Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
File: lt2IX_TTiauqvQOlF10JdBrLpg0.mft (raw, json)
Hash identifier: diDwScYMR8R2IKiGzqALpbgVil/EGft/8itJFcAWRdA=
Subject key identifier: 2B:B9:E3:11:6F:5C:95:6B:8E:6C:61:B3:46:1D:44:93:38:CE:4E:3A
Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
Certificate issuer: /CN=96dd885ff4d389abaabd03a5175d09741acba60d
Certificate serial: 019D2AA9E164A7A245C5F0AD7A9E6641BFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
Manifest number: 02E0
Signing time: Thu 26 Mar 2026 15:01:09 +0000
Manifest this update: Thu 26 Mar 2026 15:01:09 +0000
Manifest next update: Fri 27 Mar 2026 15:01:09 +0000
Files and hashes: 1: 6kMdvrwU2pCwvdQx9e2jtc6HHm0.roa (hash: qE4aJsmYODQ0nzOFNhlgM1kvgijeIJ6BoQLe8YycTn8=)
2: lt2IX_TTiauqvQOlF10JdBrLpg0.crl (hash: ZDtwwkW8lFa9BB2WUHy8QLUL+mEbanr+nwo8AFaqs+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:e1:64:a7:a2:45:c5:f0:ad:7a:9e:66:41:bf:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d
Validity
Not Before: Mar 26 15:01:09 2026 GMT
Not After : Mar 27 15:01:09 2026 GMT
Subject: CN=2bb9e3116f5c956b8e6c61b3461d449338ce4e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:da:73:ea:3f:0a:9b:8c:cc:4a:ef:c6:1d:
0a:59:80:c5:b1:3c:23:8b:90:63:83:d2:55:9e:0b:
7b:b1:7d:54:d8:d3:89:88:77:7d:9a:b4:f9:13:f4:
29:80:5d:e2:fe:ff:6a:a9:91:4b:8f:4e:54:b9:44:
f5:e5:62:a5:48:5c:e4:41:d7:b4:ac:29:d6:e4:ff:
96:9e:5f:fe:57:4e:9e:c4:9a:54:ca:d3:07:e1:c1:
9d:ff:a6:8a:18:63:53:1a:c7:97:44:5c:09:c4:86:
6b:27:b3:7d:75:c7:4e:41:24:e4:1c:80:fa:de:a9:
0a:f4:25:4f:72:47:3a:ba:d7:ce:4b:da:cd:7c:cc:
23:78:a8:0d:b4:16:9f:22:a9:3e:36:08:2d:34:1a:
07:15:f4:b9:a2:52:ee:be:57:02:a2:50:e3:dd:10:
e7:0c:79:78:1d:a2:c8:b3:24:e7:a9:f6:b4:c3:3e:
6c:9e:ad:0f:d0:b2:4f:dd:bd:40:ec:e5:ff:11:52:
85:25:b5:09:01:aa:f1:1a:06:c6:7d:e4:35:4e:e6:
cd:ae:ec:18:96:80:c4:ce:ae:67:96:30:7a:28:44:
ae:77:0c:62:10:bd:0e:37:33:ee:d7:80:db:8b:81:
0e:1c:94:72:3f:2d:44:16:3f:68:18:d0:26:a6:f4:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B9:E3:11:6F:5C:95:6B:8E:6C:61:B3:46:1D:44:93:38:CE:4E:3A
X509v3 Authority Key Identifier:
keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:cd:8b:b5:14:d9:68:ec:77:eb:3a:ab:43:8d:b2:2e:cc:a3:
b0:f6:5c:06:7e:bf:ac:2e:61:81:13:aa:d9:28:3d:cc:cf:db:
c0:25:3b:59:6c:ca:dd:95:e0:8f:96:48:c9:16:4a:33:75:34:
70:ce:75:a7:63:ba:6a:a4:dd:75:71:61:4e:82:ff:2c:8d:81:
8d:43:73:00:d0:ed:8a:04:f9:9e:8f:7f:f3:cf:d7:99:eb:90:
85:72:cc:b4:6f:67:e4:75:29:13:9b:0a:dd:25:11:8a:af:ba:
3d:22:bf:3c:ff:d0:5e:e3:d1:90:2b:f1:05:ee:ea:7e:d6:c9:
4a:cf:b9:30:89:98:01:d1:09:c5:49:0e:bc:39:2e:57:4d:f0:
62:b3:4b:79:b6:38:f3:f0:13:73:a4:00:7b:4a:76:ea:3e:40:
2a:cb:39:c7:78:32:b0:7e:5a:a8:a7:75:ec:5d:6a:1d:27:f1:
76:04:73:2a:79:69:b9:4b:3b:4e:e9:59:7f:b0:18:24:97:b3:
ef:54:8f:0e:87:70:4e:28:96:7a:3a:72:e9:c6:1a:77:3f:b6:
4f:d9:b2:78:7d:f8:b7:c6:e0:de:69:aa:d7:cd:01:7b:df:88:
98:b1:87:62:80:61:df:11:a9:c1:13:65:cd:82:41:35:9c:7a:
6a:10:65:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:58:24 2026 by rpki-client