Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier: psWhZw80xDXeMrC66m3sCgIYcwBA0eRr1w7sWffp/4Y=
Subject key identifier: 1A:E4:CC:12:FF:76:B5:96:9B:D8:29:26:5E:14:81:F5:FE:E7:FA:47
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial: 019CACB470804066E8457CA52F142B0F32C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number: 074F
Signing time: Mon 02 Mar 2026 04:00:32 +0000
Manifest this update: Mon 02 Mar 2026 04:00:32 +0000
Manifest next update: Tue 03 Mar 2026 04:00:32 +0000
Files and hashes: 1: LMnW7BQw6VTniWIkmWbGGaakoOg.roa (hash: Xvh7VVkZUVV7AZo3Wz6W7iZLuuYv1DelOXPWWhTcB8A=)
2: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: CG2o7fFGY5Z+wQwHQEkBtWd5PpBgxIckGVa/yjrC/FM=)
3: q8TRW-nxF77mnHW626ye6CxptZs.roa (hash: tsP4mbqeyfW3lJKs8auJSMWq6KIkEBqI6CN97FBqDPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:70:80:40:66:e8:45:7c:a5:2f:14:2b:0f:32:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Validity
Not Before: Mar 2 04:00:32 2026 GMT
Not After : Mar 3 04:00:32 2026 GMT
Subject: CN=1ae4cc12ff76b5969bd829265e1481f5fee7fa47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:c9:b7:0a:6f:de:45:ae:b6:fc:c6:91:de:
3b:b7:7b:e5:f5:27:02:84:03:9b:37:60:ea:63:3c:
48:b7:f9:11:54:11:e1:1a:b9:a0:0f:d7:b9:23:04:
2b:51:77:0f:3b:79:85:34:91:b6:14:cf:e8:29:13:
52:83:de:a8:69:dc:2d:70:c0:10:51:f4:dd:ea:3c:
86:54:79:6c:31:4e:66:5f:d3:8a:89:8c:f1:28:00:
bb:93:29:32:76:e3:c4:45:74:d9:e8:57:86:ad:83:
9b:c9:67:fb:92:3a:26:0b:d6:40:81:74:35:15:15:
cf:0b:27:00:f1:0f:4e:0c:40:55:14:73:33:15:1c:
d2:80:cd:13:2a:a5:32:29:9c:31:b8:a5:17:33:ba:
0c:a8:fa:d9:f4:7f:30:73:22:9f:9b:45:e9:0d:02:
3f:d4:0d:68:43:21:e4:0b:df:2a:98:ab:98:1d:19:
af:7b:c8:95:69:eb:85:21:47:44:f6:ea:fd:c8:52:
64:1b:c9:c4:d7:ff:94:aa:14:76:67:71:4b:a4:c0:
f4:69:d6:d9:fc:3b:f7:e5:6e:ed:75:81:c2:4c:de:
bb:b5:88:a6:12:69:a1:d8:19:ae:0e:48:c1:a6:95:
5e:0c:55:ea:3a:9b:28:6c:fb:07:2f:8c:11:16:72:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E4:CC:12:FF:76:B5:96:9B:D8:29:26:5E:14:81:F5:FE:E7:FA:47
X509v3 Authority Key Identifier:
keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3e:89:dd:76:0a:f6:c0:ca:25:b1:46:d7:b1:7a:94:90:e4:
0b:78:92:10:8a:35:14:0e:8f:fa:86:8d:bf:68:dc:dc:f5:3e:
69:53:31:b2:c5:e7:3d:fc:29:9c:fb:f1:8c:22:79:c3:ac:33:
8c:5f:30:d8:8a:55:42:f8:b1:e9:06:0d:ee:9c:e8:c5:ce:d3:
55:f3:cf:59:2f:0f:1e:0b:2c:d9:6b:6c:b1:1a:1e:3b:0d:f2:
56:e6:88:0a:a3:c0:2b:2c:dd:33:de:65:48:45:18:64:52:85:
a2:0f:b9:88:4d:96:3e:6d:a5:95:13:b5:26:ac:7a:0a:fc:91:
88:05:1a:fc:0c:cd:ce:e9:66:92:71:c9:37:92:a9:2a:1d:c9:
e8:cc:76:6c:bb:43:83:16:d9:f8:ec:90:cb:56:a6:80:d8:97:
14:07:1b:f8:4e:87:d0:11:4f:a0:f0:c2:4a:32:7e:c3:35:fc:
fc:0a:de:cd:4b:f3:07:55:fc:21:4b:e7:ef:32:2c:26:0e:1a:
c0:78:23:58:a6:87:fa:06:04:3b:43:f2:13:df:d6:7d:1c:65:
58:49:0e:62:04:a4:26:d8:5e:b6:ca:55:02:2f:39:d3:45:c5:
99:60:6e:25:11:98:65:54:e9:63:ed:3a:d5:b6:9c:89:11:4f:
d8:90:7a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:15 2026 by rpki-client