Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
File: Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft (raw, json)
Hash identifier: u6N1ArscFC7cXG/yYP6Wcu55GaJrsZcemhRkNgVYOJ4=
Subject key identifier: 14:A0:B6:81:E8:4E:F4:A0:98:5B:85:4B:4B:76:A9:0C:22:1F:D9:01
Authority key identifier: 2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
Certificate issuer: /CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Certificate serial: 01A0E0CFA93292C05D937C0D7DD418B40C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
Manifest number: 0AA1
Signing time: Sun 27 Sep 2026 03:01:40 +0000
Manifest this update: Sun 27 Sep 2026 03:01:40 +0000
Manifest next update: Mon 28 Sep 2026 03:01:40 +0000
Files and hashes: 1: Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl (hash: sUpHkg+7mB4CbG2BXZrKDsXQPF8Ls/lfS2p4KHWHMUo=)
2: RCbtWtfNbNugIvs-Dmql2deK4Ko.roa (hash: Rgh4Ci+jMhlRgR9C2JdR2931yRKR2EjS9oS9ki8UOrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:a9:32:92:c0:5d:93:7c:0d:7d:d4:18:b4:0c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Validity
Not Before: Sep 27 03:01:40 2026 GMT
Not After : Sep 28 03:01:40 2026 GMT
Subject: CN=14a0b681e84ef4a0985b854b4b76a90c221fd901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:c2:73:b5:a2:73:36:e6:57:c2:b1:55:67:
43:83:96:4e:cf:9e:62:08:08:28:50:0b:fb:06:71:
36:b9:6f:bc:04:17:12:a3:f4:54:0a:3a:c5:d9:49:
37:ca:03:02:e2:a7:0e:15:5c:b2:91:14:54:1d:54:
87:50:9b:65:9c:21:0c:e2:58:bd:c4:e3:6d:53:5e:
64:df:48:c9:12:f5:14:35:3c:f8:c9:a1:f0:ae:ee:
95:bf:54:a5:2f:74:74:41:b0:d9:c2:69:f9:67:01:
0a:ae:fd:fe:9f:33:c5:23:9b:87:29:9b:b3:e7:9c:
c3:6f:aa:7d:2e:f8:ec:b5:9a:14:ea:5c:65:11:2c:
4d:0a:55:b4:3a:0c:d3:ee:cb:a4:d3:be:f1:21:b2:
48:02:c9:16:c5:99:41:f8:68:c1:de:a2:36:66:4f:
50:21:48:45:bb:99:94:fa:53:1d:7c:34:f2:67:d2:
d9:38:2e:62:23:18:91:97:a7:42:5b:83:0e:9e:6d:
fa:77:12:65:20:33:5c:02:dd:3f:c9:26:5a:b7:53:
a9:82:38:e0:3a:6a:07:4d:bb:93:f7:71:47:1d:be:
06:eb:29:1e:ba:f5:01:42:5d:08:88:b3:4c:1e:02:
3b:3e:ef:a8:d3:7f:2a:97:58:6a:61:96:bb:cd:6a:
f6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A0:B6:81:E8:4E:F4:A0:98:5B:85:4B:4B:76:A9:0C:22:1F:D9:01
X509v3 Authority Key Identifier:
keyid:2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:01:45:40:1f:cd:10:85:de:31:58:2d:72:f8:4f:44:cb:40:
e3:39:fc:12:10:80:3c:76:93:1d:99:62:04:dc:b7:99:43:dd:
39:e4:ba:7b:16:28:4f:12:9f:79:28:40:ba:83:b4:15:69:78:
27:60:f1:f9:c8:30:6a:6b:9d:ef:1d:c1:b1:d3:de:ef:0c:3e:
53:e8:3a:fe:c1:7f:15:49:c2:ac:0b:08:9d:53:50:87:54:05:
24:c4:57:a0:ef:76:42:08:8a:de:6c:58:d2:32:9c:e5:98:c3:
1e:c5:ca:dd:65:8d:e6:ef:2d:32:06:3b:10:4d:6e:a6:27:2e:
43:d6:01:5f:b1:1e:81:db:21:e9:dd:c9:39:78:b3:56:72:f9:
e9:b4:cd:05:34:7d:fa:0b:b4:a3:81:d9:69:5c:cc:d4:d9:c6:
f3:73:36:74:f7:91:f6:79:ac:4a:69:88:1a:41:a6:4e:3d:48:
cf:1f:39:78:57:46:ed:fa:aa:bd:b7:95:5e:9e:cd:d6:08:0c:
3a:bd:60:bf:8c:7b:fa:82:aa:3b:58:8c:ec:14:95:1a:d9:75:
ae:ba:f5:f7:e5:c1:50:a9:2b:58:9c:68:18:f5:4d:a9:85:7d:
5f:b4:db:b8:77:c3:01:3b:6f:44:9f:26:23:cc:a8:b7:63:77:
2c:38:7d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:13:20 2026 by rpki-client