Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
File: Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft (raw, json)
Hash identifier: lsIXBt/QceSQoSQdMc6Vhh83ax15CV+mch1vITQVWR4=
Subject key identifier: 33:A9:7F:DD:45:9F:F0:6D:3B:BB:F0:F7:0E:85:2C:04:C8:1D:96:50
Authority key identifier: 2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
Certificate issuer: /CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Certificate serial: 019D2AA938940229DB4210A13176D2D04399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
Manifest number: 08B5
Signing time: Thu 26 Mar 2026 15:00:26 +0000
Manifest this update: Thu 26 Mar 2026 15:00:26 +0000
Manifest next update: Fri 27 Mar 2026 15:00:26 +0000
Files and hashes: 1: Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl (hash: V5KMKeV+Om4O9Lkk+H8scGHGQTG3cSEFi66+CQhwVw0=)
2: RCbtWtfNbNugIvs-Dmql2deK4Ko.roa (hash: Rgh4Ci+jMhlRgR9C2JdR2931yRKR2EjS9oS9ki8UOrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:38:94:02:29:db:42:10:a1:31:76:d2:d0:43:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Validity
Not Before: Mar 26 15:00:26 2026 GMT
Not After : Mar 27 15:00:26 2026 GMT
Subject: CN=33a97fdd459ff06d3bbbf0f70e852c04c81d9650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8f:f6:7a:b2:42:69:4c:7c:cc:08:91:d4:dd:
23:88:60:f8:19:a0:e2:3d:4a:2f:d7:56:00:11:e1:
1e:14:20:0c:78:75:8e:83:d8:c5:af:98:f2:93:4c:
b9:35:f1:42:cb:e7:c7:09:00:58:d3:97:7a:d8:d5:
3a:3e:be:63:b8:d4:3f:b5:f0:58:ec:53:e9:1e:0d:
b4:4c:93:ef:1a:08:30:8c:ee:7f:e5:83:85:43:24:
e3:33:d4:c9:8a:d6:2a:7a:99:43:bf:c7:77:6b:7a:
a8:77:f9:3c:bc:fa:42:1f:70:ef:48:35:b8:03:0d:
95:70:38:a5:22:6d:cb:67:03:77:6d:77:20:8d:04:
c6:90:fa:9c:0c:80:8d:ac:83:5d:be:5b:32:13:f8:
5c:d9:99:fa:33:1b:76:a3:f7:b7:71:ba:63:c2:9f:
aa:40:45:6f:c8:b2:51:ca:a1:95:2b:4b:90:a6:31:
2f:5a:c5:04:dc:5b:ff:bb:7b:bd:05:a7:b9:89:07:
84:50:b3:ab:0f:09:85:48:22:7e:94:1c:13:c3:52:
d0:d9:2f:30:cf:f2:41:72:d7:35:aa:15:28:d4:45:
96:d0:8e:25:1e:b7:54:dc:64:5c:71:bd:27:72:14:
31:b7:d8:0d:bb:ae:08:eb:e2:8b:a3:e6:00:79:e7:
74:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A9:7F:DD:45:9F:F0:6D:3B:BB:F0:F7:0E:85:2C:04:C8:1D:96:50
X509v3 Authority Key Identifier:
keyid:2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e3:c6:a4:5d:f0:d0:8b:5a:6c:27:d4:9f:4b:b5:f2:0c:0e:
75:3a:4a:27:7d:83:1d:6f:08:ac:b6:c1:72:15:87:16:b4:61:
ab:28:a8:9d:61:61:e0:c1:2a:c2:bc:09:eb:77:0d:e8:40:16:
b6:f7:08:b0:55:4c:47:2e:0b:b7:b9:18:6c:5b:33:01:ed:01:
c0:0c:08:9e:c0:08:c9:3c:cf:8c:d5:e2:d6:3a:05:99:72:0a:
4b:72:97:e6:df:e5:58:88:2b:03:1d:d3:2d:4f:89:5c:38:9b:
4d:66:9c:13:71:cf:f0:b4:3a:81:7d:39:c0:58:56:cf:ed:3c:
9a:fe:fd:1c:73:93:a4:19:ea:72:22:36:36:51:95:9c:4c:5b:
99:2e:dc:88:99:47:98:62:47:86:48:57:3d:3d:4a:86:a3:7f:
b0:64:12:17:8d:23:c1:8b:a0:f1:4e:71:36:2a:ea:4f:c2:b4:
b3:c6:37:89:9b:8d:75:82:ed:a3:8e:c4:f1:22:75:b9:62:2f:
ca:d1:59:7c:8a:61:8b:bb:d9:be:3a:44:f8:cc:cc:4a:6d:02:
68:2a:b3:b9:15:16:55:1c:6f:7d:3a:bf:e7:cb:e7:b3:60:5e:
70:c6:13:aa:a7:f9:ad:a8:5f:24:93:c1:e3:3a:11:3f:5c:7d:
01:92:5c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:24:17 2026 by rpki-client