Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
File: LyytEgqv-e_ffGlZpOBHDj4GJPA.mft (raw, json)
Hash identifier: CNdq553cVQ9IO7xJ6r3h+Ye4j5FOSt8oWx1Xb61GKsg=
Subject key identifier: E4:F3:32:2D:01:25:D5:6F:22:3D:3F:77:AA:F0:20:4B:29:7F:03:86
Authority key identifier: 2F:2C:AD:12:0A:AF:F9:EF:DF:7C:69:59:A4:E0:47:0E:3E:06:24:F0
Certificate issuer: /CN=2f2cad120aaff9efdf7c6959a4e0470e3e0624f0
Certificate serial: 019CA90F14EA0E7B1C7D5B8ADE7EF8F0CA74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
Manifest number: 10
Signing time: Sun 01 Mar 2026 11:01:03 +0000
Manifest this update: Sun 01 Mar 2026 11:01:03 +0000
Manifest next update: Mon 02 Mar 2026 11:01:03 +0000
Files and hashes: 1: Hu4XjK4kmNzJLAM6_ajtwBsbj0A.roa (hash: ChkZxtf+f4NVFn48swM6zD1dQ21c3QT2WX6YtJDB51E=)
2: LyytEgqv-e_ffGlZpOBHDj4GJPA.crl (hash: M3zUL3NLC0444TDJbGvs7xtofkF3r+MRaaueSag9tFc=)
3: oGY7ywjzIawiazxfJPdxsbpKwRU.asa (hash: bPFAxXTZvoR90j3k/VjW0y0gMph9xG0NmXzKwHJV27k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0f:14:ea:0e:7b:1c:7d:5b:8a:de:7e:f8:f0:ca:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2cad120aaff9efdf7c6959a4e0470e3e0624f0
Validity
Not Before: Mar 1 11:01:03 2026 GMT
Not After : Mar 2 11:01:03 2026 GMT
Subject: CN=e4f3322d0125d56f223d3f77aaf0204b297f0386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:8e:5b:66:1b:e8:07:8b:1a:33:1e:bd:63:
0d:e7:77:e3:4b:da:75:20:e4:8a:b5:4c:8e:ce:97:
32:ec:02:8b:67:f4:96:a6:2e:ce:f6:49:5d:a6:b7:
61:bf:3d:58:52:67:d4:a3:3e:d2:2b:1d:af:c6:b3:
2c:c0:4f:b2:6d:37:c6:ce:48:a9:0b:9d:be:c2:75:
93:51:17:e1:65:3c:84:95:f3:b6:f5:09:cc:c9:07:
60:1a:82:db:00:76:2a:62:ee:ee:8f:b7:c6:3e:ec:
ee:1d:f2:2b:f3:7a:eb:da:e2:51:ca:9d:3b:a7:9c:
86:5d:c4:1b:73:b5:d4:20:e8:62:e7:88:91:d7:7b:
65:16:ae:e3:50:7a:74:54:1a:11:de:5b:0a:8a:ca:
37:b6:36:17:c8:49:cc:ab:c9:76:4e:8d:46:4d:c8:
32:64:0a:ce:43:43:d7:b6:c3:ee:8d:5d:59:f5:91:
1f:6e:c6:db:cb:09:da:d5:5a:87:a4:f6:06:bf:cd:
29:46:0e:70:d2:e1:ee:bd:20:dc:ae:5f:61:44:4c:
6c:5c:75:03:56:1c:68:61:24:d8:b4:62:b5:7d:d8:
2e:b2:c4:c4:5e:8c:a1:07:40:e6:e4:08:3d:e8:62:
cc:b7:ae:c5:8e:a6:e2:6b:6b:33:f4:ed:c7:dc:cc:
ae:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F3:32:2D:01:25:D5:6F:22:3D:3F:77:AA:F0:20:4B:29:7F:03:86
X509v3 Authority Key Identifier:
keyid:2F:2C:AD:12:0A:AF:F9:EF:DF:7C:69:59:A4:E0:47:0E:3E:06:24:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:51:d5:74:42:97:54:c7:4c:f2:84:fe:c9:5c:9d:ac:38:5b:
ff:42:ac:91:3a:e9:8f:83:16:7f:b1:5f:b8:b0:c2:16:c6:26:
c4:7a:67:0c:77:02:2b:3d:e1:95:7a:3a:9f:2a:8b:4d:f5:a7:
23:98:7f:97:17:24:97:88:ac:33:62:f7:c0:93:52:59:60:bf:
b4:ca:53:d9:da:b5:92:a7:1d:72:85:8d:f6:9e:55:d8:ff:c3:
06:69:b3:a3:4a:ca:64:19:56:6c:6d:61:6d:e0:1c:8c:6d:56:
82:ac:7f:d9:90:ce:a0:b9:1d:f6:63:31:97:85:26:71:de:cb:
19:f1:7a:2a:25:ce:df:58:13:0e:76:be:d9:14:6b:14:42:bb:
53:98:b8:f2:7b:d7:03:74:ff:32:f0:6a:fc:5c:eb:9f:47:e2:
34:3a:bf:6c:6c:bb:e7:3a:ba:37:3f:a6:ce:54:4e:ac:45:20:
fd:df:e2:42:aa:a6:0d:76:ef:38:e2:ce:64:06:bc:bf:a0:8f:
aa:52:25:ce:cd:01:ee:43:54:ba:4e:1e:22:7c:ed:b5:53:42:
4a:e7:2d:5d:4d:df:71:77:d9:76:15:f0:ad:d2:ee:65:a5:08:
7c:01:26:f4:10:ff:4a:0c:f0:7a:6e:8c:bd:7a:2b:42:d1:0f:
75:ec:8e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:05:40 2026 by rpki-client