Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
File: LyytEgqv-e_ffGlZpOBHDj4GJPA.mft (raw, json)
Hash identifier: OvWMWEE8FAv/yOHNcs17dfaPrPwLajHlGmtUTN+BgKI=
Subject key identifier: 0C:72:3B:A7:E1:18:3E:C5:CF:D2:C2:DE:F0:37:BE:E3:02:63:F5:8A
Authority key identifier: 2F:2C:AD:12:0A:AF:F9:EF:DF:7C:69:59:A4:E0:47:0E:3E:06:24:F0
Certificate issuer: /CN=2f2cad120aaff9efdf7c6959a4e0470e3e0624f0
Certificate serial: 019DA41CA6535BBF39EF8AE89428823A6AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
Manifest number: 92
Signing time: Sun 19 Apr 2026 05:00:33 +0000
Manifest this update: Sun 19 Apr 2026 05:00:33 +0000
Manifest next update: Mon 20 Apr 2026 05:00:33 +0000
Files and hashes: 1: Hu4XjK4kmNzJLAM6_ajtwBsbj0A.roa (hash: ChkZxtf+f4NVFn48swM6zD1dQ21c3QT2WX6YtJDB51E=)
2: LyytEgqv-e_ffGlZpOBHDj4GJPA.crl (hash: 5AMvqAysVJkchy1FBxajV9JOKv7KvswO0W0yOqGqSv8=)
3: oGY7ywjzIawiazxfJPdxsbpKwRU.asa (hash: bPFAxXTZvoR90j3k/VjW0y0gMph9xG0NmXzKwHJV27k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:a6:53:5b:bf:39:ef:8a:e8:94:28:82:3a:6a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2cad120aaff9efdf7c6959a4e0470e3e0624f0
Validity
Not Before: Apr 19 05:00:33 2026 GMT
Not After : Apr 20 05:00:33 2026 GMT
Subject: CN=0c723ba7e1183ec5cfd2c2def037bee30263f58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ee:43:2f:09:b1:7e:f4:97:68:a3:9c:34:e2:
f1:58:a3:ef:09:ca:b2:fc:92:5e:f2:68:96:87:66:
1a:1e:9a:af:9e:46:ce:fb:1b:57:bd:b0:da:54:25:
a6:f6:f8:af:d3:37:f1:1f:b7:41:fe:d0:df:2c:6e:
5a:db:c5:b7:d6:18:de:41:24:7d:b6:ea:17:fc:32:
b4:e7:2e:6f:02:41:66:42:9d:ad:76:cc:ba:c4:e3:
a8:f3:3c:15:6b:67:ae:74:0f:05:81:b0:a2:eb:e3:
e2:96:1f:aa:00:0a:91:e8:08:97:76:92:f7:bc:60:
0e:f2:01:26:1c:a9:d8:41:18:9b:45:89:be:5b:dc:
6e:c0:4a:a3:b3:00:a6:f0:32:f6:bc:bf:41:a6:fe:
8c:f4:86:07:ac:db:0b:5e:cd:aa:f2:65:1e:79:ba:
17:72:87:ec:61:de:6d:ad:6f:2f:51:de:d8:7c:aa:
ed:cb:f1:6d:41:91:d0:9a:f1:13:b4:11:7a:33:a3:
7d:24:11:09:29:4e:7d:cc:d7:ab:0d:e1:14:a7:cf:
85:3e:e6:15:f6:d5:ec:b4:d1:d5:3d:18:e4:e8:51:
db:49:e5:2a:01:51:12:fe:cd:ec:32:2f:0f:67:c1:
ef:78:e7:f9:94:3c:1a:78:67:8e:ab:15:ca:70:bc:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:72:3B:A7:E1:18:3E:C5:CF:D2:C2:DE:F0:37:BE:E3:02:63:F5:8A
X509v3 Authority Key Identifier:
keyid:2F:2C:AD:12:0A:AF:F9:EF:DF:7C:69:59:A4:E0:47:0E:3E:06:24:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9d:68:3d:75:46:c0:27:7a:60:9e:4a:76:b3:47:a2:60:00:
83:f5:08:42:75:9a:0d:e9:93:d8:39:c3:f7:e5:4f:67:87:db:
ab:5b:eb:54:89:84:c3:7d:c8:2d:14:7d:70:2a:51:94:49:0f:
fd:a1:25:5d:84:5b:52:ec:31:69:38:ce:72:5f:05:2e:45:23:
6b:ee:3e:e0:28:c6:58:01:0a:a5:99:5b:21:d8:09:1e:38:9d:
29:c5:79:e1:13:8d:74:51:e1:97:ae:7c:e1:df:cd:c9:86:39:
1d:43:25:13:32:aa:99:53:27:8b:d0:69:8f:ee:95:d2:a7:00:
72:0f:ed:82:ff:6a:6a:2a:45:77:91:d3:05:2b:44:05:13:46:
a9:ca:ca:20:38:48:14:35:6f:ec:bf:3c:fd:f8:4a:2a:75:3a:
34:bf:75:17:9f:32:76:7d:c3:47:df:0b:39:9d:63:06:de:b9:
c6:44:95:81:7b:0f:e8:d9:a8:4b:46:ef:b1:0a:14:a0:ed:d3:
7f:f1:5f:dc:b2:8d:c5:81:33:c1:e4:52:8b:a6:f5:14:84:1c:
c4:7e:c3:bd:c1:a7:70:38:b1:0f:9f:63:d6:3e:1d:be:79:bc:
b0:4b:af:27:88:3a:ab:5e:f5:c0:5e:52:b5:ec:ac:e6:96:3d:
d9:05:18:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:44:49 2026 by rpki-client