Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
File: lt2IX_TTiauqvQOlF10JdBrLpg0.mft (raw, json)
Hash identifier: FviWP3Ujzrpc71Yep5Plut6xGUbBQlODvkhZsaK8b9k=
Subject key identifier: 95:E7:C3:AB:BB:45:30:97:C2:99:A3:C6:17:FF:4E:77:28:6B:5B:37
Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
Certificate issuer: /CN=96dd885ff4d389abaabd03a5175d09741acba60d
Certificate serial: 01A0DB041475DB1757A047764239B988DADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
Manifest number: 04C9
Signing time: Sat 26 Sep 2026 00:01:12 +0000
Manifest this update: Sat 26 Sep 2026 00:01:12 +0000
Manifest next update: Sun 27 Sep 2026 00:01:12 +0000
Files and hashes: 1: 6kMdvrwU2pCwvdQx9e2jtc6HHm0.roa (hash: qE4aJsmYODQ0nzOFNhlgM1kvgijeIJ6BoQLe8YycTn8=)
2: lt2IX_TTiauqvQOlF10JdBrLpg0.crl (hash: bUGsf3aP+SHVJt62o11licqSNYyqvKWHD64cwksTbMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:14:75:db:17:57:a0:47:76:42:39:b9:88:da:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d
Validity
Not Before: Sep 26 00:01:12 2026 GMT
Not After : Sep 27 00:01:12 2026 GMT
Subject: CN=95e7c3abbb453097c299a3c617ff4e77286b5b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b4:f7:28:38:31:ad:d1:17:da:77:1c:14:78:
85:ae:6e:0e:27:6b:3d:96:32:37:50:89:ee:fb:ca:
dd:b7:df:e1:76:13:b9:1e:cc:18:ec:ae:17:f0:76:
e1:7d:f5:c8:5e:cd:29:ec:88:40:c8:3b:e8:63:b7:
2c:81:96:13:e3:4a:f4:07:d6:64:bb:c3:29:54:9d:
fb:28:5d:70:43:85:99:61:11:3c:24:fb:ba:8f:62:
0c:32:33:37:33:0c:cd:64:c4:d9:25:d0:4d:a3:e7:
63:de:c5:2c:37:6e:02:cf:fa:8a:a2:d8:06:87:af:
ab:44:69:b9:7a:0b:10:f5:0a:a9:26:d8:10:8b:51:
aa:71:02:2d:42:39:3c:85:58:69:ff:b7:f7:b8:41:
37:65:59:0d:7d:b4:9b:1f:45:03:a6:a4:0c:34:b7:
bc:68:6d:7b:f8:4a:2a:8a:b2:fe:b1:f4:ae:a3:85:
4b:80:9d:cc:58:fc:d4:3e:54:61:cc:41:5e:05:c2:
7d:83:4e:65:15:6d:7f:37:62:e6:92:63:f8:2c:70:
b7:92:b0:dc:f9:05:65:e8:9f:41:26:40:a0:52:8b:
c9:7b:3b:d1:f9:92:6e:aa:92:32:8d:6b:d0:03:42:
90:8c:00:79:36:90:e6:d9:d8:27:f8:98:89:8c:a1:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E7:C3:AB:BB:45:30:97:C2:99:A3:C6:17:FF:4E:77:28:6B:5B:37
X509v3 Authority Key Identifier:
keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:82:d2:38:4e:aa:97:cb:22:94:16:c0:fe:19:c3:1a:13:15:
84:09:f7:58:06:92:c4:22:42:cf:eb:c4:63:1b:35:21:b6:84:
13:e0:1c:97:a4:7e:89:a3:a2:86:16:6f:fe:c8:3d:07:a1:ce:
b8:39:f7:9f:ef:85:d3:6c:d6:c0:69:7f:f8:ba:7d:12:1e:2b:
51:c1:79:6b:9d:ab:d2:cc:da:11:93:35:88:8f:28:f7:a1:92:
8d:f0:53:fa:91:a6:51:49:d5:8e:92:ed:8b:60:a2:ec:cb:1c:
a3:b7:29:dc:14:27:3c:13:fc:33:94:c5:2a:67:d5:64:d5:95:
d2:20:f3:67:d1:4e:99:17:41:3d:61:f1:cd:db:a6:a1:f1:32:
cb:9d:18:72:ce:19:57:e0:07:8b:2c:a5:20:f9:d4:90:6d:66:
3f:9c:a1:ac:fa:a1:6c:99:4c:0d:fc:24:60:73:75:e2:62:cc:
4b:26:23:e7:09:2c:cc:39:b1:d0:e2:d1:e0:25:1b:5a:fc:ca:
63:d1:e1:55:6e:5a:2a:ec:6c:4d:c6:c5:32:6a:88:08:bb:31:
25:12:10:5e:db:bd:85:4c:b0:db:aa:50:c6:cc:a6:47:41:99:
49:6f:80:46:f4:39:89:67:9d:11:b2:c2:86:1f:f6:b8:5d:dc:
8d:48:65:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbBBR12xdXoEd2Qjm5iNrcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZGQ4ODVmZjRkMzg5YWJhYWJkMDNhNTE3NWQwOTc0MWFj
YmE2MGQwHhcNMjYwOTI2MDAwMTEyWhcNMjYwOTI3MDAwMTEyWjAzMTEwLwYDVQQD
Eyg5NWU3YzNhYmJiNDUzMDk3YzI5OWEzYzYxN2ZmNGU3NzI4NmI1YjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bT3KDgxrdEX2nccFHiFrm4OJ2s9
ljI3UInu+8rdt9/hdhO5HswY7K4X8HbhffXIXs0p7IhAyDvoY7csgZYT40r0B9Zk
u8MpVJ37KF1wQ4WZYRE8JPu6j2IMMjM3MwzNZMTZJdBNo+dj3sUsN24Cz/qKotgG
h6+rRGm5egsQ9QqpJtgQi1GqcQItQjk8hVhp/7f3uEE3ZVkNfbSbH0UDpqQMNLe8
aG17+EoqirL+sfSuo4VLgJ3MWPzUPlRhzEFeBcJ9g05lFW1/N2LmkmP4LHC3krDc
+QVl6J9BJkCgUovJezvR+ZJuqpIyjWvQA0KQjAB5NpDm2dgn+JiJjKEACQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXnw6u7RTCXwpmjxhf/Tncoa1s3MB8GA1UdIwQY
MBaAFJbdiF/004mrqr0DpRddCXQay6YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8wYzUyNjUtMzJhZi00OGYyLTkwNmQt
YjY1MmM4NTU1NmJiLzEvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8wYzUyNjUtMzJhZi00OGYyLTkwNmQtYjY1MmM4NTU1NmJi
LzEvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmILSOE6q
l8silBbA/hnDGhMVhAn3WAaSxCJCz+vEYxs1IbaEE+Acl6R+iaOihhZv/sg9B6HO
uDn3n++F02zWwGl/+Lp9Eh4rUcF5a52r0szaEZM1iI8o96GSjfBT+pGmUUnVjpLt
i2Ci7Msco7cp3BQnPBP8M5TFKmfVZNWV0iDzZ9FOmRdBPWHxzdumofEyy50Ycs4Z
V+AHiyylIPnUkG1mP5yhrPqhbJlMDfwkYHN14mLMSyYj5wkszDmx0OLR4CUbWvzK
Y9HhVW5aKuxsTcbFMmqICLsxJRIQXtu9hUyw26pQxsymR0GZSW+ARvQ5iWedEbLC
hh/2uF3cjUhlAg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:17:21 2026 by rpki-client