Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
File: LTDDBwxuYe3FimTzIz-pf8X1c5s.mft (raw, json)
Hash identifier: 8JF5FuJo61SePOy0JTzT+nS+0GENR5JZ0jCWx5CUgFY=
Subject key identifier: CE:49:28:09:76:9D:9B:A7:A7:86:E4:12:90:2D:0B:CF:6A:61:F4:CD
Authority key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
Certificate issuer: /CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Certificate serial: 019D262886F7A9D4655A3FFA5F885D669FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 18:01:23 +0000
Manifest this update: Wed 25 Mar 2026 18:01:23 +0000
Manifest next update: Thu 26 Mar 2026 18:01:23 +0000
Files and hashes: 1: LTDDBwxuYe3FimTzIz-pf8X1c5s.crl (hash: ot+Cf3QYRn5PLNaEWvt0hibsktXslJDKHPlbCKdS5yg=)
2: Rd5ogL0rZH0GwJinSJKEBpZALRE.roa (hash: nV1zKTqNKFR84ggPUZVLKnPWuVDibn1TXYU/+rnDjXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:86:f7:a9:d4:65:5a:3f:fa:5f:88:5d:66:9f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Validity
Not Before: Mar 25 18:01:23 2026 GMT
Not After : Mar 26 18:01:23 2026 GMT
Subject: CN=ce492809769d9ba7a786e412902d0bcf6a61f4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:5f:f9:d6:d4:2f:7f:ce:a7:77:3b:af:d5:
5a:f1:eb:b1:b3:84:67:17:b2:50:e1:7a:b3:86:7e:
6b:7d:69:53:f4:f4:f7:d9:6a:4f:ad:aa:76:c8:46:
0c:2f:64:37:79:00:e0:13:1e:54:b2:8b:4d:21:cd:
24:6a:f4:cd:8a:e4:f5:c4:0c:04:ab:14:1a:f1:2f:
a9:eb:5d:09:a2:38:46:a6:a2:bd:5c:ee:14:e5:07:
7c:d7:c0:b0:11:6f:79:28:c7:bf:77:60:fb:9a:62:
0a:5e:0c:74:f7:2c:c9:a8:08:9a:dc:1a:a2:f0:17:
92:44:10:09:4b:62:56:8b:fb:72:14:27:99:0d:f7:
b5:94:b4:b3:10:38:ab:e4:dc:05:84:7d:ca:11:40:
41:d9:59:0f:fb:e3:c8:9c:5f:a7:a4:84:9f:be:9f:
1d:4f:0e:e1:55:a5:84:97:e2:0d:48:69:f6:11:b0:
5f:13:87:0b:69:ec:11:6a:ba:f4:36:a6:3b:7c:7b:
a1:e5:fd:ff:85:56:6a:70:42:38:b6:59:d7:fc:6f:
c1:6a:c5:ac:0a:7a:ac:d4:94:e5:70:93:b1:43:7f:
dd:ab:cf:db:9d:07:6a:45:21:66:88:4e:62:10:28:
90:c8:35:5e:37:e9:5d:8c:52:d2:d2:70:94:a7:8a:
5a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:49:28:09:76:9D:9B:A7:A7:86:E4:12:90:2D:0B:CF:6A:61:F4:CD
X509v3 Authority Key Identifier:
keyid:2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6e:bd:24:6a:7b:90:49:be:c4:87:86:f3:fe:d4:f2:05:b1:
7b:8d:a6:01:22:fe:dc:73:63:45:e6:1c:ce:3a:8e:cb:4d:f6:
00:0c:e0:86:76:18:0f:1e:b3:7e:f6:f9:96:99:cb:af:6b:e1:
