Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
File: LyYGSS1O272szm3JIfOG1idM8RY.mft (raw, json)
Hash identifier: sZhkGXi0BLmpGk94dTHgtsBLGjq7/7TypXkV2HIAaL0=
Subject key identifier: 50:72:B2:B9:03:DE:F6:DA:F2:3D:66:3E:BB:B8:49:7B:F7:3C:19:C6
Authority key identifier: 2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
Certificate issuer: /CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Certificate serial: 019EBFFF1C79CACC7CEE940872D8B77FDFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
Manifest number: EA
Signing time: Sat 13 Jun 2026 08:00:27 +0000
Manifest this update: Sat 13 Jun 2026 08:00:27 +0000
Manifest next update: Sun 14 Jun 2026 08:00:27 +0000
Files and hashes: 1: LyYGSS1O272szm3JIfOG1idM8RY.crl (hash: IjZzBDUWKTLpGzPtZB/SW8UUUssmN/y2/0dp2UGTYkM=)
2: QsgK3zmpC5fuQ0VVqi2BKwSAZT4.asa (hash: Ws1KiWB846RCi+ZBaMIy3xlo3+ka2MoAAIT33rXZvHU=)
3: TJmjHk7-IfOVndDk-rv5dxnB-Hg.roa (hash: Y93GXNgXRGo/l+Ahm8qFGyYePtPybIuW3rty/z9Parw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:1c:79:ca:cc:7c:ee:94:08:72:d8:b7:7f:df:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Validity
Not Before: Jun 13 08:00:27 2026 GMT
Not After : Jun 14 08:00:27 2026 GMT
Subject: CN=5072b2b903def6daf23d663ebbb8497bf73c19c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:3e:0f:91:cc:98:67:3d:4d:3d:a4:78:16:
62:09:eb:10:db:fd:88:10:c5:6d:43:31:96:6f:c6:
98:51:8b:ef:05:f8:93:9a:4f:03:dd:11:0d:9d:03:
ed:e2:aa:bd:71:5f:01:01:bb:f1:b3:d6:59:bd:f5:
b2:66:ff:ea:40:4b:7e:f5:61:6a:a3:16:a9:03:20:
04:fe:5e:3b:72:28:8e:c9:05:48:30:ae:a9:0f:0c:
90:c3:eb:3b:ea:a0:94:51:50:2c:b0:87:07:f0:76:
36:43:3e:df:20:d7:a3:76:b5:02:9b:f6:c7:5d:30:
32:94:b7:a8:49:55:42:b9:0c:8e:1e:a3:e7:de:a3:
f4:1e:8a:a5:ba:cb:8e:a5:af:90:38:7d:08:d5:7c:
2f:09:a6:68:97:12:2c:1e:40:b7:ef:e3:66:39:80:
10:a4:c8:9f:ff:1d:02:0b:19:48:b7:1b:2b:4d:7b:
fd:da:ae:a1:91:fe:78:87:d7:48:8c:d5:9e:47:a0:
c1:75:05:df:0e:0b:99:db:22:aa:5e:f9:81:9f:96:
0c:90:7a:1b:d8:83:a2:06:58:8d:ed:c9:63:b7:a8:
d7:b1:ad:2f:1c:31:65:f7:d6:e8:24:7d:61:d5:eb:
2a:f1:5b:fb:db:db:df:a6:05:ac:b8:9c:53:c5:2f:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:72:B2:B9:03:DE:F6:DA:F2:3D:66:3E:BB:B8:49:7B:F7:3C:19:C6
X509v3 Authority Key Identifier:
keyid:2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9a:e8:ac:20:eb:de:a1:96:37:13:96:ca:36:d4:78:18:f6:
