Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
File: LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft (raw, json)
Hash identifier: wU7GEfZrOI6W1RUb8O4dKtrjQ+GglzO31C0ebeApwYo=
Subject key identifier: FB:E2:F6:3B:AD:4A:A4:BA:12:AB:D9:E5:7C:61:62:9C:05:81:FB:E6
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 01A0D76022D31D45BF84934A993B2FDD01B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
Manifest number: 03A7
Signing time: Fri 25 Sep 2026 07:03:16 +0000
Manifest this update: Fri 25 Sep 2026 07:03:16 +0000
Manifest next update: Sat 26 Sep 2026 07:03:16 +0000
Files and hashes: 1: LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl (hash: xhCrL3XIgEJ5T9ZsVhsX04LsmTcQjUclu/sNdAluzsM=)
2: c4PWOTsWtb2BHJ2drzbMurS1uj4.roa (hash: GfaIz/k9kQAzF2LqeZrCe55euhWttcaoPzS2hsKifpc=)
3: x6jgvumw8oDL54hN0MXCYKM2_Z0.roa (hash: 0+zNXAF4ybCppHxdpcgBL9DpQoeamBo0aEiuJ2e3+Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:60:22:d3:1d:45:bf:84:93:4a:99:3b:2f:dd:01:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Sep 25 07:03:16 2026 GMT
Not After : Sep 26 07:03:16 2026 GMT
Subject: CN=fbe2f63bad4aa4ba12abd9e57c61629c0581fbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:73:2f:d5:d6:dd:73:08:c3:2d:77:ed:f9:
29:ff:71:dd:5d:32:d8:0a:59:fa:a9:4b:6a:e6:6a:
45:06:b8:c7:66:13:bf:4f:a5:62:8a:29:dd:8b:06:
06:e6:b0:92:2f:f5:b0:d1:c7:8d:d0:22:46:93:b4:
e3:d0:45:a0:bc:60:18:c8:82:28:4b:7d:72:b0:db:
29:91:c0:e3:59:f9:8a:02:d0:63:32:69:4d:2c:59:
07:4e:54:8f:e9:4d:8c:b5:4f:f4:79:f9:35:8c:08:
f9:7e:e3:e6:19:43:93:26:8f:7f:41:0f:ed:4c:76:
e4:10:f8:8c:15:bb:d8:88:c1:35:47:f2:f4:71:c3:
6d:19:07:23:3c:a2:be:a5:c2:c7:61:95:0f:40:d5:
ac:c6:c8:af:df:f8:2e:a5:fe:bf:6d:d2:fc:b1:c7:
57:ea:45:97:e7:8c:58:13:c1:3c:6a:f3:7f:89:34:
09:09:dd:c7:68:01:d6:24:78:32:99:60:27:8b:1c:
eb:07:ab:06:26:22:36:a5:d1:aa:e3:64:68:e0:5f:
0e:60:d9:dd:dc:0d:a2:39:97:ad:76:19:83:ac:d6:
99:f8:2c:f5:00:18:c2:31:d8:99:70:20:53:50:85:
f2:8a:bd:3f:28:a1:b0:23:30:da:4a:c8:9d:45:08:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E2:F6:3B:AD:4A:A4:BA:12:AB:D9:E5:7C:61:62:9C:05:81:FB:E6
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:52:43:13:0b:81:a3:82:62:17:a1:15:7c:c3:9d:ff:0b:77:
61:59:28:5c:cc:d5:29:b8:28:81:ab:b7:cd:fe:44:dc:86:bf:
30:28:c6:70:5b:dd:84:dc:10:5c:2a:c6:58:42:36:78:01:86:
05:07:c4:80:aa:b5:06:bf:43:40:ba:30:8a:11:0c:01:72:0e:
58:fa:6a:a1:34:1f:8c:4d:37:93:eb:b9:7e:f1:eb:36:36:c1:
18:70:7e:5a:88:86:79:c3:7d:e6:5d:57:2d:7d:97:86:b9:3b:
b7:54:f4:33:7e:5b:df:cc:40:99:f4:82:1e:7f:77:34:65:ed:
53:f2:b4:a1:1b:48:dc:ec:b5:9e:48:02:82:53:8a:92:b7:94:
b4:88:51:06:b2:04:8c:e7:99:a1:d1:d8:36:ff:40:ed:9f:e3:
61:fc:97:97:a2:dc:70:cb:20:12:23:c7:e8:66:9d:bb:49:58:
c5:c2:0c:2f:be:30:e4:13:06:b4:21:8f:91:85:1a:f0:67:e9:
6d:fd:36:e1:4b:08:ca:a3:8a:a3:91:a6:4e:68:9c:11:65:b8:
a3:6f:f3:ed:03:dd:db:b2:05:e0:ea:eb:df:27:3c:b1:e8:75:
64:d8:61:ce:dd:27:82:cb:a3:48:77:10:52:9b:77:07:3c:00:
da:f3:5f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:00:32 2026 by rpki-client