Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
File: LyytEgqv-e_ffGlZpOBHDj4GJPA.mft (raw, json)
Hash identifier: MkAvwloRpLnsZ9vFXxePDNaWfl/1CftPeZLW8F7Wqk8=
Subject key identifier: 97:2C:4C:D9:97:2B:D8:63:A5:37:3E:43:CA:A6:66:57:77:C4:ED:16
Authority key identifier: 2F:2C:AD:12:0A:AF:F9:EF:DF:7C:69:59:A4:E0:47:0E:3E:06:24:F0
Certificate issuer: /CN=2f2cad120aaff9efdf7c6959a4e0470e3e0624f0
Certificate serial: 019EBE1083F9CEAFE191C6B5B99166020414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
Manifest number: 0124
Signing time: Fri 12 Jun 2026 23:00:13 +0000
Manifest this update: Fri 12 Jun 2026 23:00:13 +0000
Manifest next update: Sat 13 Jun 2026 23:00:13 +0000
Files and hashes: 1: Hu4XjK4kmNzJLAM6_ajtwBsbj0A.roa (hash: ChkZxtf+f4NVFn48swM6zD1dQ21c3QT2WX6YtJDB51E=)
2: LyytEgqv-e_ffGlZpOBHDj4GJPA.crl (hash: PMuEvdQAdbS1aTzo+/LtLPbm384HWmcJlqFnepUmgn0=)
3: oGY7ywjzIawiazxfJPdxsbpKwRU.asa (hash: bPFAxXTZvoR90j3k/VjW0y0gMph9xG0NmXzKwHJV27k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:83:f9:ce:af:e1:91:c6:b5:b9:91:66:02:04:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2cad120aaff9efdf7c6959a4e0470e3e0624f0
Validity
Not Before: Jun 12 23:00:13 2026 GMT
Not After : Jun 13 23:00:13 2026 GMT
Subject: CN=972c4cd9972bd863a5373e43caa6665777c4ed16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:e6:f7:87:c2:78:a6:80:44:82:fc:89:bf:
87:aa:bc:d6:c9:6f:fc:26:9f:fa:5a:45:f4:be:c5:
e0:bb:d4:cb:b6:30:6c:e2:0a:a2:46:43:9c:c2:56:
41:3b:c3:17:8e:52:24:d5:a9:be:57:f3:aa:e7:f7:
19:b0:28:50:e2:e3:d4:58:a1:1c:69:9d:9c:63:e8:
68:18:61:f1:d3:7a:cf:ce:74:9b:f2:96:9d:f0:a3:
c7:ac:b3:4a:8c:58:66:21:e1:c4:b2:ce:b3:ff:7d:
0c:9e:9e:61:b5:6f:9b:67:d3:81:61:70:68:be:63:
51:0b:a2:8b:48:62:90:7e:e9:34:4c:d9:2b:6d:1d:
9d:13:89:eb:db:5e:ac:80:44:9c:0f:ab:57:1e:7a:
ec:02:f4:a6:c2:39:a6:0b:88:86:57:46:93:12:4d:
6b:d2:7b:bf:80:0c:44:68:b2:90:71:8f:8a:a0:a5:
0e:5d:46:e1:89:69:05:99:31:2c:05:a7:8c:85:c8:
a1:fb:09:fe:32:a6:22:59:ed:10:b7:1d:0b:39:a7:
f9:81:f4:49:03:29:1b:c7:27:eb:ea:eb:d2:11:9e:
bb:79:a3:09:51:a3:81:cb:33:3a:36:7c:4a:cf:5d:
4c:09:18:59:35:ae:46:6d:da:ab:ed:6b:7b:ef:36:
a9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2C:4C:D9:97:2B:D8:63:A5:37:3E:43:CA:A6:66:57:77:C4:ED:16
X509v3 Authority Key Identifier:
keyid:2F:2C:AD:12:0A:AF:F9:EF:DF:7C:69:59:A4:E0:47:0E:3E:06:24:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:84:e7:2d:23:94:62:0c:ca:0e:a5:a5:c9:6c:ac:be:4b:03:
05:fa:ae:e6:c6:7e:a9:bb:a4:9d:44:63:ef:d8:ec:20:ec:27:
c8:4d:7e:8c:38:c2:67:25:c4:29:b8:13:3f:ca:d0:e8:d8:72:
a7:ef:ef:7e:46:25:51:c7:7d:31:24:a7:96:7b:72:3f:66:4a:
78:26:db:f2:e0:24:10:59:3e:d0:0e:64:cb:7d:df:a4:f3:0a:
96:94:d6:19:ed:42:3d:c6:39:76:9b:fc:e5:23:35:e1:5e:6f:
87:84:ad:13:19:74:dc:51:fa:83:6c:24:ba:b9:25:12:f1:c1:
7c:92:d4:b1:55:ad:8b:54:60:ce:62:e3:e5:9b:5b:ec:c9:10:
bf:15:9b:75:28:5c:d2:0e:2b:25:c6:91:9c:a6:33:15:64:93:
60:81:0c:16:d0:2d:58:e9:e0:86:c3:57:e8:7f:5d:1d:6a:6c:
54:05:7b:71:3d:9a:3a:a0:1b:8b:ea:4f:6f:55:e9:ec:79:5f:
b9:0d:bf:e2:26:5f:98:05:ec:53:dd:ee:41:ef:0f:7d:d4:5a:
75:d5:e3:58:b2:88:5f:b9:aa:89:53:e4:2c:20:f6:4d:16:2f:
88:dc:4e:5f:77:fb:cf:97:cf:e8:32:6e:ed:6e:57:05:4f:d5:
0f:bf:e5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:35:54 2026 by rpki-client