
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
File: Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft (raw, json)
Hash identifier: i4MUP1KMfYRUv1i1AITPVWaZZTnxW6iqA6WwR0MnNk0=
Subject key identifier: EE:10:A4:6E:17:A4:A0:C8:4B:9B:8F:0E:E2:F9:AD:88:AB:25:EB:EB
Authority key identifier: 2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
Certificate issuer: /CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Certificate serial: 019F94A52677741AB5035BE9394AA0E2F935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
Manifest number: 09F5
Signing time: Fri 24 Jul 2026 15:01:18 +0000
Manifest this update: Fri 24 Jul 2026 15:01:18 +0000
Manifest next update: Sat 25 Jul 2026 15:01:18 +0000
Files and hashes: 1: Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl (hash: QFH64s+egGrHCKIkgwlTA9G6LrrASFVGcMg+kKkhBlo=)
2: RCbtWtfNbNugIvs-Dmql2deK4Ko.roa (hash: Rgh4Ci+jMhlRgR9C2JdR2931yRKR2EjS9oS9ki8UOrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a5:26:77:74:1a:b5:03:5b:e9:39:4a:a0:e2:f9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Validity
Not Before: Jul 24 15:01:18 2026 GMT
Not After : Jul 25 15:01:18 2026 GMT
Subject: CN=ee10a46e17a4a0c84b9b8f0ee2f9ad88ab25ebeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:fc:86:d9:06:ba:3a:2e:40:a8:0f:ac:7b:
cb:15:3c:a7:86:17:0b:af:a8:ef:6d:5f:3a:9d:8d:
97:bd:b7:34:17:83:4a:a6:4d:eb:6a:3d:72:7c:f7:
65:96:9d:9e:62:16:c8:e8:23:29:d8:de:f4:cd:c1:
6a:2d:67:0a:58:18:58:7a:93:31:f5:37:ef:9a:9d:
e8:b4:85:95:0b:73:7a:c3:5d:68:89:f9:95:fd:29:
0f:71:b2:a7:10:7b:fe:77:d2:2c:c6:c7:da:90:01:
aa:eb:60:f1:5c:5c:f5:b4:74:1b:82:f5:c3:4d:c5:
4b:a2:a8:d3:4c:ee:c1:d2:6c:83:1b:ea:6e:2e:8a:
66:21:dc:b7:71:04:e9:90:96:38:09:bd:e4:44:6a:
1f:26:b5:22:cb:53:10:f5:ae:c2:bd:ea:1d:41:57:
6e:70:e9:bc:c6:73:ad:1b:80:d5:79:c8:aa:9c:64:
a6:59:9f:f1:88:01:cf:b3:c6:cd:9a:ef:eb:a8:15:
25:af:ff:0a:c8:3d:b4:38:d8:fc:a2:30:32:1c:bd:
64:27:b7:6f:b2:6f:08:ba:29:1a:6b:7b:d2:76:a5:
f0:f4:7d:58:af:f0:31:53:d0:8a:38:5a:8a:69:ae:
5d:d5:53:54:11:af:60:8c:6c:91:1b:0c:99:6e:4f:
b9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:10:A4:6E:17:A4:A0:C8:4B:9B:8F:0E:E2:F9:AD:88:AB:25:EB:EB
X509v3 Authority Key Identifier:
keyid:2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d2:38:57:3a:05:d4:c6:f6:e2:ec:20:76:92:45:3b:68:1b:
b8:0c:ea:7c:ce:9e:4a:ee:f2:00:13:72:52:c7:c6:9c:42:9b:
07:3c:e0:1c:10:b2:ba:4d:52:2e:b7:8a:d5:ce:9f:40:40:63:
a1:33:65:ee:1b:c4:c6:ee:c5:52:b1:d8:b8:6a:02:ad:f7:3a:
7a:13:cd:a1:a2:85:72:e6:af:22:80:05:24:e2:39:fb:86:67:
d9:80:20:f4:f6:1d:b0:09:51:1c:2a:be:b5:22:96:ad:53:db:
32:da:c4:77:ad:a6:34:6e:4e:22:d7:8c:86:40:f1:c8:15:8a:
9c:c8:dd:d9:88:a9:35:ef:56:70:75:cb:a5:82:73:12:83:93:
3d:22:65:54:f5:ce:ec:8c:93:2f:fe:69:f9:39:e1:c2:57:c9:
0a:44:30:ee:9a:b4:87:f7:2a:56:be:b1:d3:e8:ff:a3:c2:df:
30:30:45:75:93:92:ed:e5:bc:76:57:80:3b:1a:d5:d0:bb:71:
bf:e0:b9:be:0b:fa:e1:c5:c5:56:b5:21:5b:ba:4e:7c:53:d5:
eb:a1:d5:87:93:25:e2:c7:eb:b4:be:ab:83:de:84:0d:82:74:
57:8c:f2:07:2f:51:ca:cb:eb:76:0a:c3:73:ea:0f:40:d4:0f:
ed:94:4d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:13 2026 by rpki-client