Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
File: Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft (raw, json)
Hash identifier: Ow5ZRR79HorY7DK/ewJIarTH1FSSn9knNEeLnG6VbB4=
Subject key identifier: 1B:09:58:4C:99:8E:66:66:37:D9:CF:41:CB:71:8A:FB:7E:91:DB:A7
Authority key identifier: 2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18
Certificate issuer: /CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
Certificate serial: 01A0D0EE22FA58FE0654F668F7ED63DA80E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
Manifest number: 01A1
Signing time: Thu 24 Sep 2026 01:01:02 +0000
Manifest this update: Thu 24 Sep 2026 01:01:02 +0000
Manifest next update: Fri 25 Sep 2026 01:01:02 +0000
Files and hashes: 1: GU2GsgvvxDIzu0J3LT-2kkK8RMo.roa (hash: nP0lDARBEATLaWhYMKJWCgHhBeTpVKHXhkLXZPpWw+o=)
2: Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl (hash: 403PkTNCsZhxaccGFtyZS09IE+e5k1jRnkJR0FNUf98=)
3: Uny2MgmTOohOF4BGAwFHFYH0KJs.roa (hash: Hdl7jGTsKmTRUmRObQs3XRCDB7iUF6evKCo5QMlo1+g=)
4: ru7hTHED5bacQX5NiNWyNtNkE6E.roa (hash: Kxyrq99WXIYtPAR/nabYKrZwHSHfCnBmfTWCGs/Kt3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:22:fa:58:fe:06:54:f6:68:f7:ed:63:da:80:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
Validity
Not Before: Sep 24 01:01:02 2026 GMT
Not After : Sep 25 01:01:02 2026 GMT
Subject: CN=1b09584c998e666637d9cf41cb718afb7e91dba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:9a:66:14:33:af:6c:3a:01:e6:5a:5d:43:
b3:34:f1:85:c8:b8:9e:e9:57:a8:82:ed:13:1d:fa:
d4:dc:76:50:b1:75:3b:e0:b0:af:dd:8b:6c:4f:e2:
81:80:1d:3c:5e:e4:15:04:a0:16:fb:00:cd:81:d9:
71:18:cd:bb:29:04:59:90:b1:a1:d5:33:64:cd:78:
7c:1e:66:a6:36:22:c9:1d:ea:76:ae:f9:ca:7a:49:
df:b3:86:f9:80:d6:b3:1f:5e:89:5f:d4:67:39:a3:
9d:5a:d2:bf:dc:6c:99:6f:76:5e:59:6c:df:7f:2b:
86:01:01:58:61:56:6a:b4:a0:80:5a:33:0f:86:09:
0a:fd:d7:57:1e:38:f1:fa:40:2b:17:76:55:21:dc:
97:52:54:d6:6e:4a:90:08:cb:2c:81:c2:98:28:1d:
72:7a:68:60:31:ba:e1:28:87:9a:f1:a8:c5:26:95:
a1:b7:06:b3:7d:e9:4e:9c:19:3c:e1:cd:fd:91:ff:
c4:e8:35:f6:c1:eb:ea:f5:86:72:59:97:3b:f4:b9:
68:d3:cc:96:b7:aa:e8:6f:de:e5:68:1e:50:a6:23:
45:8b:ef:42:29:2d:87:7e:10:33:d4:e5:0d:70:6b:
7f:21:51:46:f8:e3:03:1d:52:e5:af:dc:17:ff:60:
26:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:09:58:4C:99:8E:66:66:37:D9:CF:41:CB:71:8A:FB:7E:91:DB:A7
X509v3 Authority Key Identifier:
keyid:2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c8:b9:08:cd:4d:f6:4b:15:ec:10:f5:3e:9c:4d:73:f4:8b:
98:83:dc:f5:39:1d:58:ca:6d:78:54:59:5f:1c:8c:bd:e9:17:
35:e8:14:46:38:ea:e4:0c:e9:30:27:b1:43:89:bd:bb:22:2e:
28:d7:55:de:17:82:b2:10:a3:b3:9a:ff:db:32:88:c9:b8:68:
d8:4c:fa:21:f3:ed:98:48:cb:af:13:98:17:bb:1c:02:a4:39:
f0:fe:c6:c7:ac:e4:b4:74:43:14:91:5e:ec:05:90:58:1d:5a:
6c:5d:b5:e3:4f:46:7d:57:eb:a0:c2:23:98:09:db:16:00:8f:
54:83:b0:62:7e:9a:51:2c:29:78:fb:2f:7c:cd:c4:79:13:85:
2f:b5:1b:17:0c:78:71:f0:58:9d:2e:c0:c6:89:df:07:9b:2f:
dd:0d:5a:87:e7:b2:f9:2b:f7:03:bd:d3:6b:8e:1a:c9:f9:d5:
d6:26:ae:e5:8c:c5:7f:cc:73:1a:33:e2:af:8a:82:55:4d:cb:
02:22:01:8d:a3:c8:77:e1:47:dd:9c:fc:60:24:86:a3:2a:fc:
38:fa:a3:ed:60:a5:13:36:40:23:bf:fe:7d:47:72:3e:66:49:
7d:f7:6e:03:05:20:ce:65:4d:a4:65:bc:06:dd:4b:49:57:d2:
37:a7:de:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:54:40 2026 by rpki-client