Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
File: LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json)
Hash identifier: dWbkE5I9MfkvaN/ieTJUpCZ06J+/JIqJNOrfc6qsZkQ=
Subject key identifier: 91:8F:C4:CC:29:F2:2A:2A:3A:CE:C1:2E:57:D2:D3:14:D9:B7:E6:10
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Certificate issuer: /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial: 01A0DBA97012B721119C27A321F3C2BB2774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
Manifest number: 0C70
Signing time: Sat 26 Sep 2026 03:01:49 +0000
Manifest this update: Sat 26 Sep 2026 03:01:49 +0000
Manifest next update: Sun 27 Sep 2026 03:01:49 +0000
Files and hashes: 1: CVFC2AZT4zU7rxI78osYUeetX2c.roa (hash: ISGwaf6fRTl6b38lrffHUitVBZ3yWrYSjAcvo0Gl7Qs=)
2: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: 6TO+aNiaEstNOLtCzmw/+gxbN1oBFMuAhNdvAJcfPBA=)
3: PHM1V2LiLUnh_dtpW6HSuR0CqtM.roa (hash: WaAP7/tUSsIc2V6rPX2u2qrSpkI6CsWvnNzs+Vmc/68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:70:12:b7:21:11:9c:27:a3:21:f3:c2:bb:27:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Validity
Not Before: Sep 26 03:01:49 2026 GMT
Not After : Sep 27 03:01:49 2026 GMT
Subject: CN=918fc4cc29f22a2a3acec12e57d2d314d9b7e610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:ae:c9:40:dc:c0:b7:68:9a:e3:b1:56:5e:
a1:0b:8c:2b:b0:5c:54:a6:79:44:1a:64:93:a4:eb:
20:a1:b2:fd:25:d4:31:52:1e:dd:54:65:52:45:f6:
a4:ee:ab:6b:a2:cb:35:df:0d:39:74:22:ce:af:d3:
25:7b:0f:23:09:cc:90:a1:5f:eb:58:4b:61:d1:9c:
2e:e9:02:10:2e:67:75:be:ae:74:76:8d:a2:59:44:
e9:77:da:da:c0:ca:ff:89:26:79:94:15:9f:59:cc:
e6:e0:5a:4a:8a:e2:35:25:e5:d9:6a:f9:3e:42:f0:
09:d8:b2:79:24:71:a0:28:d6:a0:8e:6e:7d:ba:a1:
52:70:a3:af:96:0a:3b:e7:8b:b1:04:83:0f:59:04:
80:3a:6f:af:0c:e3:ef:ce:30:87:66:af:f4:f6:f6:
25:28:f7:11:13:1d:ed:0b:21:8d:33:99:08:53:c0:
77:69:0c:99:57:ab:d5:ca:b7:3e:c8:b9:d2:ca:f0:
ed:48:db:d8:02:de:6b:0a:c5:25:72:3d:75:f8:02:
4b:14:71:ec:24:8f:8e:19:d3:9a:4b:2f:a8:2d:1a:
77:7c:7c:71:4b:f2:2d:74:b9:f5:fa:39:74:72:8d:
e8:69:6c:b4:9d:bd:f9:f6:6d:ea:56:57:7d:4a:3c:
bb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8F:C4:CC:29:F2:2A:2A:3A:CE:C1:2E:57:D2:D3:14:D9:B7:E6:10
X509v3 Authority Key Identifier:
keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:12:f1:3e:17:01:0c:1f:1f:2f:f2:9c:93:f5:70:2f:5f:b6:
d1:c3:b9:72:fb:86:c0:84:00:fa:e8:b9:c0:97:83:19:f3:27:
ea:1f:f8:45:80:6a:92:f8:d1:09:6a:a8:3b:f4:3e:47:ee:ec:
80:47:61:6b:24:91:86:46:2e:64:62:4c:46:32:73:73:07:7f:
be:98:43:37:74:4f:23:55:8d:b7:e0:a9:5b:ce:36:17:01:30:
3e:af:1f:4f:5e:8a:2f:5e:78:06:eb:8c:c3:90:32:e3:0a:58:
3b:fc:33:1a:8b:65:71:8e:55:4e:6e:b4:87:f1:49:bf:c0:a0:
82:a2:77:50:47:bc:ae:ef:41:d3:32:af:50:4a:20:8e:93:af:
72:29:0d:ad:da:80:fd:37:d7:52:77:3d:09:ba:e9:71:be:38:
4e:54:7b:ea:d3:bf:4f:26:b7:e0:83:43:a3:e4:60:9e:53:dc:
aa:e4:fd:0f:e7:3d:98:ab:1c:8d:46:bb:1b:52:9d:3f:31:1a:
c5:d3:47:2b:8d:0a:8f:f7:e8:67:df:92:3b:66:3a:e9:bd:91:
81:76:33:07:e6:d5:3b:da:22:df:18:27:8c:fd:eb:52:9e:c9:
62:ac:90:fd:76:53:73:87:b9:26:98:93:09:e7:66:b7:f0:6f:
8f:ba:65:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:05:35 2026 by rpki-client