77:87:4d:37:07:ea:cc:4d:ba:56:e3:a9:d0:fb:71:8c:3f:55:
44:f0:2b:78:a7:d8:26:57:c8:36:ca:8f:6f:ab:18:df:1f:d8:
ef:1e:82:64:b1:92:c6:ce:2a:c1:0b:11:7a:83:72:c0:eb:15:
4d:d8:a0:e5:76:35:5f:a2:56:b5:2b:4f:af:1a:60:6b:21:77:
15:2b:fa:e9:a3:34:86:e7:9a:e3:fd:1b:14:99:31:16:59:42:
a7:fc:24:4a:dc:c9:a5:46:cc:2b:86:32:1d:9a:c0:e2:c7:4c:
e0:8f:3c:08:5f:ed:5d:da:b3:14:7a:e2:26:8b:61:d3:b2:b0:
13:b1:91:2c:21:aa:de:84:0f:19:b0:15:5b:95:72:65:4f:b6:
85:81:fc:05:da:10:9e:8c:8b:fe:fc:f2:0d:9d:86:d1:68:3b:
a6:24:28:f1:d9:96:bd:ef:dc:be:c0:fe:22:26:a8:6f:be:c3:
4f:83:7e:4b:41:6f:a5:50:44:14:2f:ce:45:ca:e6:c8:6c:d5:
42:eb:4d:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKIb3qdRlWj/6X4hdZp/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMzBjMzA3MGM2ZTYxZWRjNThhNjRmMzIzM2ZhOTdmYzVm
NTczOWIwHhcNMjYwMzI1MTgwMTIzWhcNMjYwMzI2MTgwMTIzWjAzMTEwLwYDVQQD
EyhjZTQ5MjgwOTc2OWQ5YmE3YTc4NmU0MTI5MDJkMGJjZjZhNjFmNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVhf+dbUL3/Op3c7r9Va8euxs4Rn
F7JQ4Xqzhn5rfWlT9PT32WpPrap2yEYML2Q3eQDgEx5UsotNIc0kavTNiuT1xAwE
qxQa8S+p610JojhGpqK9XO4U5Qd818CwEW95KMe/d2D7mmIKXgx09yzJqAia3Bqi
8BeSRBAJS2JWi/tyFCeZDfe1lLSzEDir5NwFhH3KEUBB2VkP++PInF+npISfvp8d
Tw7hVaWEl+INSGn2EbBfE4cLaewRarr0NqY7fHuh5f3/hVZqcEI4tlnX/G/BasWs
Cnqs1JTlcJOxQ3/dq8/bnQdqRSFmiE5iECiQyDVeN+ldjFLS0nCUp4paiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5JKAl2nZunp4bkEpAtC89qYfTNMB8GA1UdIwQY
MBaAFC0wwwcMbmHtxYpk8yM/qX/F9XObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFREREJ3eHVZZTNGaW1Uekl6LXBmOFgxYzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80NmExYjAtMTBjMC00Y2Y5LTk1MDIt
MTBkMTczNGQ3YjgzLzEvTFREREJ3eHVZZTNGaW1Uekl6LXBmOFgxYzVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80NmExYjAtMTBjMC00Y2Y5LTk1MDItMTBkMTczNGQ3Yjgz
LzEvTFREREJ3eHVZZTNGaW1Uekl6LXBmOFgxYzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkG69JGp7
kEm+xIeG8/7U8gWxe42mASL+3HNjReYczjqOy032AAzghnYYDx6zfvb5lpnLr2vh
d4dNNwfqzE26VuOp0PtxjD9VRPAreKfYJlfINsqPb6sY3x/Y7x6CZLGSxs4qwQsR
eoNywOsVTdig5XY1X6JWtStPrxpgayF3FSv66aM0huea4/0bFJkxFllCp/wkStzJ
pUbMK4YyHZrA4sdM4I88CF/tXdqzFHriJoth07KwE7GRLCGq3oQPGbAVW5VyZU+2
hYH8BdoQnoyL/vzyDZ2G0Wg7piQo8dmWve/cvsD+Iiaob77DT4N+S0FvpVBEFC/O
RcrmyGzVQutNnQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:32 2026 by rpki-client