Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
File: LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json)
Hash identifier: W8YvqABvybgSk+762R43+HGzZ7LdX2ETybOOkJMoZv8=
Subject key identifier: 6E:FF:07:61:D3:22:D4:BC:12:06:11:C1:1C:A4:00:E3:91:19:57:0D
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial: 019D2771F41C2EA65DBD050D3CAFB9F0AFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
Manifest number: 0224
Signing time: Thu 26 Mar 2026 00:01:12 +0000
Manifest this update: Thu 26 Mar 2026 00:01:12 +0000
Manifest next update: Fri 27 Mar 2026 00:01:12 +0000
Files and hashes: 1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: 2Zu9R8p1SuQaQ3g37g36+vL5DmNIFsrBSb2ANN9fH+A=)
2: YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa (hash: r+jOonrhaqNcXtHMcC3c05txxmDgPgiD9LqnOUDboTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f4:1c:2e:a6:5d:bd:05:0d:3c:af:b9:f0:af:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Validity
Not Before: Mar 26 00:01:12 2026 GMT
Not After : Mar 27 00:01:12 2026 GMT
Subject: CN=6eff0761d322d4bc120611c11ca400e39119570d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:b8:c2:2e:5e:e1:ac:dc:28:38:bc:2e:47:
24:00:e4:20:51:18:15:3d:f0:69:4e:db:c0:c6:76:
06:a0:9a:d8:00:4e:38:67:e9:c9:ec:40:ae:03:28:
d5:16:ca:ab:bb:2f:60:a6:1d:f2:8d:f5:8a:d2:67:
68:e1:a6:1d:d0:1d:30:b1:77:e6:5c:f7:24:88:72:
d5:a7:b9:d0:5e:41:4b:83:99:8f:10:d9:4c:10:e8:
0b:a7:3b:31:fc:7a:2b:35:5b:29:c4:a6:89:4d:60:
a0:b8:3d:56:4b:c3:71:45:a5:00:05:fa:a4:e0:4b:
71:c3:71:12:ee:2c:e4:0d:d1:3d:75:8e:38:46:d6:
8b:54:63:69:24:a8:d4:b8:bb:f1:be:03:93:be:06:
f7:2b:31:39:66:7e:e8:5d:72:d7:55:53:9f:48:61:
ff:bf:9a:de:47:33:1f:2c:2e:08:b1:e2:c1:6f:41:
60:5c:43:d8:f9:69:25:82:ed:da:bc:52:d4:0b:16:
0f:b5:13:9d:31:8d:e1:d5:18:27:32:35:16:13:48:
39:03:e6:b6:2b:26:ac:a5:a6:b2:4c:05:9d:57:4a:
c4:ab:45:e6:47:a9:54:80:c0:91:e6:16:96:f2:23:
c5:23:46:bb:f8:c0:66:b8:b4:6c:97:c1:16:d1:03:
e1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FF:07:61:D3:22:D4:BC:12:06:11:C1:1C:A4:00:E3:91:19:57:0D
X509v3 Authority Key Identifier:
keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:40:dd:2e:02:a2:67:37:a3:04:0e:13:28:61:b8:25:33:e8:
3c:3e:ea:2d:2c:27:bf:d2:4d:72:c5:6f:70:0e:49:0b:05:27:
81:21:3b:87:07:09:a0:d3:fd:a5:51:b3:99:f2:62:31:9c:8c:
77:3b:b5:86:7a:b9:72:06:2d:9f:1a:40:33:0e:cb:79:79:f9:
a5:99:31:9a:fc:19:24:9e:52:34:8d:a4:6d:96:8f:f6:30:07:
ac:77:03:82:98:28:d5:33:bc:54:5d:e9:cd:4e:29:a2:b5:59:
85:99:30:a6:31:1c:48:4b:36:51:dc:25:1b:53:a0:c5:0f:a2:
41:4b:92:d9:5f:cb:d9:27:3e:c6:9a:cf:c9:07:80:26:43:cf:
32:b2:c5:f8:f9:50:a9:34:e2:e5:be:4b:20:07:bb:2c:85:4e:
c4:6e:b6:8a:29:0d:f6:6f:1b:7a:58:24:f1:33:e9:27:c7:48:
ba:b2:39:f3:7d:32:a4:e1:e1:4f:c6:ef:e3:2a:28:bf:26:0d:
59:fa:1a:d1:e9:97:b9:4e:c3:e4:39:17:eb:4c:2c:af:2e:ce:
89:dc:bc:91:53:03:4e:73:c6:b1:90:14:08:62:ab:7d:cf:2e:
7e:dd:7d:5c:f9:87:b8:96:46:a5:58:9f:da:9e:53:da:59:43:
67:e4:c2:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncfQcLqZdvQUNPK+58K+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZDQwODdhMzcyN2YwNDdlMDk2ZGI2OTJlMDAzZDZjMDEx
M2YxZTIwHhcNMjYwMzI2MDAwMTEyWhcNMjYwMzI3MDAwMTEyWjAzMTEwLwYDVQQD
Eyg2ZWZmMDc2MWQzMjJkNGJjMTIwNjExYzExY2E0MDBlMzkxMTk1NzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDS4wi5e4azcKDi8LkckAOQgURgV
PfBpTtvAxnYGoJrYAE44Z+nJ7ECuAyjVFsqruy9gph3yjfWK0mdo4aYd0B0wsXfm
XPckiHLVp7nQXkFLg5mPENlMEOgLpzsx/HorNVspxKaJTWCguD1WS8NxRaUABfqk
4Etxw3ES7izkDdE9dY44RtaLVGNpJKjUuLvxvgOTvgb3KzE5Zn7oXXLXVVOfSGH/
v5reRzMfLC4IseLBb0FgXEPY+Wklgu3avFLUCxYPtROdMY3h1RgnMjUWE0g5A+a2
KyaspaayTAWdV0rEq0XmR6lUgMCR5haW8iPFI0a7+MBmuLRsl8EW0QPhywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7/B2HTItS8EgYRwRykAOORGVcNMB8GA1UdIwQY
MBaAFC7UCHo3J/BH4JbbaS4APWwBE/HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHRRSWVqY244RWZnbHR0cExnQTliQUVUOGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81MzlkZGItNTA3OC00ODFjLTliNzIt
Y2M4NGViNDJhYzM5LzEvTHRRSWVqY244RWZnbHR0cExnQTliQUVUOGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC81MzlkZGItNTA3OC00ODFjLTliNzItY2M4NGViNDJhYzM5
LzEvTHRRSWVqY244RWZnbHR0cExnQTliQUVUOGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekDdLgKi
ZzejBA4TKGG4JTPoPD7qLSwnv9JNcsVvcA5JCwUngSE7hwcJoNP9pVGzmfJiMZyM
dzu1hnq5cgYtnxpAMw7LeXn5pZkxmvwZJJ5SNI2kbZaP9jAHrHcDgpgo1TO8VF3p
zU4porVZhZkwpjEcSEs2UdwlG1OgxQ+iQUuS2V/L2Sc+xprPyQeAJkPPMrLF+PlQ
qTTi5b5LIAe7LIVOxG62iikN9m8belgk8TPpJ8dIurI5830ypOHhT8bv4yoovyYN
Wfoa0emXuU7D5DkX60wsry7Oidy8kVMDTnPGsZAUCGKrfc8uft19XPmHuJZGpVif
2p5T2llDZ+TCzw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:29 2026 by rpki-client