Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier: ItZhe/MPRqw0YABl4csqMiUSJeTQ43/ftP2niQsS618=
Subject key identifier: C5:2B:14:A9:A3:59:0D:AD:AC:D2:39:20:F3:D9:61:74:46:55:B2:25
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial: 019FAB63AFEB0BAA9FAB331D4F90A57FD760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number: 08DD
Signing time: Wed 29 Jul 2026 01:01:04 +0000
Manifest this update: Wed 29 Jul 2026 01:01:04 +0000
Manifest next update: Thu 30 Jul 2026 01:01:04 +0000
Files and hashes: 1: LMnW7BQw6VTniWIkmWbGGaakoOg.roa (hash: Xvh7VVkZUVV7AZo3Wz6W7iZLuuYv1DelOXPWWhTcB8A=)
2: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: GEwDt9Su4/XpJ+UbDihRGnVldBCPo8aIjLgE4lr4cWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:af:eb:0b:aa:9f:ab:33:1d:4f:90:a5:7f:d7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Validity
Not Before: Jul 29 01:01:04 2026 GMT
Not After : Jul 30 01:01:04 2026 GMT
Subject: CN=c52b14a9a3590dadacd23920f3d961744655b225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cd:2c:c1:d2:81:c4:ff:2e:6a:5d:37:17:81:
3c:9a:e1:9a:64:8c:82:e4:08:88:65:19:00:39:9a:
6f:b0:77:79:2c:05:ca:52:03:ba:26:f3:1e:05:31:
da:5e:2c:9a:55:98:95:86:87:5f:d4:9d:8c:71:3d:
d5:7f:49:9c:b0:d3:2b:07:b1:4a:32:4e:b5:ff:76:
d3:28:9e:4a:fd:dd:bf:3a:5b:fb:1f:bf:4f:7d:3a:
0c:e4:12:e8:86:a8:6f:e8:97:5b:9a:d9:24:a9:8b:
bb:f1:db:a2:c6:60:93:8d:7d:f1:13:88:89:2e:2f:
7a:e0:89:fd:aa:4f:3d:5b:80:09:82:a6:e5:d5:2d:
ee:fd:0b:51:f2:ec:61:c3:70:da:0b:97:fc:9f:78:
30:16:01:1c:a4:6d:3d:09:50:18:f4:7d:37:c3:0c:
72:29:f6:38:d7:19:98:62:3b:82:23:e4:c3:9b:20:
3e:46:3d:2b:9e:d8:de:67:49:33:cc:f9:e8:5d:16:
08:f9:64:85:10:c5:2d:62:60:f9:d1:83:0e:1a:79:
7f:a0:72:92:9c:39:49:c7:ed:cc:dd:b6:92:d6:2b:
9a:72:52:4f:8d:c5:8e:79:5c:6f:28:85:9e:a7:e9:
1f:c0:be:91:cb:4d:e5:7d:5c:92:22:09:14:5e:ca:
55:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2B:14:A9:A3:59:0D:AD:AC:D2:39:20:F3:D9:61:74:46:55:B2:25
X509v3 Authority Key Identifier:
keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d0:d7:05:a8:53:90:61:f5:32:50:00:a6:7a:02:0b:7d:1b:
5e:7c:51:59:8b:70:55:17:f5:b9:a2:47:e4:b7:4f:87:82:b5:
5c:7b:a4:f9:17:b5:9b:bf:29:b9:bb:9b:bb:c4:4b:1c:9b:6c:
ee:20:1e:e9:14:42:76:41:82:1a:52:fd:bf:89:42:9f:a6:6b:
0a:e7:b1:26:55:7a:b8:4e:56:0d:80:d3:ab:0c:17:f7:e5:82:
2e:f8:1f:e7:40:42:08:0a:8e:0b:f0:5a:7c:18:0e:9e:33:6d:
f4:e9:5d:42:80:4b:14:e4:ea:75:8b:9e:dd:a6:d7:f7:79:e4:
66:fe:92:27:d2:99:22:35:37:f6:5f:f9:27:9a:5e:42:ab:e6:
f9:a1:cf:58:59:47:62:98:27:9a:fb:65:f6:12:72:85:6d:7b:
4a:59:e4:7c:42:3d:30:09:08:4d:f2:04:14:85:03:7d:b3:eb:
7f:66:77:9a:c0:1a:36:56:18:dc:3e:e7:bd:c0:56:a9:a3:51:
6a:8c:07:a2:84:d4:c2:a7:c8:3e:aa:a5:f4:e1:4b:5e:d7:db:
9d:b2:8b:eb:1a:fa:8b:82:14:03:5c:a0:7f:ef:6c:39:68:79:
22:ae:ab:f0:dc:2a:c4:56:3c:4b:75:fa:57:c7:a6:0a:a2:14:
d8:47:0c:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY6/rC6qfqzMdT5Clf9dgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZjYxODJiZWI3YjgyYzg1NzNkZjhiNmQ1MTA0NGQ2YzY3
MjRlODIwHhcNMjYwNzI5MDEwMTA0WhcNMjYwNzMwMDEwMTA0WjAzMTEwLwYDVQQD
EyhjNTJiMTRhOWEzNTkwZGFkYWNkMjM5MjBmM2Q5NjE3NDQ2NTViMjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8s0swdKBxP8ual03F4E8muGaZIyC
5AiIZRkAOZpvsHd5LAXKUgO6JvMeBTHaXiyaVZiVhodf1J2McT3Vf0mcsNMrB7FK
Mk61/3bTKJ5K/d2/Olv7H79PfToM5BLohqhv6JdbmtkkqYu78duixmCTjX3xE4iJ
Li964In9qk89W4AJgqbl1S3u/QtR8uxhw3DaC5f8n3gwFgEcpG09CVAY9H03wwxy
KfY41xmYYjuCI+TDmyA+Rj0rntjeZ0kzzPnoXRYI+WSFEMUtYmD50YMOGnl/oHKS
nDlJx+3M3baS1iuaclJPjcWOeVxvKIWep+kfwL6Ry03lfVySIgkUXspVjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUrFKmjWQ2trNI5IPPZYXRGVbIlMB8GA1UdIwQY
MBaAFC/2GCvre4LIVz34ttUQRNbGck6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYt
Yjc3NmEyMjA0NTZiLzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYtYjc3NmEyMjA0NTZi
LzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdDXBahT
kGH1MlAApnoCC30bXnxRWYtwVRf1uaJH5LdPh4K1XHuk+Re1m78pububu8RLHJts
7iAe6RRCdkGCGlL9v4lCn6ZrCuexJlV6uE5WDYDTqwwX9+WCLvgf50BCCAqOC/Ba
fBgOnjNt9OldQoBLFOTqdYue3abX93nkZv6SJ9KZIjU39l/5J5peQqvm+aHPWFlH
Ypgnmvtl9hJyhW17SlnkfEI9MAkITfIEFIUDfbPrf2Z3msAaNlYY3D7nvcBWqaNR
aowHooTUwqfIPqql9OFLXtfbnbKL6xr6i4IUA1ygf+9sOWh5Iq6r8NwqxFY8S3X6
V8emCqIU2EcMsw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:34:45 2026 by rpki-client