Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
File: LTOrAnhiOJzMHx_IsKVkpuvXy40.mft (raw, json)
Hash identifier: KFhUFTc959oOc+Pfz/49aKzNip7Dx1YfiMUEbvyYR9A=
Subject key identifier: 9E:5F:C2:51:85:0B:90:E9:FF:B5:A9:8D:98:D3:B7:C2:2A:EA:93:B4
Authority key identifier: 2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
Certificate issuer: /CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Certificate serial: 019D31F4FFD032B2060165114BAC409C6934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
Manifest number: 0B24
Signing time: Sat 28 Mar 2026 01:00:32 +0000
Manifest this update: Sat 28 Mar 2026 01:00:32 +0000
Manifest next update: Sun 29 Mar 2026 01:00:32 +0000
Files and hashes: 1: LTOrAnhiOJzMHx_IsKVkpuvXy40.crl (hash: mtpI+xaTzcuj30YoDM7aHkmkJbs2Spz+hGKmUUBWcOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f4:ff:d0:32:b2:06:01:65:11:4b:ac:40:9c:69:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Validity
Not Before: Mar 28 01:00:32 2026 GMT
Not After : Mar 29 01:00:32 2026 GMT
Subject: CN=9e5fc251850b90e9ffb5a98d98d3b7c22aea93b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5e:c3:84:ed:6e:4b:3f:2e:67:24:b1:01:a3:
96:4a:5c:d7:ee:78:57:e9:e5:8e:ac:0c:df:b8:89:
a6:0d:0e:5a:93:a1:01:2c:83:bd:25:24:97:5d:d9:
ea:3e:44:10:90:98:81:fb:b4:40:ce:77:de:a4:f0:
40:76:44:3c:1f:ad:b0:65:3f:c7:bd:81:b8:b7:5a:
80:09:0e:f9:79:89:05:c7:a4:79:41:eb:27:e7:cb:
91:7e:f1:64:2c:db:0e:94:bd:40:8d:a7:d9:14:21:
8d:e7:0e:33:4a:a0:08:50:69:a4:67:39:7e:8a:78:
bb:04:e8:ec:11:81:15:70:dc:24:e7:f9:d5:59:00:
a8:27:e2:13:59:64:5e:62:08:4b:ae:2b:88:a7:32:
d6:ff:6e:03:09:1c:30:74:81:0a:20:4f:3f:cc:e7:
84:8a:68:21:54:0b:a8:59:8d:06:58:db:98:04:15:
b4:8e:77:1e:62:62:a7:31:60:5b:e7:2d:e1:ab:fc:
f2:2a:46:4b:de:66:73:33:9a:4d:ba:59:94:16:75:
e3:47:92:f0:e3:d6:23:1e:87:f4:18:27:89:5f:00:
ac:6c:f2:49:13:b0:b8:48:e1:c8:dd:d9:67:1e:49:
a4:57:5c:5e:53:5c:f3:81:f7:57:4f:fd:c6:6e:36:
4d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5F:C2:51:85:0B:90:E9:FF:B5:A9:8D:98:D3:B7:C2:2A:EA:93:B4
X509v3 Authority Key Identifier:
keyid:2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:47:63:4b:66:4f:09:fe:7a:1b:39:0b:c7:a5:9a:19:9f:c3:
10:ef:65:fb:e3:f6:92:3f:6a:16:78:8e:f8:aa:48:61:6f:d4:
c0:ce:86:2f:94:1d:dc:e5:a2:91:58:72:85:73:ab:43:46:1b:
