Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
File: LyYGSS1O272szm3JIfOG1idM8RY.mft (raw, json)
Hash identifier: FChZDbGoJjHQToXKGNJy3a/ah7BbzfMun9wH9EjMBic=
Subject key identifier: B6:FB:C3:E9:DB:22:77:6E:FB:83:C4:72:B0:B0:67:22:AE:10:88:CD
Authority key identifier: 2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
Certificate issuer: /CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Certificate serial: 019FA9ABA2F67840C4870F64AE2275B7169D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
Manifest number: 0163
Signing time: Tue 28 Jul 2026 17:00:25 +0000
Manifest this update: Tue 28 Jul 2026 17:00:25 +0000
Manifest next update: Wed 29 Jul 2026 17:00:25 +0000
Files and hashes: 1: LyYGSS1O272szm3JIfOG1idM8RY.crl (hash: fGnvLkCCM9rJXrezBC8iqKAAX5bkB8WeUQ2w1vp0yAM=)
2: QsgK3zmpC5fuQ0VVqi2BKwSAZT4.asa (hash: Ws1KiWB846RCi+ZBaMIy3xlo3+ka2MoAAIT33rXZvHU=)
3: TJmjHk7-IfOVndDk-rv5dxnB-Hg.roa (hash: Y93GXNgXRGo/l+Ahm8qFGyYePtPybIuW3rty/z9Parw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:a2:f6:78:40:c4:87:0f:64:ae:22:75:b7:16:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Validity
Not Before: Jul 28 17:00:25 2026 GMT
Not After : Jul 29 17:00:25 2026 GMT
Subject: CN=b6fbc3e9db22776efb83c472b0b06722ae1088cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:bb:6e:60:83:2e:87:88:47:19:53:97:5a:
bd:86:14:49:79:a1:de:70:18:d5:63:39:82:d3:32:
3a:06:16:c6:ea:43:8e:66:52:3a:94:67:35:ee:41:
53:9b:a2:d4:c0:d6:2d:5d:ee:c6:ab:11:5f:da:7e:
ce:01:df:33:45:02:17:db:98:d2:6a:cf:ac:1d:d2:
2e:d3:03:ea:d3:0f:cc:cc:a5:fa:21:2f:03:3c:c5:
8c:02:ef:79:0b:6b:16:17:40:f9:a8:37:1a:57:37:
8e:05:45:1d:e1:7f:27:f8:1f:19:1c:59:06:48:b1:
1b:4a:95:a7:55:e3:9b:17:ca:6a:39:c5:0a:00:0a:
b8:55:89:bc:95:00:47:fa:ff:41:3f:f6:33:13:6b:
a4:27:ed:8b:4d:67:f2:0d:72:41:dd:e6:c5:9f:3b:
e0:2b:6f:8f:3d:14:e1:2f:16:d5:6c:8f:eb:02:77:
be:c1:cd:81:09:b9:67:c1:e0:84:2c:89:6e:4b:ac:
5b:d4:26:d9:76:e5:1d:91:13:b3:82:c9:f0:45:c4:
f2:26:f7:85:b7:ba:e8:5d:36:06:90:34:b7:4a:e5:
40:40:2a:5b:13:8f:fa:9c:30:dd:9a:75:3b:c9:76:
59:cc:e1:83:5a:3e:90:49:05:30:fc:d6:63:e0:95:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FB:C3:E9:DB:22:77:6E:FB:83:C4:72:B0:B0:67:22:AE:10:88:CD
X509v3 Authority Key Identifier:
keyid:2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:55:43:3e:fd:d0:5f:05:a4:dd:6c:bb:f2:3a:df:01:6f:06:
