Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
File: LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft (raw, json)
Hash identifier: 6JpLW5V4xTFIBzhVi2ECLx9L3/UamCEk0J/3v/DxSMo=
Subject key identifier: 91:5F:8C:F0:2D:6C:C0:3A:6E:75:35:B1:9D:BB:8D:72:4C:55:68:C6
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 01A1DF154CA504ABA9617A15C8AD089CA46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
Manifest number: 0430
Signing time: Sun 15 Nov 2026 12:01:17 +0000
Manifest this update: Sun 15 Nov 2026 12:01:17 +0000
Manifest next update: Mon 16 Nov 2026 12:01:17 +0000
Files and hashes: 1: LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl (hash: 8/bcCXbYAGBrF48PIPjvpWVdg0NE0Se/RSGSjw1HRzE=)
2: TPELq0kn_ta_i9ETuS3ZM7kKsPc.roa (hash: FOO6hU8H7Yy6zfolKaMVsiISz0kHdFxfABBPX42Q2SY=)
3: c4PWOTsWtb2BHJ2drzbMurS1uj4.roa (hash: GfaIz/k9kQAzF2LqeZrCe55euhWttcaoPzS2hsKifpc=)
4: dzJJ9iO5CZzXx6IYJCJswDVMxwo.roa (hash: Tq90AY1mI1gTBfp6PMA/p5bw2R0ha3Bh0Do2Sy6jw6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:4c:a5:04:ab:a9:61:7a:15:c8:ad:08:9c:a4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Nov 15 12:01:17 2026 GMT
Not After : Nov 16 12:01:17 2026 GMT
Subject: CN=915f8cf02d6cc03a6e7535b19dbb8d724c5568c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f0:ed:73:6e:f0:73:ef:00:e1:e7:7b:35:8c:
37:8a:6a:a4:3b:44:85:0b:6e:99:62:bf:79:6e:53:
8a:04:01:a6:a1:66:0f:92:5d:98:d1:f4:ec:d8:a7:
6b:65:22:37:9e:e7:68:03:fe:9f:0c:e6:6e:6a:37:
61:b8:10:52:c4:6c:9a:85:dc:85:a6:0c:9c:2e:49:
66:48:c0:09:db:18:d3:ff:4b:a6:64:87:22:8a:4a:
2f:b8:ef:d3:68:25:4b:60:e0:93:67:37:04:8e:bb:
3f:0d:b5:ef:80:77:03:68:e1:ca:51:10:6c:2e:42:
7b:c8:cd:3b:e9:34:c9:b7:b7:a7:5c:df:2a:8d:5f:
20:c9:29:0b:d4:6f:a9:c5:7a:25:35:34:14:bc:7b:
71:94:ed:96:f9:76:83:05:5d:96:aa:6d:79:39:1f:
cd:80:d0:48:03:c1:bc:c4:0b:ba:17:ed:bd:c8:36:
50:ea:69:37:e5:82:30:d1:8b:16:9f:bb:48:ed:1a:
38:25:8f:5c:51:fc:18:89:49:29:42:d7:d6:b3:4b:
4d:c8:ce:59:67:0d:78:26:2b:78:ef:1b:70:49:a8:
7f:45:c8:1c:e7:b4:37:60:c1:d5:d9:c1:ae:79:e5:
a4:14:75:ed:59:cf:32:f3:ee:f6:ff:6b:c2:41:11:
72:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5F:8C:F0:2D:6C:C0:3A:6E:75:35:B1:9D:BB:8D:72:4C:55:68:C6
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:16:95:82:0e:19:a9:3a:26:58:80:a1:0c:39:66:4b:a3:1c:
69:ef:9e:5b:ed:5d:70:60:0d:cc:c6:54:9a:26:80:cd:c0:7a:
57:22:71:4a:88:1f:4e:75:7a:84:87:99:b4:3a:cc:b5:4a:92:
bd:2d:70:c4:bc:91:cd:cd:eb:13:f0:e4:e3:80:22:ab:2b:04:
f8:09:1e:3d:13:b5:64:4f:d0:bf:2f:dd:8b:a3:36:a0:ed:18:
b0:87:e4:f7:9d:d0:47:b7:a9:36:85:24:55:42:7b:7f:d9:f1:
9c:e9:23:ab:3e:81:66:df:85:9d:4a:e2:d9:b2:f0:38:16:64:
11:50:55:b7:ba:6a:56:08:ac:ac:13:35:ce:89:44:6d:38:b6:
5c:91:04:a1:f3:c2:73:38:5b:2c:a9:9b:6c:1f:9c:5b:99:74:
f6:56:c1:45:dc:6a:9a:33:f3:08:23:84:7a:c5:3d:c6:57:10:
64:46:16:b6:dd:dd:bf:6d:c7:cd:74:45:8c:31:ae:ee:bb:62:
f3:86:e9:72:1c:57:40:93:6c:72:31:e7:7e:50:e4:30:b7:c5:
2d:36:78:c6:14:7d:e7:f8:ea:bf:cf:45:48:d0:b2:c5:7d:ac:
a6:2c:40:74:7e:50:1e:d4:55:35:59:f8:6d:9c:d3:2f:83:f2:
34:f0:f3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:23:10 2026 by rpki-client