Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
File: LYFCGstXhBVGXs3sRYHoleu_vH8.mft (raw, json)
Hash identifier: 0baVw6O25I+ys14ssoxQV9DppT6Ys75iQ2iOS+IVx9U=
Subject key identifier: EC:C5:6B:FE:71:AB:30:30:9B:D7:DE:C3:D0:47:6B:B5:CA:28:A0:70
Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
Certificate issuer: /CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Certificate serial: 01A0BDD4E8F497686DD4AEF5E87D50B5F401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
Manifest number: 04C0
Signing time: Sun 20 Sep 2026 08:00:42 +0000
Manifest this update: Sun 20 Sep 2026 08:00:42 +0000
Manifest next update: Mon 21 Sep 2026 08:00:42 +0000
Files and hashes: 1: LYFCGstXhBVGXs3sRYHoleu_vH8.crl (hash: J79PLQnsm8E+NlQO20pbDNzg/79A1eSFXAxA+1LTRhU=)
2: RML1TmbAZYHpyU26wWj03FjR3yY.roa (hash: PPBAB3g4x0UYNx5LUtlXQ+fhrj8l5E6PaVsjyetSSNY=)
3: v-yW23PUKxeOnQqPJF0a9ieiqkY.roa (hash: QA7GggYLqUF36MqITz5Sp/J8Iu+lSl6lGyrVjXlucb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:e8:f4:97:68:6d:d4:ae:f5:e8:7d:50:b5:f4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Validity
Not Before: Sep 20 08:00:42 2026 GMT
Not After : Sep 21 08:00:42 2026 GMT
Subject: CN=ecc56bfe71ab30309bd7dec3d0476bb5ca28a070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:4b:75:31:da:7c:e5:51:93:7c:37:6a:76:
8d:3b:fb:fa:28:55:90:29:33:e5:a8:ab:d1:5c:ac:
a7:c6:b1:91:53:5a:16:27:99:b4:2e:a4:81:8a:7f:
dd:77:9d:46:e0:f6:1e:3d:1a:87:b7:f2:a1:c0:4f:
f5:e2:ca:f7:68:5c:d0:e5:e2:7d:e0:15:c2:02:51:
20:eb:59:fb:f2:d8:9c:c3:c8:36:95:37:a7:e1:1e:
db:b3:ac:79:4d:ba:4d:9b:06:1c:71:e2:77:b5:8e:
5f:ac:3a:9a:32:22:ee:97:f3:3c:97:3b:85:36:cc:
04:bb:10:08:9b:52:4d:61:8c:c4:f7:f9:5a:34:26:
75:34:e3:c5:ca:bc:c5:ba:ec:16:2b:b6:db:1d:7b:
33:60:91:ef:ed:fb:b9:dd:0b:e7:b9:af:e2:85:a1:
b8:e7:09:f6:b7:93:58:f6:bc:f2:d8:9d:ce:75:e7:
8a:28:68:10:ea:0c:6b:03:c1:4b:4c:bb:1b:1b:40:
07:78:44:6c:6d:af:ee:43:ba:75:2a:b2:94:70:47:
5c:b4:17:3c:34:e8:c8:a8:fe:1c:2a:f2:32:25:3f:
f8:ca:32:1b:aa:28:4b:61:f2:25:7e:39:db:ab:45:
fb:5b:d4:75:43:27:6a:74:b7:15:43:8d:8f:75:98:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C5:6B:FE:71:AB:30:30:9B:D7:DE:C3:D0:47:6B:B5:CA:28:A0:70
X509v3 Authority Key Identifier:
keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:76:1d:39:a6:31:43:f7:a6:4e:50:4f:9e:f5:04:c9:d0:ce:
8a:1c:9a:09:21:3e:19:30:30:95:da:2a:dd:c6:e5:9e:23:03:
9f:21:a0:09:e7:83:f0:7e:fa:58:f2:4c:68:68:a6:26:3e:67:
20:af:52:d7:48:8f:3c:f4:1b:7b:cf:1d:db:da:e6:f1:47:ff:
be:63:93:f7:67:53:84:b7:d7:66:02:57:11:02:9d:7d:ec:a5:
38:07:28:b8:20:37:08:d0:9d:11:42:1b:38:1d:eb:4d:d3:1a:
24:cc:97:b2:6a:3c:f9:61:e9:fb:e2:a5:b1:db:fb:d0:26:9e:
1b:3f:a3:46:a2:72:bc:ce:12:58:f7:32:76:a1:ed:66:57:b8:
3f:25:13:c4:da:48:8a:27:14:0e:9e:4e:09:39:1f:36:64:3c:
55:4a:0b:c2:5b:21:a7:8a:e8:1a:00:ff:04:b2:af:c4:67:39:
fb:6b:22:b7:38:5b:80:e0:4f:37:90:3a:68:dc:46:cf:4d:72:
c3:7d:c1:ba:4e:14:eb:c6:c2:d4:4f:21:ce:f4:9a:0e:4e:ca:
f9:72:6a:75:46:8a:f6:80:ce:fb:37:16:ea:64:65:e6:16:71:
b2:18:98:28:fe:b2:18:a7:60:3c:bd:8d:7b:88:f1:9c:53:2e:
e4:53:52:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:38:15 2026 by rpki-client