Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
File: LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json)
Hash identifier: FZkGWmcLD1UFG+YmAwxGMfHVNEgDIkv7QyFCaYckgpE=
Subject key identifier: B5:8C:16:60:7C:86:6F:EC:7B:0A:A1:EC:5B:57:27:A7:27:A4:09:8F
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial: 01A0DF86520025EB971D7EC8EAA8F46A262D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
Manifest number: 0411
Signing time: Sat 26 Sep 2026 21:01:56 +0000
Manifest this update: Sat 26 Sep 2026 21:01:56 +0000
Manifest next update: Sun 27 Sep 2026 21:01:56 +0000
Files and hashes: 1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: jThfyRLHQIA1u0FlUyRh/Wsr9K8zbze22qmuc00dz5M=)
2: YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa (hash: r+jOonrhaqNcXtHMcC3c05txxmDgPgiD9LqnOUDboTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:52:00:25:eb:97:1d:7e:c8:ea:a8:f4:6a:26:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Validity
Not Before: Sep 26 21:01:56 2026 GMT
Not After : Sep 27 21:01:56 2026 GMT
Subject: CN=b58c16607c866fec7b0aa1ec5b5727a727a4098f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:88:92:cb:82:78:b2:4e:4b:78:a4:22:25:
5a:09:64:a1:58:ab:95:b5:43:c8:2e:1c:93:7f:21:
8e:35:4d:69:60:1b:5c:57:51:14:f8:d9:57:d7:53:
3d:35:3b:7f:e4:16:b7:d3:b5:e2:91:6e:4a:43:9a:
9d:89:d0:f9:3f:43:d4:e2:a4:d0:21:79:0f:d6:a3:
85:71:19:35:fd:28:7f:c5:41:71:58:2f:85:de:ec:
b7:47:e2:7f:08:86:d9:75:09:c7:6c:e3:e3:a6:57:
2c:45:93:ff:0e:47:dd:41:a7:e6:b1:30:24:85:e6:
99:d0:fb:83:38:96:4b:6a:b8:8c:02:bc:fa:fe:0f:
c6:16:b8:4e:18:6e:9a:2d:eb:de:82:2a:e3:26:75:
e8:4b:1b:c6:bb:e5:93:da:b4:c9:02:c5:8e:3d:a9:
50:cc:e6:b6:9f:a9:77:48:1c:cf:69:0e:3f:24:47:
fa:0c:14:ca:43:17:a4:2c:73:34:5b:75:6e:74:15:
aa:5d:f0:ba:e5:00:f0:0b:f8:f0:d7:fa:b9:91:7e:
8c:5b:34:5a:77:d5:2a:af:e1:57:01:e2:d6:a0:47:
58:43:a9:ae:31:21:28:48:31:f3:a2:5d:5e:df:dd:
3c:b2:4d:ac:64:8e:a7:62:6a:1b:10:e4:42:73:bb:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8C:16:60:7C:86:6F:EC:7B:0A:A1:EC:5B:57:27:A7:27:A4:09:8F
X509v3 Authority Key Identifier:
keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:62:13:5f:cc:14:b1:c1:d6:b8:2b:85:22:a8:a9:65:37:d1:
68:2a:8d:00:e1:3b:e1:66:6d:5a:4c:f6:d3:00:75:3a:ff:29:
54:b5:63:18:b0:7a:1a:c3:5b:55:7b:d2:7d:25:2e:2c:c6:44:
f6:a0:f9:77:23:2c:a6:f7:9d:89:b5:cc:cb:78:57:ed:4e:7f:
ca:60:05:a1:fb:63:b9:9c:d6:85:7f:52:4f:4c:da:af:67:c6:
6d:a5:70:18:2f:e4:8a:dd:b2:81:c5:67:c8:6c:b5:26:41:1c:
27:3a:5b:c7:8e:6f:05:24:ee:80:ad:3e:43:4f:76:e7:5a:92:
e1:ab:9e:32:36:9d:62:49:8c:bb:dd:7c:74:81:d7:64:14:fe:
ca:f8:8a:1f:ed:59:14:3d:17:52:ce:f7:20:03:c7:3b:cf:51:
a5:f7:16:35:26:37:ff:e1:7b:d3:b1:23:a7:5f:f6:0f:e6:f4:
b5:b0:c1:db:3f:43:80:95:a0:f1:ea:21:c4:03:0d:4e:fb:40:
14:18:5c:7c:76:61:4c:3e:98:ce:0e:41:f3:8f:02:b0:24:fc:
9e:9b:ef:6f:28:b3:0a:d4:29:7d:26:07:62:08:00:d3:5e:0e:
b9:5d:da:5c:9a:8c:98:6b:08:b3:f3:55:11:f3:81:e2:d1:77:
20:e5:7e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:51:32 2026 by rpki-client