Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier: eMLEygZPxW5QqW9XVvS23kTYPVUacx0L4YXge/xVmSI=
Subject key identifier: E2:01:D5:FF:D2:3F:33:A4:6F:AC:5E:62:B0:5B:9B:2F:8E:DE:88:B6
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial: 01A0C9348A37B05ABE9EFE5300B6161C4B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number: 0971
Signing time: Tue 22 Sep 2026 13:00:58 +0000
Manifest this update: Tue 22 Sep 2026 13:00:58 +0000
Manifest next update: Wed 23 Sep 2026 13:00:58 +0000
Files and hashes: 1: LMnW7BQw6VTniWIkmWbGGaakoOg.roa (hash: Xvh7VVkZUVV7AZo3Wz6W7iZLuuYv1DelOXPWWhTcB8A=)
2: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: 84dqRhm+YMTaWdzPMV/2L3tInc1cPr+UG5U/nZGsV0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:8a:37:b0:5a:be:9e:fe:53:00:b6:16:1c:4b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Validity
Not Before: Sep 22 13:00:58 2026 GMT
Not After : Sep 23 13:00:58 2026 GMT
Subject: CN=e201d5ffd23f33a46fac5e62b05b9b2f8ede88b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:1e:74:5f:63:fb:30:72:21:0f:84:82:55:
84:a7:c3:94:3f:49:61:81:db:19:46:9f:81:d1:f3:
62:f8:50:98:b6:be:c1:f7:94:b7:7a:a3:c5:1d:96:
3e:ed:5b:f8:b0:22:7f:96:41:6e:4c:bc:2e:fd:3a:
a4:57:a8:ca:eb:ce:e6:09:37:45:3e:9e:e8:c8:27:
9b:66:1b:0a:d8:0c:45:2c:91:0b:c3:39:e2:d4:04:
26:18:a4:d3:09:53:51:4c:89:7f:86:b6:95:d8:9c:
66:35:d7:93:dd:6a:56:32:60:00:01:27:7f:01:b8:
95:44:08:ca:27:bb:ee:ea:70:fc:44:36:f6:c0:51:
85:9b:07:97:52:94:a5:6d:44:30:03:a2:a3:3c:8e:
88:ad:00:80:90:56:b3:c0:14:87:6c:cd:58:26:62:
56:51:65:7a:97:e7:a6:b9:df:9b:f1:a9:1c:70:93:
aa:88:21:99:30:44:9f:51:34:0b:3f:a3:2c:6a:b8:
84:3f:9f:8c:30:33:98:37:1e:3c:66:09:f2:ed:21:
18:0a:4f:fe:c9:b0:d1:05:af:a8:e4:28:18:7a:53:
64:54:e1:45:97:13:3f:77:47:85:51:94:50:7b:cf:
16:5c:61:14:69:04:a2:b7:84:f2:e7:90:50:29:d4:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:01:D5:FF:D2:3F:33:A4:6F:AC:5E:62:B0:5B:9B:2F:8E:DE:88:B6
X509v3 Authority Key Identifier:
keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6a:72:5b:5c:a7:e9:02:e6:65:3c:f7:a6:3c:e4:95:54:59:
99:24:c9:ef:24:4c:cc:cf:f8:51:87:cd:77:4d:33:23:d7:c3:
b7:8c:60:a2:7c:d3:40:2b:d5:37:15:62:e2:ec:80:b9:00:43:
b9:a8:cc:6f:56:43:7f:77:a0:a8:31:17:8c:6b:7b:8f:f7:ab:
4b:e3:23:5c:51:6f:06:9c:55:49:69:ae:a8:dd:5b:c7:cb:e2:
14:bb:de:75:31:e8:05:4f:7f:65:8a:99:82:3e:f9:a3:aa:d6:
c8:49:8f:fe:55:f2:da:c4:1a:f8:5e:45:ea:b2:89:cb:e1:df:
67:5c:77:03:13:2f:55:07:a6:86:66:41:32:4d:bf:00:3b:46:
e9:36:b6:2f:ec:bf:64:a8:b1:96:4b:73:af:b8:7a:ff:4f:fa:
05:cb:e8:84:de:16:10:87:1e:a1:c6:a1:e4:71:2d:f2:4c:ba:
a3:55:9a:a6:65:53:d9:96:f2:9e:ac:4d:3f:7b:d6:7a:70:49:
51:cf:1b:0f:82:7c:ec:1e:8a:98:d3:59:05:29:13:8e:5b:00:
e6:97:e6:ac:1a:66:5d:8e:1d:ac:71:bd:69:e0:d7:a5:26:9e:
ad:5f:9d:ac:a1:9b:81:d4:77:5e:87:6f:09:e4:ed:84:a8:09:
fd:06:1c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:58:03 2026 by rpki-client