Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
File: LYFCGstXhBVGXs3sRYHoleu_vH8.mft (raw, json)
Hash identifier: EwQAFmI387ziIav63k5CgubU+5StayoMnIi5rZmw86c=
Subject key identifier: 9A:57:19:87:09:51:78:4A:0C:6F:F0:7C:4B:23:A6:1E:12:3D:2E:EA
Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
Certificate issuer: /CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Certificate serial: 019CA90F2FFBF8321943800855A4A6A8CD9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
Manifest number: 02A3
Signing time: Sun 01 Mar 2026 11:01:10 +0000
Manifest this update: Sun 01 Mar 2026 11:01:10 +0000
Manifest next update: Mon 02 Mar 2026 11:01:10 +0000
Files and hashes: 1: LYFCGstXhBVGXs3sRYHoleu_vH8.crl (hash: OyWIpxaixZrhA0EQH4f5qIeqovqLKga9OF/H/gP0pPg=)
2: RML1TmbAZYHpyU26wWj03FjR3yY.roa (hash: PPBAB3g4x0UYNx5LUtlXQ+fhrj8l5E6PaVsjyetSSNY=)
3: v-yW23PUKxeOnQqPJF0a9ieiqkY.roa (hash: QA7GggYLqUF36MqITz5Sp/J8Iu+lSl6lGyrVjXlucb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0f:2f:fb:f8:32:19:43:80:08:55:a4:a6:a8:cd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Validity
Not Before: Mar 1 11:01:10 2026 GMT
Not After : Mar 2 11:01:10 2026 GMT
Subject: CN=9a5719870951784a0c6ff07c4b23a61e123d2eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:31:e8:43:5a:c0:eb:ce:b0:d0:67:a5:a2:05:
08:bd:8e:80:33:03:81:c5:6f:c9:d9:21:6c:b6:79:
29:06:81:c9:4d:80:96:2b:5b:2e:9f:f1:b9:03:9c:
82:78:2b:ac:c5:29:47:31:93:11:c5:a2:06:1f:2e:
5a:ba:7c:8e:f3:31:35:0f:82:75:e9:ac:cf:39:3e:
59:37:89:63:05:c1:42:44:f0:79:f8:e1:6d:ca:8a:
51:21:17:ff:4f:bb:da:ae:e6:73:fa:e0:b2:3f:c1:
35:79:89:59:ca:67:4b:2a:aa:12:8a:67:ec:f6:79:
1a:fc:bf:19:ba:d8:bf:f7:b4:e9:95:b7:b0:3c:27:
08:68:90:9b:e5:36:c9:a8:4e:55:dd:0f:fa:5f:0f:
f9:42:c9:03:69:30:f9:cf:5c:02:1e:e9:53:65:b1:
55:83:24:4c:d6:bb:74:3c:28:d6:71:d7:3a:5c:ee:
af:15:d3:a4:8e:7d:b0:e4:a6:c7:28:a5:80:2b:23:
c0:84:8d:8a:93:63:84:4f:01:f9:59:7e:1b:5f:3f:
3c:59:bd:13:da:81:75:55:dd:73:42:f4:fa:f1:43:
1f:86:40:27:79:a9:2b:64:40:8b:5d:08:a1:5b:6b:
6d:a0:6c:35:08:18:ff:39:80:86:34:d5:30:41:f2:
9e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:57:19:87:09:51:78:4A:0C:6F:F0:7C:4B:23:A6:1E:12:3D:2E:EA
X509v3 Authority Key Identifier:
keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6f:36:91:b2:9c:e8:2b:69:06:02:36:ec:b0:de:eb:4a:2a:
