Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier: Ucm/tH1OGY2WuiRtzm4KnRRXzERtp6tgxzwXSeSGOJw=
Subject key identifier: 99:18:6B:38:21:EC:0E:DA:F4:0E:B1:EA:40:22:F4:3F:5F:92:4A:A4
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 019CABD92D8AFB52179F8C37D50ED1E65388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number: 1859
Signing time: Mon 02 Mar 2026 00:01:02 +0000
Manifest this update: Mon 02 Mar 2026 00:01:02 +0000
Manifest next update: Tue 03 Mar 2026 00:01:02 +0000
Files and hashes: 1: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: qPtjEHNvVnnvAyCrCz2yXJdaFGAeCoS1eJwA0DUvcHE=)
2: XiSpk1i5DugMLOQC8LxlXZ3OXzg.roa (hash: wXcCGl7A0eNH0SjdToQ3CeO3hMfYdUgUl2ywslHJLk8=)
3: cAVdSGytSyux4FQsZuWB3TVoUN8.roa (hash: RAtVEud/Ywx68w73bvy2E2uTPg4lltVhihmdYUF5drI=)
4: grtZ88A4ab4V_GiK5bfawAFeBik.roa (hash: Gok5HzoG6ye09AxYK0QJqUuAYdVlePP8eXldni6wygU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2d:8a:fb:52:17:9f:8c:37:d5:0e:d1:e6:53:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Mar 2 00:01:02 2026 GMT
Not After : Mar 3 00:01:02 2026 GMT
Subject: CN=99186b3821ec0edaf40eb1ea4022f43f5f924aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:72:ce:b1:eb:78:89:c4:9d:46:1a:6a:0b:
41:20:0f:d3:99:5e:32:fd:c0:22:d3:ea:3d:9a:36:
29:6d:14:94:b7:fe:83:83:bc:b7:a2:6b:b3:80:f1:
23:71:62:17:ca:f0:2d:0a:69:e2:39:db:32:f4:52:
58:d3:54:b0:5a:c0:86:0a:f9:09:09:9b:14:3e:8d:
ee:48:d2:66:48:f5:bb:6d:cd:fd:f7:99:d4:a1:10:
2e:36:db:df:66:ed:55:de:5a:21:e0:76:fd:c1:7b:
4d:b7:d5:03:04:53:6e:c0:3c:c5:eb:06:23:85:8e:
24:ad:7c:fa:a7:53:2f:88:47:da:78:4f:95:7c:1c:
7a:aa:ab:ba:48:05:28:7d:0f:b1:3b:28:db:ed:26:
8c:96:4e:c6:2a:3c:e7:54:e1:12:23:ea:a9:27:21:
c9:4d:e1:68:31:77:a8:65:82:04:83:c2:03:4d:dd:
53:36:df:c0:24:91:70:f1:3f:74:d1:26:4c:c6:5a:
8e:b9:de:2b:f9:07:0e:f3:d1:cd:73:2c:96:3a:d3:
76:94:c7:18:0f:cb:ca:9e:14:71:b9:0f:3b:d4:97:
3b:e8:89:be:b8:e3:d8:c8:4d:e5:42:44:cb:59:bf:
21:f6:c0:a7:c5:5b:cf:10:e1:d0:c1:09:8b:e9:6e:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:18:6B:38:21:EC:0E:DA:F4:0E:B1:EA:40:22:F4:3F:5F:92:4A:A4
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f0:8c:25:a0:48:62:c0:c0:ec:0a:cf:f5:56:35:3b:ba:be:
55:85:f3:e2:e5:1a:25:59:43:64:04:72:a4:94:9e:8b:4c:2b:
31:fb:8e:83:06:fd:89:18:97:23:ba:0b:c4:af:91:0c:a4:06:
ec:69:29:f2:d5:9c:9b:b1:d4:1b:4b:1b:cf:0e:13:ef:47:b8:
2a:df:59:ad:47:f3:92:93:c3:49:19:c8:f4:2a:be:e6:6d:a9:
d0:74:92:f9:12:3e:07:9d:a1:d3:b9:8b:c9:69:a0:9d:45:60:
41:3f:f5:b7:6b:b9:e3:6a:8a:dc:24:65:fe:3d:c7:c3:3a:9e:
1a:45:ee:70:1f:4a:d5:a6:42:c6:36:79:5a:08:0f:47:36:ae:
d1:6d:13:cc:44:6f:ff:fa:fa:26:68:7b:e5:57:07:9e:31:31:
31:b6:a1:1e:1f:99:9b:2a:30:8b:d4:3a:1d:f7:9b:7a:f6:b3:
37:f5:c6:d0:c7:dd:5e:e6:52:94:59:54:91:a3:d5:d3:8d:09:
ae:8e:a6:ad:8a:e6:b7:51:32:b6:9e:f1:d4:62:f3:5a:95:27:
fc:a7:21:01:ac:21:35:39:d4:b6:27:71:75:ba:8f:cd:1e:70:
72:49:45:a4:e1:64:73:99:86:ca:c1:4c:ff:50:71:e1:27:d9:
5a:91:46:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:38 2026 by rpki-client