72:a5:1e:5a:4e:5f:35:57:fe:2c:b2:6f:66:6f:48:02:44:8c:
3a:36:66:30:ad:d6:2b:5f:86:7b:ad:6b:1f:58:67:6a:da:58:
f5:06:bf:7f:01:14:0e:0e:c4:17:bd:17:8d:82:1c:52:be:3a:
ac:92:63:49:72:8b:f0:bd:fa:57:0f:c4:c8:a6:58:6d:23:50:
a4:4f:2d:e8:55:8d:4c:b1:c0:04:a7:19:37:bf:f9:f0:7f:bd:
8e:2d:c1:c3:33:9d:3a:ac:c6:dc:37:db:e3:e7:9b:68:69:e0:
43:b6:9b:9a:82:f3:dc:bd:8d:0a:45:b6:89:21:0f:c8:a7:39:
4a:3f:24:0c:be:eb:61:0e:cb:cb:2e:db:87:d5:0f:8d:51:5e:
2a:32:61:92:04:04:31:8a:06:6a:10:60:bc:1c:b9:97:b1:15:
d8:2c:0a:d5:6a:34:f9:0c:d7:65:57:ec:d8:4a:3c:10:0a:f9:
a5:68:ad:1f:3d:6e:37:3c:86:97:04:b2:8e:67:cd:e4:c3:b9:
10:9c:0c:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0x9P/QMrIGAWURS6xAnGk0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMzNhYjAyNzg2MjM4OWNjYzFmMWZjOGIwYTU2NGE2ZWJk
N2NiOGQwHhcNMjYwMzI4MDEwMDMyWhcNMjYwMzI5MDEwMDMyWjAzMTEwLwYDVQQD
Eyg5ZTVmYzI1MTg1MGI5MGU5ZmZiNWE5OGQ5OGQzYjdjMjJhZWE5M2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh17DhO1uSz8uZySxAaOWSlzX7nhX
6eWOrAzfuImmDQ5ak6EBLIO9JSSXXdnqPkQQkJiB+7RAznfepPBAdkQ8H62wZT/H
vYG4t1qACQ75eYkFx6R5Qesn58uRfvFkLNsOlL1AjafZFCGN5w4zSqAIUGmkZzl+
ini7BOjsEYEVcNwk5/nVWQCoJ+ITWWReYghLriuIpzLW/24DCRwwdIEKIE8/zOeE
imghVAuoWY0GWNuYBBW0jnceYmKnMWBb5y3hq/zyKkZL3mZzM5pNulmUFnXjR5Lw
49YjHof0GCeJXwCsbPJJE7C4SOHI3dlnHkmkV1xeU1zzgfdXT/3GbjZNzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5fwlGFC5Dp/7WpjZjTt8Iq6pO0MB8GA1UdIwQY
MBaAFC0zqwJ4YjiczB8fyLClZKbr18uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFRPckFuaGlPSnpNSHhfSXNLVmtwdXZYeTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83YTYzODEtOGNhNC00MDQ1LWI4Mzct
MzAxZmRmMTE0ODQwLzEvTFRPckFuaGlPSnpNSHhfSXNLVmtwdXZYeTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi83YTYzODEtOGNhNC00MDQ1LWI4MzctMzAxZmRmMTE0ODQw
LzEvTFRPckFuaGlPSnpNSHhfSXNLVmtwdXZYeTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkdjS2ZP
Cf56GzkLx6WaGZ/DEO9l++P2kj9qFniO+KpIYW/UwM6GL5Qd3OWikVhyhXOrQ0Yb
cqUeWk5fNVf+LLJvZm9IAkSMOjZmMK3WK1+Ge61rH1hnatpY9Qa/fwEUDg7EF70X
jYIcUr46rJJjSXKL8L36Vw/EyKZYbSNQpE8t6FWNTLHABKcZN7/58H+9ji3BwzOd
OqzG3Dfb4+ebaGngQ7abmoLz3L2NCkW2iSEPyKc5Sj8kDL7rYQ7Lyy7bh9UPjVFe
KjJhkgQEMYoGahBgvBy5l7EV2CwK1Wo0+QzXZVfs2Eo8EAr5pWitHz1uNzyGlwSy
jmfN5MO5EJwMbw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:58 2026 by rpki-client