Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
File: LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json)
Hash identifier: b1xMWjIiL63GvigFVpatlC6PK7tvSn4sps2v4lBcL14=
Subject key identifier: 11:77:64:58:0E:CA:61:89:F4:49:6D:3B:8E:C4:FF:6E:DC:54:5F:44
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Certificate issuer: /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial: 019D9962184132B5AD3946FFF45CA9A76794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
Manifest number: 0AC0
Signing time: Fri 17 Apr 2026 03:00:35 +0000
Manifest this update: Fri 17 Apr 2026 03:00:35 +0000
Manifest next update: Sat 18 Apr 2026 03:00:35 +0000
Files and hashes: 1: CVFC2AZT4zU7rxI78osYUeetX2c.roa (hash: ISGwaf6fRTl6b38lrffHUitVBZ3yWrYSjAcvo0Gl7Qs=)
2: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: ppOvTPZCsemg8/sTs3jpr+72aP/iNW2SDzabcIzMXG8=)
3: PHM1V2LiLUnh_dtpW6HSuR0CqtM.roa (hash: WaAP7/tUSsIc2V6rPX2u2qrSpkI6CsWvnNzs+Vmc/68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:18:41:32:b5:ad:39:46:ff:f4:5c:a9:a7:67:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Validity
Not Before: Apr 17 03:00:35 2026 GMT
Not After : Apr 18 03:00:35 2026 GMT
Subject: CN=117764580eca6189f4496d3b8ec4ff6edc545f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:02:3c:26:d1:03:18:7c:ac:fa:2b:df:82:
2f:7b:f2:6d:16:46:39:87:6e:0c:3c:5a:a6:2d:8b:
49:23:90:32:41:5c:a5:09:fc:5d:86:54:43:de:e4:
06:2f:0c:a1:a6:ae:64:c3:b4:9b:21:4f:52:07:f8:
50:e5:c2:0a:70:61:b4:33:74:aa:ec:ee:9b:3a:46:
8f:08:01:d4:28:e6:54:68:58:b1:b7:03:5b:28:d2:
13:7a:dc:fc:a9:e4:c0:9a:41:6f:fd:bb:d0:87:00:
f8:09:cd:a7:12:fb:ff:43:1e:aa:32:df:94:c9:4e:
d8:3a:3a:ab:fb:48:84:3c:05:0d:47:ab:36:8b:8f:
13:45:3b:96:35:82:b7:85:ed:af:0c:25:66:92:7a:
25:07:98:bb:73:9c:5e:b7:f8:d3:61:5c:57:d6:f1:
40:87:90:55:2c:c6:8d:65:c8:35:c0:93:47:ce:00:
ba:b5:e9:7b:1c:c5:c6:d5:fd:57:40:50:45:09:de:
db:9d:3b:f9:25:85:e0:1a:68:b8:5c:df:a2:de:9d:
cc:bd:57:7d:ee:26:ff:f4:62:40:15:df:92:e6:dc:
bb:07:6e:ee:95:f9:80:1b:2b:1b:24:11:a4:89:6f:
a6:d9:68:1e:89:3d:04:64:31:fa:db:9b:01:c9:12:
d6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:77:64:58:0E:CA:61:89:F4:49:6D:3B:8E:C4:FF:6E:DC:54:5F:44
X509v3 Authority Key Identifier:
keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c2:4a:ec:de:d7:0c:51:00:c4:73:4b:0f:20:75:fd:0f:c4:
b6:4f:36:64:75:51:41:3d:85:6b:8c:6d:72:02:4a:be:40:a4:
58:f0:6a:d0:03:cc:15:f7:b0:cf:1f:91:ae:4e:66:87:45:e9:
4d:f3:c8:2f:e6:b5:0d:a3:28:43:18:41:40:7a:30:59:2c:98:
53:63:d4:92:1c:28:a9:0f:25:35:1a:5c:37:7b:4f:8a:f6:c1:
3d:75:9f:a0:1e:99:f1:88:e8:06:1f:2a:ee:b8:5f:87:60:3b:
53:51:8e:93:e8:41:70:61:02:9d:38:64:f1:9d:7f:9a:93:a8:
f3:8c:67:0e:0a:9b:96:04:df:36:9d:02:3b:2e:4a:06:e8:7d:
65:03:2d:34:26:0b:04:49:59:a8:17:0a:76:d1:0f:f6:75:df:
4b:76:ef:3e:43:e2:bb:9b:43:7d:d8:60:72:f7:36:1f:af:b7:
82:7a:aa:de:29:72:66:64:31:4c:3a:2f:e4:a6:46:d7:6a:0f:
7e:fd:24:9b:0b:f5:b4:dd:ea:83:5a:fb:bf:6b:eb:43:b8:6c:
68:7b:2c:71:9d:b5:c9:25:03:02:76:f3:4d:e2:ea:36:22:71:
73:9b:63:a6:c9:64:5f:db:64:19:00:32:f8:88:be:e2:f2:6c:
ab:06:fc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:53:09 2026 by rpki-client