Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
File: LyCNidN2_IiDt9BxMb00pwWa7_o.mft (raw, json)
Hash identifier: Xutb8v32mEcivxQHrvs31KgVnvPc1f/aKFkx6ISo8cA=
Subject key identifier: D8:D7:FE:9A:2A:6E:3E:A4:F7:3A:4C:61:4D:3A:DF:00:84:E9:0F:61
Authority key identifier: 2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA
Certificate issuer: /CN=2f208d89d376fc8883b7d07131bd34a7059aeffa
Certificate serial: 019BC03E2E54058C63162EB35313A45F09B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
Manifest number: 175C
Signing time: Thu 15 Jan 2026 06:00:59 +0000
Manifest this update: Thu 15 Jan 2026 06:00:59 +0000
Manifest next update: Fri 16 Jan 2026 06:00:59 +0000
Files and hashes: 1: LyCNidN2_IiDt9BxMb00pwWa7_o.crl (hash: Yx+C+7MBoCNl8vxc4vgknsbrNrtyilX54NEH2vuOQ7M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:c0:3e:2e:54:05:8c:63:16:2e:b3:53:13:a4:5f:09:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f208d89d376fc8883b7d07131bd34a7059aeffa
Validity
Not Before: Jan 15 06:00:59 2026 GMT
Not After : Jan 16 06:00:59 2026 GMT
Subject: CN=d8d7fe9a2a6e3ea4f73a4c614d3adf0084e90f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:e3:92:4d:c7:a5:ce:39:39:b3:97:eb:6f:
25:bc:21:08:b2:b2:8d:f6:02:18:b9:11:b5:d1:a5:
e0:be:dd:96:4b:e5:2c:6f:8c:87:65:ed:6c:7f:96:
85:47:0a:0b:4b:cc:bd:cd:66:d6:b8:76:85:99:02:
cc:03:70:7b:ee:56:c2:92:1b:c9:9d:e2:65:f7:1c:
b6:29:31:ed:6e:5c:3e:6f:a1:5f:78:c4:78:b0:81:
09:52:5b:ee:32:52:c4:bc:aa:6c:5b:b3:53:19:8b:
59:19:6e:36:51:fb:fc:d7:fb:ee:bb:7b:b8:8c:17:
b9:b9:18:90:a6:a2:07:01:49:d3:78:24:a0:2e:6a:
51:c3:53:4b:3d:49:bd:7e:e0:44:d0:05:ac:63:6e:
40:f0:95:ef:a5:27:21:55:1e:6d:66:a2:9e:0f:aa:
26:ed:3d:ab:78:ee:d3:51:06:eb:8f:51:85:71:6e:
e9:6c:a0:28:cb:58:18:6c:d6:fe:9b:8e:86:e9:37:
57:f3:07:79:3f:ff:69:db:5d:8c:90:9c:de:42:ad:
f0:d5:62:bf:87:38:38:ae:ae:e0:32:b8:d7:4e:ba:
4e:31:f3:c4:05:01:8a:33:92:20:da:9d:6d:18:1c:
2c:1c:0c:92:ad:6e:a8:a9:bc:4e:23:1b:ba:f2:f7:
20:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D7:FE:9A:2A:6E:3E:A4:F7:3A:4C:61:4D:3A:DF:00:84:E9:0F:61
X509v3 Authority Key Identifier:
keyid:2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a5:2b:a8:ea:f9:5e:da:08:d9:97:1e:0f:c0:9c:1c:c5:86:
26:aa:82:ca:6c:01:9b:3f:49:73:8d:5e:ad:55:e5:c1:02:ce:
78:5d:77:72:f5:6c:c1:c3:a9:e2:81:66:f0:ce:f0:57:76:3b:
fe:d5:0d:74:79:17:ce:e7:63:72:75:d3:01:39:bb:a7:59:f2:
99:39:51:dd:f7:76:2a:12:6f:58:d6:a6:f3:fe:49:f6:34:eb:
f1:bd:61:3e:94:bf:71:bd:13:60:c6:4a:02:18:aa:76:03:69:
e4:a9:5f:5a:fc:ba:4b:16:87:23:39:92:b4:ff:ea:de:84:0c:
a6:b9:71:76:30:4c:5c:fa:49:49:34:17:6b:3f:12:b5:4e:39:
8a:37:cf:d2:46:f0:ea:f4:b3:f2:3a:92:aa:96:1a:77:f5:8d:
7b:18:11:fb:80:54:1e:2f:b1:b0:9a:f0:06:de:e0:0c:44:f0:
c2:3b:5f:0b:2a:78:5c:be:bb:ce:19:da:ed:98:19:51:02:08:
58:36:62:cc:4f:c3:c1:70:a9:ae:40:6f:f3:6d:9b:d7:a4:2c:
62:83:e3:48:4b:22:66:a6:3a:f4:3d:1d:b4:21:90:35:94:47:
a1:2e:43:4f:45:ed:aa:e7:40:80:b0:55:ba:a2:76:76:aa:d2:
bb:07:47:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:25 2026 by rpki-client