Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
File: lt2IX_TTiauqvQOlF10JdBrLpg0.mft (raw, json)
Hash identifier: VfFn408fjpp+axWe9oqMQhhVGgV8f+7njUYsMusgcuE=
Subject key identifier: DC:34:F2:80:0C:AE:A2:8F:B9:22:2E:A4:9A:DE:3F:7A:01:5B:5D:0C
Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
Certificate issuer: /CN=96dd885ff4d389abaabd03a5175d09741acba60d
Certificate serial: 019F94A49A2AC1168312DF0C9C25DA845744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
Manifest number: 0420
Signing time: Fri 24 Jul 2026 15:00:43 +0000
Manifest this update: Fri 24 Jul 2026 15:00:43 +0000
Manifest next update: Sat 25 Jul 2026 15:00:43 +0000
Files and hashes: 1: 6kMdvrwU2pCwvdQx9e2jtc6HHm0.roa (hash: qE4aJsmYODQ0nzOFNhlgM1kvgijeIJ6BoQLe8YycTn8=)
2: lt2IX_TTiauqvQOlF10JdBrLpg0.crl (hash: PFadTAHQfq4Op/jvT0p2FzqE5I/UZmA1d3HKE6g9ZXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:9a:2a:c1:16:83:12:df:0c:9c:25:da:84:57:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d
Validity
Not Before: Jul 24 15:00:43 2026 GMT
Not After : Jul 25 15:00:43 2026 GMT
Subject: CN=dc34f2800caea28fb9222ea49ade3f7a015b5d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:73:9c:5f:68:f9:ab:7b:4e:01:b1:5b:b0:8a:
99:4c:7e:9b:73:df:1b:0d:ea:36:e4:fa:4b:8b:8d:
7a:94:d0:36:d7:f0:f5:c5:4a:d5:64:6e:09:ee:ef:
1e:31:f8:1d:a8:15:2c:c4:06:d5:46:0e:8b:3d:93:
a9:26:c2:e1:2e:b5:58:99:ba:04:d5:1c:18:e2:c8:
f0:f5:c1:91:ea:5c:bc:0f:25:58:55:3e:cb:4a:e1:
ab:34:19:ef:bf:64:90:d0:b8:e8:04:b8:90:03:e7:
93:a4:35:d9:ca:3a:51:8d:6e:fd:05:b6:cb:5f:b4:
5f:40:49:33:3e:37:79:f8:66:fb:31:4f:36:e2:18:
09:c3:40:81:26:d5:e2:08:bd:d4:e0:86:9b:9c:09:
7c:70:45:f7:15:3d:2d:24:01:8d:36:74:e4:71:1d:
a0:23:c7:3e:41:09:94:59:37:0d:50:b4:de:7c:e1:
7b:27:8c:17:af:a6:a5:54:90:db:8d:9d:8f:db:e1:
29:61:b3:2a:d7:02:4a:b9:c0:6f:f7:2d:b5:34:7e:
5c:08:43:05:87:92:ed:70:e8:05:67:f9:58:7a:47:
b0:ff:cf:81:74:0d:2a:ed:79:13:bf:53:8f:ae:b1:
16:a8:25:91:b5:a4:78:c9:db:6c:6c:e6:cc:a8:c2:
0a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:F2:80:0C:AE:A2:8F:B9:22:2E:A4:9A:DE:3F:7A:01:5B:5D:0C
X509v3 Authority Key Identifier:
keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2b:ac:e6:67:e4:0f:56:88:49:3c:d6:b4:0c:95:2a:1e:ce:
26:9a:69:d4:22:48:b1:38:0a:f0:e5:6e:47:d8:b6:b1:c9:92:
22:89:76:67:c3:77:04:fa:3c:28:ab:c0:60:2d:a6:05:53:59:
59:4a:cc:fb:6f:fc:08:3c:26:9c:dc:be:d5:49:67:5b:1b:b1:
d0:50:23:21:02:c7:b6:f6:f5:4c:f4:7a:1d:e6:be:24:b8:b5:
95:74:b8:9d:f7:67:96:3b:e6:9f:6c:2a:5b:8f:da:50:1c:db:
3d:af:2f:a1:f5:e2:46:32:a7:4d:63:52:ca:00:81:ba:46:78:
c8:83:e0:6a:a1:4b:5a:e5:2d:72:a0:5d:00:fc:13:89:20:ee:
ef:be:42:a5:50:ce:e4:bc:cf:71:b6:e7:0c:c8:57:29:fc:ec:
41:72:66:f4:30:3d:81:26:4d:bd:9b:68:ba:23:f2:d3:07:83:
a0:18:aa:2f:d1:d9:ba:91:d8:20:52:e1:df:a7:fc:4a:c0:16:
c0:aa:9b:bc:eb:61:b0:ca:ff:fc:37:51:96:84:8a:c7:ba:99:
9e:85:55:00:04:39:f1:68:93:36:64:99:3e:c2:58:aa:eb:6d:
9b:d9:20:b8:2f:d7:68:af:01:bc:d7:e0:9a:6b:bd:e1:bb:d5:
61:b2:db:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:38 2026 by rpki-client