Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
File: LYFCGstXhBVGXs3sRYHoleu_vH8.mft (raw, json)
Hash identifier: goJ9uakL36ZI+ArZInM8+O4cvnHTtcITJtOlZpRasjU=
Subject key identifier: 67:44:41:60:31:9F:8C:BC:90:0D:92:87:B5:44:76:FE:82:B6:D6:1A
Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
Certificate issuer: /CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Certificate serial: 019DA41C862F8BFA77E158CF90F42ACC14FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
Manifest number: 0325
Signing time: Sun 19 Apr 2026 05:00:25 +0000
Manifest this update: Sun 19 Apr 2026 05:00:25 +0000
Manifest next update: Mon 20 Apr 2026 05:00:25 +0000
Files and hashes: 1: LYFCGstXhBVGXs3sRYHoleu_vH8.crl (hash: T0pEYE08RQiEPF/71/kPEPykrFeuswqGp6KOft3Yr40=)
2: RML1TmbAZYHpyU26wWj03FjR3yY.roa (hash: PPBAB3g4x0UYNx5LUtlXQ+fhrj8l5E6PaVsjyetSSNY=)
3: v-yW23PUKxeOnQqPJF0a9ieiqkY.roa (hash: QA7GggYLqUF36MqITz5Sp/J8Iu+lSl6lGyrVjXlucb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:86:2f:8b:fa:77:e1:58:cf:90:f4:2a:cc:14:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Validity
Not Before: Apr 19 05:00:25 2026 GMT
Not After : Apr 20 05:00:25 2026 GMT
Subject: CN=67444160319f8cbc900d9287b54476fe82b6d61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:d8:dd:41:20:63:6a:51:6d:ac:af:bc:ee:
bf:4e:fa:89:52:8f:a8:1f:db:ef:1e:dd:e2:c4:2f:
96:a3:4f:1c:f0:e0:fb:10:5a:81:bb:ff:41:a5:ce:
4e:6b:f1:d9:92:33:49:b3:3d:e5:1f:c0:96:34:c6:
a5:3b:0f:14:cb:0d:73:06:37:65:a2:5a:d4:38:93:
b5:30:b4:38:a5:be:91:18:de:78:8f:c5:ac:04:6b:
f5:32:a4:2c:d3:2f:f1:80:bc:2a:02:d3:11:a3:73:
c7:5d:9a:36:fd:dd:c5:c4:bb:00:63:89:64:69:02:
7d:d6:b4:29:3b:f0:33:53:ee:a5:07:a6:4b:68:d0:
a5:a1:6f:0c:e7:3e:bd:d0:49:b0:03:cf:5b:0e:dd:
22:db:85:92:cc:57:00:6e:64:bb:21:88:4a:6c:06:
df:bb:9c:fc:c9:49:b9:2d:2a:36:dc:90:4b:a2:49:
74:59:23:4a:b9:88:bd:58:94:a4:28:67:95:90:c3:
13:3e:cb:41:4c:56:fe:2d:78:3a:1d:8c:b4:70:38:
88:00:8f:a0:e2:8c:e3:d7:dd:75:87:79:b8:96:26:
66:98:c7:dd:e6:69:f7:c7:cf:7e:fb:ab:56:1d:df:
5a:af:85:30:b1:04:61:b4:00:a8:38:ef:d3:eb:8b:
5c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:44:41:60:31:9F:8C:BC:90:0D:92:87:B5:44:76:FE:82:B6:D6:1A
X509v3 Authority Key Identifier:
keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:08:52:0e:78:e5:49:a3:a1:78:0b:b0:68:2e:25:ef:01:8b:
ee:f1:5c:d3:66:07:93:91:76:aa:e8:3a:b0:df:68:cd:15:8c:
d9:cc:14:d9:0a:bb:53:f7:da:2d:bc:9c:cd:13:04:55:ec:cd:
f3:56:be:de:31:a5:05:a9:1a:f6:8a:1f:e3:94:f4:d1:6d:48:
39:12:89:12:92:98:ad:a9:a8:af:df:1b:de:89:f8:c1:20:92:
45:9d:81:06:eb:c5:df:71:11:76:5e:b6:0a:06:5e:e4:27:d4:
1c:94:dd:3a:c7:98:75:51:63:0d:fe:f5:a5:f3:95:e9:3d:fa:
29:34:29:87:10:8b:13:2b:17:cc:e0:86:8b:3b:c5:f9:86:42:
43:3d:a0:7a:bb:ed:57:6b:23:3c:7d:3e:11:7d:45:be:2f:6a:
d2:e4:13:2d:de:7f:0a:1c:41:96:aa:8c:d2:4d:86:d5:e5:7f:
9f:07:6a:0b:f5:fe:b4:6a:56:80:61:d4:20:dc:f7:38:49:d7:
ac:b1:23:68:bd:ac:c6:bd:54:4f:e2:a5:1a:0c:38:39:9d:0e:
b3:af:6b:78:1e:45:55:81:bd:fa:f3:8b:6b:21:45:a1:e9:69:
1c:f4:76:fd:9c:7d:05:67:b3:e6:b8:a5:7e:06:8a:51:e6:04:
02:cb:29:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:41:55 2026 by rpki-client