e5:61:5b:13:07:5d:de:37:c9:c6:b5:fc:20:97:ea:c9:6f:73:
7d:09:75:59:88:fa:12:19:42:36:56:f1:a0:f0:0f:66:62:d6:
dd:25:1d:50:94:a9:59:b9:7b:ed:bc:0e:3b:e0:c8:e2:13:98:
04:b6:83:55:0e:ee:76:33:80:a5:b8:88:96:66:50:18:d3:f5:
e5:32:80:51:13:ad:22:3d:7e:51:33:56:46:bd:72:72:96:27:
05:e3:e6:01:0b:c4:83:13:a7:ba:fd:eb:b2:21:a8:9f:4d:db:
40:41:63:75:c4:c8:d3:fb:b6:ea:f7:40:83:6c:97:87:88:1b:
a0:44:ee:13:d6:1d:7d:93:15:72:a7:a4:b0:92:2d:02:1f:ff:
62:62:c9:86:bb:6c:7f:71:16:3a:23:20:d5:bb:ab:3b:57:1b:
46:21:10:a4:f0:62:be:6b:30:7a:34:81:bb:3e:7b:30:8a:9a:
f6:b5:80:25:94:0f:84:36:3c:90:4f:b8:fe:60:fb:92:7f:4d:
76:f8:cd:fc:94:e8:f8:04:c2:11:2a:d5:a1:80:f0:d9:23:81:
2f:30:c0:79:a3:27:a9:8c:da:d2:fb:31:50:49:00:5f:a5:7e:
cb:d8:31:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//xx5ysx87pQIcti3f9/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjYwNjQ5MmQ0ZWRiYmRhY2NlNmRjOTIxZjM4NmQ2Mjc0
Y2YxMTYwHhcNMjYwNjEzMDgwMDI3WhcNMjYwNjE0MDgwMDI3WjAzMTEwLwYDVQQD
Eyg1MDcyYjJiOTAzZGVmNmRhZjIzZDY2M2ViYmI4NDk3YmY3M2MxOWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0k+D5HMmGc9TT2keBZiCesQ2/2I
EMVtQzGWb8aYUYvvBfiTmk8D3RENnQPt4qq9cV8BAbvxs9ZZvfWyZv/qQEt+9WFq
oxapAyAE/l47ciiOyQVIMK6pDwyQw+s76qCUUVAssIcH8HY2Qz7fINejdrUCm/bH
XTAylLeoSVVCuQyOHqPn3qP0HoqlusuOpa+QOH0I1XwvCaZolxIsHkC37+NmOYAQ
pMif/x0CCxlItxsrTXv92q6hkf54h9dIjNWeR6DBdQXfDguZ2yKqXvmBn5YMkHob
2IOiBliN7cljt6jXsa0vHDFl99boJH1h1esq8Vv729vfpgWsuJxTxS9RNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBysrkD3vba8j1mPru4SXv3PBnGMB8GA1UdIwQY
MBaAFC8mBkktTtu9rM5tySHzhtYnTPEWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlZR1NTMU8yNzJzem0zSklmT0cxaWRNOFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82MWFjZjUtYmFmNy00NDU1LWI3NjEt
MDk0ZmZlMDBiODc5LzEvTHlZR1NTMU8yNzJzem0zSklmT0cxaWRNOFJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS82MWFjZjUtYmFmNy00NDU1LWI3NjEtMDk0ZmZlMDBiODc5
LzEvTHlZR1NTMU8yNzJzem0zSklmT0cxaWRNOFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkprorCDr
3qGWNxOWyjbUeBj25WFbEwdd3jfJxrX8IJfqyW9zfQl1WYj6EhlCNlbxoPAPZmLW
3SUdUJSpWbl77bwOO+DI4hOYBLaDVQ7udjOApbiIlmZQGNP15TKAUROtIj1+UTNW
Rr1ycpYnBePmAQvEgxOnuv3rsiGon03bQEFjdcTI0/u26vdAg2yXh4gboETuE9Yd
fZMVcqeksJItAh//YmLJhrtsf3EWOiMg1burO1cbRiEQpPBivmswejSBuz57MIqa
9rWAJZQPhDY8kE+4/mD7kn9NdvjN/JTo+ATCESrVoYDw2SOBLzDAeaMnqYza0vsx
UEkAX6V+y9gxKw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:15:24 2026 by rpki-client