Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier: 6+6ilwU/eZute5LhOKmfRaKugFlQDSqLGjmfgEu8Lf8=
Subject key identifier: 25:6A:0E:4E:B4:1D:2A:67:3E:3E:6A:F7:F3:23:9E:CE:2B:65:04:D7
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial: 019CAAC61006C24D8FA88A0747A1B62C02A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number: 074E
Signing time: Sun 01 Mar 2026 19:00:32 +0000
Manifest this update: Sun 01 Mar 2026 19:00:32 +0000
Manifest next update: Mon 02 Mar 2026 19:00:32 +0000
Files and hashes: 1: LMnW7BQw6VTniWIkmWbGGaakoOg.roa (hash: Xvh7VVkZUVV7AZo3Wz6W7iZLuuYv1DelOXPWWhTcB8A=)
2: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: 6JSvkJ3JcfimLKqj00jtoNp8deHXhxC+3F1t+GnDMLo=)
3: q8TRW-nxF77mnHW626ye6CxptZs.roa (hash: tsP4mbqeyfW3lJKs8auJSMWq6KIkEBqI6CN97FBqDPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:10:06:c2:4d:8f:a8:8a:07:47:a1:b6:2c:02:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Validity
Not Before: Mar 1 19:00:32 2026 GMT
Not After : Mar 2 19:00:32 2026 GMT
Subject: CN=256a0e4eb41d2a673e3e6af7f3239ece2b6504d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:fe:d1:b7:73:70:49:31:8f:46:15:79:ea:
4a:3d:60:40:42:f1:94:b1:ba:34:fd:33:74:f5:d1:
f1:ec:3d:ff:fd:40:78:54:26:ac:6e:32:d5:55:2f:
26:0a:e9:b5:99:18:ab:cb:ba:1d:64:c0:23:ec:c6:
53:de:86:8a:6e:df:4b:70:78:27:4f:9e:09:84:1c:
89:db:ee:b4:22:95:84:eb:fd:18:5e:e7:10:5a:a1:
dc:bb:69:04:a5:da:51:2a:06:2b:0e:03:45:18:98:
6d:bc:4d:7b:d4:71:b0:4e:d7:78:c3:a7:f0:12:9a:
d5:ba:e0:16:20:62:e6:96:07:49:b8:00:d3:54:fa:
89:5d:cd:28:d3:c0:fc:03:c6:fb:f8:85:05:7c:65:
83:5b:6b:f9:42:d8:23:e8:ea:81:5f:b0:26:76:7f:
34:bc:06:e5:f4:99:b6:13:51:2c:85:bd:3a:34:a1:
a6:66:c0:02:3f:a7:59:49:6d:b7:72:90:26:0d:6d:
0d:33:0a:60:e0:a1:1e:6e:ce:a2:b4:c3:73:15:85:
fa:70:d0:ee:46:ea:76:2a:cd:d8:53:2e:87:13:6a:
12:fc:6e:30:02:ac:5d:f6:86:2a:ea:b0:52:d7:57:
95:8f:cb:c8:86:37:95:29:d0:4a:4c:39:3d:35:e3:
b9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6A:0E:4E:B4:1D:2A:67:3E:3E:6A:F7:F3:23:9E:CE:2B:65:04:D7
X509v3 Authority Key Identifier:
keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:47:b1:ac:90:8d:81:33:60:bf:66:56:61:ec:7c:d5:b8:fd:
ba:f7:c2:ea:6d:b9:75:58:04:49:22:57:cf:a9:c4:16:ff:5c:
bc:c1:60:72:ca:50:f2:1d:bb:23:04:ec:1b:94:35:b9:da:6f:
69:0e:a3:2d:1c:12:c2:c4:93:67:ca:c6:a1:f8:29:15:22:cb:
4b:9b:06:b6:6f:81:bc:21:28:0b:fc:eb:6b:ff:f7:aa:be:fc:
b9:7c:3e:26:e2:42:5b:27:37:ab:83:f5:61:f4:fe:3d:e4:ef:
8e:0c:13:66:12:75:44:56:fd:6c:5b:e5:c9:73:23:14:bb:04:
cf:19:da:09:32:27:ad:e2:c1:89:d8:58:2e:2e:4a:ee:82:db:
34:cc:82:eb:ac:df:b5:27:20:da:b6:6d:8d:5e:ab:04:fd:26:
8c:78:3e:3e:2c:bd:0f:57:21:af:1b:22:d2:5f:18:e6:2e:cc:
5d:d8:40:d7:43:84:b7:b7:c1:66:9c:69:92:6a:81:fe:7b:48:
c8:33:44:97:78:5f:80:85:aa:fc:ea:de:1f:0b:9b:cb:7d:24:
41:ac:f5:1d:d4:fc:03:2c:d0:a7:f7:d1:53:42:6c:98:a3:53:
b9:2d:33:35:e1:ff:3f:d4:12:e9:15:d9:70:47:44:02:d1:45:
2e:d8:48:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:17 2026 by rpki-client