Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier: Plm4lUWGBSEL0nslskz5E5cVGBAvy0cJNCzLizUGzEo=
Subject key identifier: 49:40:39:BF:09:2D:43:86:8C:D8:01:76:7D:17:BD:CA:D3:02:B6:DE
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial: 019EBFC8068818B728B244B8496747601CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number: 0863
Signing time: Sat 13 Jun 2026 07:00:17 +0000
Manifest this update: Sat 13 Jun 2026 07:00:17 +0000
Manifest next update: Sun 14 Jun 2026 07:00:17 +0000
Files and hashes: 1: LMnW7BQw6VTniWIkmWbGGaakoOg.roa (hash: Xvh7VVkZUVV7AZo3Wz6W7iZLuuYv1DelOXPWWhTcB8A=)
2: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: YrkAkMeDbZ9vZ7Z/lgksPSz4EtajDqlN4KsBzOX4NOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:06:88:18:b7:28:b2:44:b8:49:67:47:60:1c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Validity
Not Before: Jun 13 07:00:17 2026 GMT
Not After : Jun 14 07:00:17 2026 GMT
Subject: CN=494039bf092d43868cd801767d17bdcad302b6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8f:76:1a:ab:93:45:47:48:72:2e:70:2a:1a:
0a:71:c3:bb:86:7d:5e:2e:0e:b4:6a:a3:7d:c0:a0:
d4:80:f6:55:0e:d6:2f:99:ca:85:52:43:61:82:f2:
f0:26:4a:53:82:ac:8d:a4:1f:58:17:26:fb:7a:3d:
16:55:af:2d:ae:61:64:53:30:10:a3:d0:50:34:61:
06:a4:80:c9:9a:a1:1a:e1:7b:a9:69:bb:98:26:0c:
22:78:8c:67:14:3e:d0:9f:15:18:4a:44:fe:57:cc:
89:f8:de:1a:8c:77:69:c6:21:28:f1:00:d7:ec:c3:
24:92:11:83:35:eb:bd:3e:a8:d2:0f:d8:22:8d:10:
18:20:c5:60:31:e6:5f:49:8c:56:f5:9a:c1:c2:e3:
4e:cd:78:4c:b0:3d:ad:37:e1:5a:ab:1b:85:d8:6f:
37:f8:2e:24:4e:16:4c:eb:aa:c2:37:03:ad:95:ae:
c6:d7:32:a4:55:f2:5d:e0:cc:a2:65:80:22:07:94:
8d:36:f1:b2:e4:0b:eb:bc:35:9d:d9:6b:12:21:91:
4a:0f:6d:3d:c3:e1:54:7e:dd:3b:37:5e:da:af:8a:
52:6b:74:cf:74:15:98:c3:c1:69:b1:4e:0c:c8:61:
f0:52:02:23:bc:93:6a:7c:5e:ac:33:86:81:ef:b6:
91:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:40:39:BF:09:2D:43:86:8C:D8:01:76:7D:17:BD:CA:D3:02:B6:DE
X509v3 Authority Key Identifier:
keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:70:57:2e:41:d5:cf:8a:16:6a:d1:bc:27:a7:82:67:d0:74:
3a:fe:37:78:00:f6:d9:29:62:62:b8:b3:4e:ec:c7:d3:51:d8:
48:33:7d:c3:f0:3e:76:e1:35:b9:d0:6b:01:e9:c2:cb:f3:08:
bb:b5:92:2a:61:f0:b6:87:4b:89:ba:23:cd:0a:ef:5f:63:c7:
3a:57:79:04:33:c5:fd:af:da:da:1d:33:8c:1e:19:ff:63:0b:
95:af:67:a0:99:01:c3:93:4c:87:f9:54:c7:dd:a9:39:dd:11:
c2:b5:ca:fb:4c:29:63:c2:3e:d9:31:88:f9:e0:34:f9:e2:9b:
bc:4f:ce:a2:93:dc:6f:54:ef:24:c0:58:b7:45:c0:16:dc:cf:
8c:be:28:5f:ac:96:ad:31:ff:34:8f:ad:d7:76:73:7f:18:fb:
77:81:17:b0:d4:89:c1:ca:f4:26:a8:9e:30:ae:86:6c:1d:c2:
3d:48:9a:1b:aa:8a:99:81:73:8e:72:12:de:09:26:9c:6e:15:
57:99:47:1f:5e:be:36:47:35:ff:47:49:33:1f:08:4c:49:d6:
9c:00:9a:1a:3d:89:84:37:7c:47:b1:4d:ed:0f:16:40:07:fc:
00:79:d9:10:de:79:fe:b8:86:7e:2c:d7:d5:92:ae:29:90:38:
fa:21:2b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:23:04 2026 by rpki-client