026 14:00:18 +0000
Manifest this update: Tue 22 Sep 2026 14:00:18 +0000
Manifest next update: Wed 23 Sep 2026 14:00:18 +0000
Files and hashes: 1: LyYGSS1O272szm3JIfOG1idM8RY.crl (hash: 47jYyPNFjsmtEMcp2Dt/egsHXWb0raU9RF9VTeAfFqU=)
2: QsgK3zmpC5fuQ0VVqi2BKwSAZT4.asa (hash: Ws1KiWB846RCi+ZBaMIy3xlo3+ka2MoAAIT33rXZvHU=)
3: TJmjHk7-IfOVndDk-rv5dxnB-Hg.roa (hash: Y93GXNgXRGo/l+Ahm8qFGyYePtPybIuW3rty/z9Parw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6a:de:43:aa:dd:4d:ed:02:e2:f8:6e:1a:dd:11:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Validity
Not Before: Sep 22 14:00:18 2026 GMT
Not After : Sep 23 14:00:18 2026 GMT
Subject: CN=51ea614a9a4150ddf7f9f55409af87efc16bd80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:5e:da:3d:4a:c9:18:fc:f6:08:d1:85:a6:
0c:48:75:d5:27:f3:01:ef:be:e7:68:41:bf:7c:50:
88:89:eb:49:d5:d4:18:d6:3b:15:fd:f9:82:0e:c9:
67:78:d1:ea:9d:ed:19:7b:58:1f:21:df:17:c7:83:
05:c5:1b:6b:97:c0:5c:47:9c:eb:3c:1d:1f:cd:0f:
c1:21:cc:fc:7c:b3:e5:fb:c6:7c:47:c0:bd:da:75:
c4:fd:95:76:82:bf:db:2e:86:35:c8:29:56:f0:8c:
72:c3:3d:a5:66:df:8a:8e:a0:35:37:a5:97:2e:20:
ef:a3:9d:06:56:8b:91:56:a2:d5:27:4c:6d:f5:39:
6b:94:40:a2:3d:d9:72:83:8e:0a:91:f6:93:05:6f:
e5:9b:39:7b:e0:88:10:c7:7a:b3:fc:25:0d:4c:19:
3c:0b:71:2f:de:8b:1b:1e:ef:10:e4:a7:d2:59:0a:
0a:ca:9a:6a:1e:3f:3d:fb:0a:9c:51:e6:8b:e9:f0:
88:34:60:87:23:40:4c:b0:79:77:6b:99:d5:df:9d:
1e:a9:ee:45:79:8b:0f:c8:57:b7:11:bc:c0:50:53:
9f:a2:65:ba:b1:98:bd:06:b4:e9:15:bb:df:16:14:
88:1f:4a:92:e7:cd:d4:46:2a:86:a0:57:1a:d0:cd:
8b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EA:61:4A:9A:41:50:DD:F7:F9:F5:54:09:AF:87:EF:C1:6B:D8:0D
X509v3 Authority Key Identifier:
keyid:2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:22:17:c7:31:47:7f:74:65:ce:f3:8c:03:bd:55:9a:60:6f:
b7:ef:50:b3:0f:c2:4a:d1:17:d6:a7:a1:2a:a3:af:9c:5a:41:
c8:62:c6:ff:ef:a4:36:91:c2:e6:f6:e7:99:af:80:58:a5:e3:
7e:40:32:c5:af:89:3b:99:bd:5b:3b:71:22:26:98:8e:5b:90:
b8:a7:07:be:23:6f:4c:f4:bb:3a:6c:9c:5a:23:01:56:28:ee:
bb:f6:7d:0a:02:fc:00:e4:ec:8e:07:e0:01:be:e7:8d:2e:d4:
e4:1f:ca:17:2e:2a:aa:ef:b8:fa:3a:06:f4:34:f1:b5:4d:48:
2e:b4:b1:85:f2:f4:37:4e:82:16:90:7a:ed:83:1d:0b:e2:24:
49:cb:a4:89:40:29:55:84:f8:47:39:c6:2c:c2:01:c3:e9:e8:
c4:5f:7f:a3:9a:aa:40:31:67:6e:b1:f0:6f:ee:41:f9:ed:f9:
40:8a:1f:4d:d5:12:2c:4f:47:aa:2e:11:7d:0e:35:41:a3:2c:
b0:25:fe:83:17:27:44:04:e5:b6:83:1c:9f:ef:47:6c:ed:96:
9c:68:1c:f4:ac:8d:95:bf:47:1b:40:3b:c6:52:d1:84:98:49:
b8:d9:82:90:72:e5:da:39:7f:5b:50:64:d4:5a:00:b4:2d:4f:
50:63:8e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:25:03 2026 by rpki-client