Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
File: Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft (raw, json)
Hash identifier: y+mw++CZxC2D5lSTjc//UGwOOULWpk3P4NYo+0IsuRM=
Subject key identifier: 4C:F0:E0:F8:3A:20:2F:84:B4:31:BD:8C:AB:F5:C0:C4:E7:0D:A9:5D
Authority key identifier: 2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18
Certificate issuer: /CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
Certificate serial: 019E1D2254AD6DE28352AEE9FC1FD9E82EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
Manifest number: 39
Signing time: Tue 12 May 2026 17:00:49 +0000
Manifest this update: Tue 12 May 2026 17:00:49 +0000
Manifest next update: Wed 13 May 2026 17:00:49 +0000
Files and hashes: 1: Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl (hash: z859zwR2QEv5hu+1MnRzwJhVA0yB+8KTcnKf3etvtwo=)
2: X8NxDwiULjWZLnJ6B8Rj05WUAyw.roa (hash: KfguZW5HU1p0m0ACpW8dbxSFytJTJU2vZknaYkl90ys=)
3: xkospZ8VDgr5HEQ7FH2579LCSdY.roa (hash: HfJsaHRKIrTg2Dnzwwy9sQpbTZKrMPPVshND+I4qJ4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:54:ad:6d:e2:83:52:ae:e9:fc:1f:d9:e8:2e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
Validity
Not Before: May 12 17:00:49 2026 GMT
Not After : May 13 17:00:49 2026 GMT
Subject: CN=4cf0e0f83a202f84b431bd8cabf5c0c4e70da95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:a4:8d:9b:f4:bf:b4:da:71:36:93:f7:b1:
1b:d5:ff:3d:1f:5e:d5:b3:1d:28:95:7a:e5:d9:48:
0c:6d:f8:19:40:b2:15:45:9d:e1:83:59:2b:57:ce:
c4:27:cb:82:14:82:c9:c6:91:9a:af:ff:4a:e3:0d:
7d:e2:65:09:f0:55:96:a7:cf:cd:ad:56:99:cd:a9:
63:42:f1:9e:fa:82:eb:01:83:cc:a5:91:1c:58:e5:
8b:ce:86:31:2b:30:6f:3f:76:2a:29:68:12:1b:45:
62:c9:26:81:e8:df:36:8d:2b:ef:2d:11:71:a2:78:
8e:5e:32:8b:dc:9d:19:d3:b1:7c:5a:f2:f5:61:80:
1e:ea:ec:1f:ff:59:98:09:89:d6:5e:2b:37:ce:f1:
8e:c4:f9:1f:5b:8b:79:8f:e0:16:e0:09:5d:5a:da:
ba:a1:9c:41:5b:bf:37:02:0c:0b:dc:e7:3a:df:d8:
dd:90:78:dd:93:32:19:de:76:09:e9:d0:ea:12:62:
97:60:91:57:f2:44:14:6d:49:64:c6:6d:29:72:0a:
80:31:47:90:f8:e8:c7:cb:ee:04:24:27:14:53:e3:
c0:51:ae:73:d8:cc:fb:c9:2b:0d:6c:a4:96:f5:6b:
6c:7f:00:14:77:17:01:de:41:a4:e5:c7:c8:40:89:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F0:E0:F8:3A:20:2F:84:B4:31:BD:8C:AB:F5:C0:C4:E7:0D:A9:5D
X509v3 Authority Key Identifier:
keyid:2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:dd:f5:22:d9:aa:55:ea:ef:8a:97:46:2c:24:e3:10:43:91:
52:97:71:cd:fa:90:94:bc:39:76:5d:6b:74:5c:ec:06:4b:20:
a7:8a:e5:56:8e:1c:d2:68:cf:5d:1f:02:0f:06:4c:5d:3e:eb:
8f:9a:4b:f0:4f:aa:a4:4a:7f:42:54:17:d9:17:df:77:34:f5:
27:69:bd:7d:42:95:2e:96:78:30:bf:2c:17:95:a9:e8:c7:47:
13:f6:2b:3b:1e:c8:59:c5:0a:16:f4:8e:07:bd:a2:50:e4:6e:
5c:15:98:a9:17:86:33:bc:5c:e4:73:e5:d2:b1:b3:63:2c:61:
f2:a8:a8:4d:e4:4c:71:b8:6c:d3:90:61:5c:a8:a2:56:28:35:
ad:2f:73:a8:99:d9:d4:78:b2:ca:3e:7f:d1:69:c1:27:6d:f5:
d2:75:4d:4d:46:b6:4f:26:6c:3c:18:16:9d:a7:0d:ac:47:a0:
c4:f3:89:1b:db:f7:ec:07:37:d5:96:6c:5a:34:c2:06:2e:25:
3e:70:36:f0:ca:d3:e4:57:aa:ab:9e:df:f4:8d:96:4c:11:d1:
2f:74:e4:e3:d9:ca:42:6b:af:68:62:34:c1:b3:60:19:6a:b0:
83:a7:88:a1:9c:a6:4d:05:1f:b4:61:2e:7a:77:fc:ff:cf:76:
d1:2f:4b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:49:52 2026 by rpki-client