1e:5e:46:5d:7c:4b:a6:5b:46:0e:1c:60:a1:6e:ed:96:b6:f1:
bf:20:43:89:a4:cb:ce:9e:77:4a:66:66:c4:04:cf:a4:37:0b:
f6:95:c1:13:23:87:ff:67:a4:ac:dc:e7:c6:9f:84:9c:b3:3b:
98:db:9a:1f:04:10:8c:c5:4b:79:b0:b8:b4:11:dd:0d:c3:e0:
5a:e4:26:d8:08:80:e9:eb:25:d6:ee:a5:5a:04:24:c1:52:7e:
e4:4f:b9:61:5a:f6:75:20:05:a9:c1:2e:2f:4e:c3:9d:71:cf:
70:e5:78:1b:56:55:39:11:ce:4f:74:19:99:45:b8:26:e2:b6:
af:05:81:b9:a0:27:3b:71:13:dd:b6:ac:a1:6e:22:af:14:8c:
6b:a1:10:3b:39:09:fa:3c:19:30:35:ce:63:4a:7e:d9:26:39:
9b:7e:18:72:86:bb:02:8f:43:67:e1:ce:b0:35:8e:16:46:b3:
a4:3f:6b:15:b7:16:d3:8d:06:2e:24:fc:af:9f:ba:6c:d7:4f:
6e:67:2a:71:34:29:f7:25:bb:38:6d:b0:0f:13:66:e5:14:c3:
13:4c:80:c6:a0:15:9b:dd:bb:5c:78:b4:38:03:b8:80:28:e5:
9e:83:97:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq6L2eEDEhw9kriJ1txadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjYwNjQ5MmQ0ZWRiYmRhY2NlNmRjOTIxZjM4NmQ2Mjc0
Y2YxMTYwHhcNMjYwNzI4MTcwMDI1WhcNMjYwNzI5MTcwMDI1WjAzMTEwLwYDVQQD
EyhiNmZiYzNlOWRiMjI3NzZlZmI4M2M0NzJiMGIwNjcyMmFlMTA4OGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssC7bmCDLoeIRxlTl1q9hhRJeaHe
cBjVYzmC0zI6BhbG6kOOZlI6lGc17kFTm6LUwNYtXe7GqxFf2n7OAd8zRQIX25jS
as+sHdIu0wPq0w/MzKX6IS8DPMWMAu95C2sWF0D5qDcaVzeOBUUd4X8n+B8ZHFkG
SLEbSpWnVeObF8pqOcUKAAq4VYm8lQBH+v9BP/YzE2ukJ+2LTWfyDXJB3ebFnzvg
K2+PPRThLxbVbI/rAne+wc2BCblnweCELIluS6xb1CbZduUdkROzgsnwRcTyJveF
t7roXTYGkDS3SuVAQCpbE4/6nDDdmnU7yXZZzOGDWj6QSQUw/NZj4JWQyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLb7w+nbIndu+4PEcrCwZyKuEIjNMB8GA1UdIwQY
MBaAFC8mBkktTtu9rM5tySHzhtYnTPEWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlZR1NTMU8yNzJzem0zSklmT0cxaWRNOFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82MWFjZjUtYmFmNy00NDU1LWI3NjEt
MDk0ZmZlMDBiODc5LzEvTHlZR1NTMU8yNzJzem0zSklmT0cxaWRNOFJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS82MWFjZjUtYmFmNy00NDU1LWI3NjEtMDk0ZmZlMDBiODc5
LzEvTHlZR1NTMU8yNzJzem0zSklmT0cxaWRNOFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklVDPv3Q
XwWk3Wy78jrfAW8GHl5GXXxLpltGDhxgoW7tlrbxvyBDiaTLzp53SmZmxATPpDcL
9pXBEyOH/2ekrNznxp+EnLM7mNuaHwQQjMVLebC4tBHdDcPgWuQm2AiA6esl1u6l
WgQkwVJ+5E+5YVr2dSAFqcEuL07DnXHPcOV4G1ZVORHOT3QZmUW4JuK2rwWBuaAn
O3ET3basoW4irxSMa6EQOzkJ+jwZMDXOY0p+2SY5m34Ycoa7Ao9DZ+HOsDWOFkaz
pD9rFbcW040GLiT8r5+6bNdPbmcqcTQp9yW7OG2wDxNm5RTDE0yAxqAVm927XHi0
OAO4gCjlnoOXzA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:02 2026 by rpki-client