Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
File: LyYGSS1O272szm3JIfOG1idM8RY.mft (raw, json)
Hash identifier: eiV14NAgUHYIwtgs/uPlcc6HEAGdIf0TM+IJR2n6Kyk=
Subject key identifier: 63:CF:13:FF:C4:FE:F6:73:16:77:E9:F4:97:99:4C:22:D3:7F:8F:8E
Authority key identifier: 2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
Certificate issuer: /CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Certificate serial: 019DA41CBAB14DBD445965172337FDE7B3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
Manifest number: 57
Signing time: Sun 19 Apr 2026 05:00:39 +0000
Manifest this update: Sun 19 Apr 2026 05:00:39 +0000
Manifest next update: Mon 20 Apr 2026 05:00:39 +0000
Files and hashes: 1: LyYGSS1O272szm3JIfOG1idM8RY.crl (hash: ROg6MRCb/P6Ni03fArp9ySRjU/Csa4eH/R9HUSuYRtQ=)
2: QsgK3zmpC5fuQ0VVqi2BKwSAZT4.asa (hash: Ws1KiWB846RCi+ZBaMIy3xlo3+ka2MoAAIT33rXZvHU=)
3: TJmjHk7-IfOVndDk-rv5dxnB-Hg.roa (hash: Y93GXNgXRGo/l+Ahm8qFGyYePtPybIuW3rty/z9Parw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:ba:b1:4d:bd:44:59:65:17:23:37:fd:e7:b3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Validity
Not Before: Apr 19 05:00:39 2026 GMT
Not After : Apr 20 05:00:39 2026 GMT
Subject: CN=63cf13ffc4fef6731677e9f497994c22d37f8f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d6:db:22:4c:a4:9f:01:73:69:f6:73:76:10:
45:f1:c4:2a:33:b7:0d:f4:f3:d9:0b:93:68:ee:88:
fa:f8:53:68:07:8f:3a:b0:14:3c:20:4b:7e:67:f9:
a3:5a:58:e9:e3:5c:2b:ee:77:3e:0e:c9:0e:e6:fa:
40:83:32:6a:ad:29:d4:2d:c3:49:04:04:b7:26:eb:
5d:a4:39:29:d9:b6:47:13:4a:d8:b9:5b:81:5f:f3:
5e:db:61:90:02:f6:47:76:95:b1:b4:ce:19:59:e8:
fe:3b:4f:6c:00:b5:51:ee:49:76:92:86:60:05:70:
98:d4:53:3d:cb:d5:af:21:f9:96:58:3b:d7:5b:f7:
55:13:fd:15:5c:82:6c:a4:6b:ac:ed:d2:4f:80:75:
4b:b0:1d:05:af:02:82:9c:52:a6:b3:10:d4:f4:3b:
a1:65:c4:7d:2f:5b:e4:57:d6:b5:11:5d:f5:50:2c:
c4:e4:7e:36:1d:dc:17:90:6a:f6:fe:d1:ab:3f:c6:
76:ef:01:2e:df:7a:62:8f:e4:3d:99:cc:9a:30:c3:
40:22:c1:5b:e2:99:21:0c:78:43:ad:4c:ae:96:f3:
44:bd:84:ce:c0:3d:ac:f4:73:9d:2f:db:4b:f3:fd:
f6:d4:f4:3b:b8:f4:3a:a1:4e:c4:13:df:51:ae:3a:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CF:13:FF:C4:FE:F6:73:16:77:E9:F4:97:99:4C:22:D3:7F:8F:8E
X509v3 Authority Key Identifier:
keyid:2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:36:78:fd:24:8c:df:86:09:95:02:70:01:50:9a:f5:a1:b9:
40:4b:62:f6:42:ba:0c:73:a1:2d:c2:1e:66:10:86:66:97:a7:
99:f0:7f:90:3d:62:3d:69:15:17:3c:75:95:7f:8a:5f:f9:5c:
06:90:e8:fd:6c:a9:22:45:94:cd:b7:2e:d0:a1:ce:45:d9:ed:
94:36:53:03:ad:39:43:64:63:8f:34:00:5f:06:5c:49:10:ac:
e0:1d:85:1c:3d:59:66:46:f3:a2:01:f5:bc:ca:d5:e6:9a:32:
ed:ce:37:3a:44:bc:b9:69:d1:3a:f3:51:de:1b:f5:1b:4c:7c:
30:95:1c:b4:c1:36:dd:46:9c:5f:f4:13:0e:61:36:7d:4b:77:
d9:b9:a8:14:6c:65:ab:2c:39:81:5a:f4:9e:97:be:9e:3e:59:
12:34:9e:ef:b4:cb:44:ad:90:11:2a:f2:d7:54:c9:f6:08:f9:
9b:66:e8:03:a8:6a:89:61:e7:34:f3:af:53:69:a7:cb:8c:ff:
cb:51:3c:15:8f:b0:a3:60:6b:d1:4a:9f:c3:e3:c1:a7:3f:61:
f5:f6:e0:d4:7f:7d:bb:14:7c:ab:69:24:b6:f8:83:b8:2a:31:
26:39:65:2a:c5:3f:22:56:df:ca:f4:f6:e2:bb:0d:ca:d0:70:
9b:be:ca:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:40:32 2026 by rpki-client