Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier: 1URjjqP9jBV3ENunXeDERUnaS8pY/AFgeW7W+srwnjs=
Subject key identifier: 19:5C:2A:80:72:2F:05:F1:5E:21:54:7A:4C:D0:8E:52:59:85:32:36
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial: 019D985086DDC5B81B7ED1121F85BB9EF59B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number: 07C9
Signing time: Thu 16 Apr 2026 22:01:47 +0000
Manifest this update: Thu 16 Apr 2026 22:01:47 +0000
Manifest next update: Fri 17 Apr 2026 22:01:47 +0000
Files and hashes: 1: LMnW7BQw6VTniWIkmWbGGaakoOg.roa (hash: Xvh7VVkZUVV7AZo3Wz6W7iZLuuYv1DelOXPWWhTcB8A=)
2: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: mqAegFXCNpiafVWDNzY4VOf4i5WGvFsHaZfuS0Ry4Ck=)
3: q8TRW-nxF77mnHW626ye6CxptZs.roa (hash: tsP4mbqeyfW3lJKs8auJSMWq6KIkEBqI6CN97FBqDPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:86:dd:c5:b8:1b:7e:d1:12:1f:85:bb:9e:f5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Validity
Not Before: Apr 16 22:01:47 2026 GMT
Not After : Apr 17 22:01:47 2026 GMT
Subject: CN=195c2a80722f05f15e21547a4cd08e5259853236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:a8:2d:b8:ab:df:28:42:ed:ba:80:e0:e9:
9f:75:22:ba:2d:30:6b:d3:85:f9:eb:e9:d7:10:23:
77:17:1b:10:af:42:38:cc:95:4f:06:d4:96:59:ff:
85:8e:4c:54:4e:e1:bb:b4:64:10:19:68:79:45:7e:
0a:d6:c0:99:78:58:74:fa:77:08:57:bb:28:a1:c7:
21:0c:0a:ab:d1:a6:05:02:01:c3:10:22:b5:dc:79:
c6:cc:26:94:e4:da:d4:48:9b:95:67:e8:17:06:a0:
25:62:82:1f:3e:2e:59:80:15:38:47:dd:5c:ea:9c:
ff:cc:97:bf:ff:91:a0:e7:d1:3c:02:ed:b3:82:ee:
af:75:4f:45:16:7d:62:34:3b:c5:51:33:e8:24:48:
06:2e:bd:12:9b:7f:c0:16:c7:4b:e0:56:cc:68:27:
d3:40:0f:e5:ad:03:7a:bb:60:95:87:c8:ad:3b:0d:
47:63:71:33:20:74:c8:20:d4:b0:3b:f4:82:f7:8a:
49:8e:0a:22:cb:97:a6:ff:e3:0c:4a:74:ba:11:89:
6a:f5:b5:38:2c:0b:19:0b:85:0d:96:a1:cd:b5:c2:
54:94:03:44:08:16:5b:2e:82:a9:e1:fc:1b:50:bc:
8f:75:fa:88:b5:cf:bb:8b:82:34:42:56:05:40:7e:
24:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5C:2A:80:72:2F:05:F1:5E:21:54:7A:4C:D0:8E:52:59:85:32:36
X509v3 Authority Key Identifier:
keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:87:0e:f2:af:87:6e:eb:20:32:9c:20:60:29:c7:56:71:38:
b3:ac:4f:90:f7:91:3c:a9:10:79:2c:d8:c9:1b:3b:f8:ad:23:
7f:80:49:e0:70:58:31:c3:aa:b4:c8:7e:71:36:e9:35:f4:1c:
5f:fc:13:ef:6e:a4:93:2e:93:b2:04:85:6b:e6:a6:8f:0f:14:
ce:fb:7a:ec:cb:82:90:2d:99:7e:88:88:85:3e:05:ce:22:05:
e9:a0:65:0b:d1:9b:ac:e5:53:19:c9:ce:5d:09:bf:61:5e:84:
f9:46:6c:00:c5:9c:ff:a8:c7:5b:54:b1:ff:c4:73:1f:bd:1e:
df:de:88:4d:27:12:a6:e4:19:43:6d:76:55:fd:44:fe:3a:ac:
9f:e9:b6:d2:9e:1a:2f:f0:bb:4b:63:66:16:4a:be:ef:fc:6a:
aa:76:91:55:43:27:67:81:00:74:95:f8:ed:6a:78:d8:9f:d1:
bc:13:55:39:b7:9c:ed:33:a9:af:2d:54:71:c3:9f:e9:9a:11:
4f:d0:83:2f:a8:66:1d:33:10:26:1b:09:80:d3:43:dc:ba:ee:
ee:f9:c8:d0:8d:58:f2:70:89:94:a2:eb:4e:7f:ef:59:ad:87:
4c:db:51:8f:fa:cd:08:23:32:89:bf:b0:74:7e:99:0d:5b:34:
ac:86:bb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:46 2026 by rpki-client