b5:53:9a:1c:40:08:ea:86:2b:1c:da:c4:64:3d:6a:a8:b5:83:
2f:59:3d:6c:da:46:63:6e:fb:0a:fb:2c:c0:8a:c0:f1:d7:50:
27:0e:4f:68:af:58:a6:9c:ba:28:d4:ac:f7:db:72:17:26:56:
fd:11:2d:f4:de:f2:d7:c1:39:ae:ca:a0:a1:aa:e4:95:6e:f5:
7c:a4:17:eb:76:7e:98:84:c5:45:06:d2:bf:4d:48:77:42:bf:
73:62:be:68:ec:c4:54:0e:ae:f8:88:a8:74:d5:e0:1b:52:5f:
28:99:55:dc:23:c8:95:37:80:7a:93:f4:52:01:49:6a:17:b4:
3c:9b:60:4e:92:98:02:95:f4:76:cf:54:ff:c2:a1:a5:a2:32:
97:b8:23:1b:23:3c:e4:71:f8:79:50:dd:a1:67:cb:a8:88:e8:
3d:b6:8f:b4:1d:72:6b:3b:4f:37:ec:a3:b7:d5:fe:ce:2c:8d:
74:ed:dd:c4:cc:ec:7a:d3:b8:57:b4:2d:6d:34:a1:9c:99:ef:
13:7d:7c:7b:f7:21:cd:cf:4f:82:64:e3:31:7a:4e:ea:78:61:
f2:cb:2f:b0:4a:06:da:17:df:e3:eb:6e:ec:b6:f0:14:1a:b2:
13:2e:78:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypDy/7+DIZQ4AIVaSmqM2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkODE0MjFhY2I1Nzg0MTU0NjVlY2RlYzQ1ODFlODk1ZWJi
ZmJjN2YwHhcNMjYwMzAxMTEwMTEwWhcNMjYwMzAyMTEwMTEwWjAzMTEwLwYDVQQD
Eyg5YTU3MTk4NzA5NTE3ODRhMGM2ZmYwN2M0YjIzYTYxZTEyM2QyZWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jHoQ1rA686w0GelogUIvY6AMwOB
xW/J2SFstnkpBoHJTYCWK1sun/G5A5yCeCusxSlHMZMRxaIGHy5aunyO8zE1D4J1
6azPOT5ZN4ljBcFCRPB5+OFtyopRIRf/T7varuZz+uCyP8E1eYlZymdLKqoSimfs
9nka/L8Zuti/97TplbewPCcIaJCb5TbJqE5V3Q/6Xw/5QskDaTD5z1wCHulTZbFV
gyRM1rt0PCjWcdc6XO6vFdOkjn2w5KbHKKWAKyPAhI2Kk2OETwH5WX4bXz88Wb0T
2oF1Vd1zQvT68UMfhkAneakrZECLXQihW2ttoGw1CBj/OYCGNNUwQfKeCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpXGYcJUXhKDG/wfEsjph4SPS7qMB8GA1UdIwQY
MBaAFC2BQhrLV4QVRl7N7EWB6JXrv7x/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zYjFkNWEtZmNjNi00YWUzLWEyYzgt
OTg0ZWVjM2Y3YTNlLzEvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zYjFkNWEtZmNjNi00YWUzLWEyYzgtOTg0ZWVjM2Y3YTNl
LzEvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApm82kbKc
6CtpBgI27LDe60oqtVOaHEAI6oYrHNrEZD1qqLWDL1k9bNpGY277CvsswIrA8ddQ
Jw5PaK9Yppy6KNSs99tyFyZW/REt9N7y18E5rsqgoarklW71fKQX63Z+mITFRQbS
v01Id0K/c2K+aOzEVA6u+IiodNXgG1JfKJlV3CPIlTeAepP0UgFJahe0PJtgTpKY
ApX0ds9U/8KhpaIyl7gjGyM85HH4eVDdoWfLqIjoPbaPtB1yaztPN+yjt9X+ziyN
dO3dxMzsetO4V7QtbTShnJnvE318e/chzc9PgmTjMXpO6nhh8ssvsEoG2hff4+tu
7LbwFBqyEy54Jw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:38 2026 by rpki-client