Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: PLE3lnv7IfIuhoKJvGsjZWJONSFL0dOPzgiXgiDoy7M=
Subject key identifier: 26:12:F5:A5:23:4C:B8:2C:BE:0C:71:4C:97:71:12:B7:46:85:89:86
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 019D265F688D6D0435BCB290FA1C580B5889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0BEF
Signing time: Wed 25 Mar 2026 19:01:19 +0000
Manifest this update: Wed 25 Mar 2026 19:01:19 +0000
Manifest next update: Thu 26 Mar 2026 19:01:19 +0000
Files and hashes: 1: MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa (hash: Ef0KimqUfcjmjAh99qPeo3PT6AwZiNEjh0UvdcbEniQ=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: lz6T4AS1H9c6nQt3WAOcKQ2AxWtahUJbkaGELJKjnrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:68:8d:6d:04:35:bc:b2:90:fa:1c:58:0b:58:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Mar 25 19:01:19 2026 GMT
Not After : Mar 26 19:01:19 2026 GMT
Subject: CN=2612f5a5234cb82cbe0c714c977112b746858986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d5:28:e2:20:4a:48:32:1e:d7:e3:93:ff:1d:
8e:51:a3:52:7e:c4:07:79:6a:ef:22:ef:21:31:9d:
ca:f1:03:54:71:fa:1a:8c:b1:fd:13:22:39:12:b6:
d8:fd:29:b8:03:bb:66:0d:a1:2b:01:39:1f:09:3f:
35:cf:b5:ec:82:01:a5:1a:43:5a:2a:fe:77:20:5a:
e9:40:63:19:73:d4:21:63:ee:f6:73:aa:a2:c6:c1:
21:40:cb:71:c3:5e:5d:00:ab:b6:73:c6:1c:0d:da:
66:50:c1:cf:b5:ad:d4:79:61:d0:f1:98:e2:eb:c2:
e1:53:52:80:d3:67:3b:bb:7c:42:6b:d2:72:c8:14:
4c:71:af:7e:25:af:73:95:95:71:c3:77:f2:66:0b:
d5:1c:c0:3f:9c:ce:22:ca:b2:4c:c0:7e:ab:44:46:
41:9e:96:4d:05:be:68:96:85:9a:ca:f1:f2:da:63:
6a:d9:75:0c:f6:71:df:30:2f:1b:de:18:16:13:d6:
c7:89:b0:c9:74:39:80:2a:96:ae:d1:c4:3e:4b:40:
27:68:1c:11:19:c0:bd:1f:87:b5:b6:64:6a:fc:a0:
ee:16:38:b9:8f:b5:eb:94:e9:75:5f:e9:14:ca:6e:
f7:2c:58:f2:19:9b:af:ea:41:9b:44:10:ba:bf:ce:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:12:F5:A5:23:4C:B8:2C:BE:0C:71:4C:97:71:12:B7:46:85:89:86
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f8:7e:e7:f4:1e:7f:7a:0d:7c:a4:00:29:fe:ba:17:28:5c:
a7:4b:74:51:98:da:58:fb:04:c2:d1:02:1a:97:dc:ff:f3:f5:
26:39:01:b2:18:dc:e6:1c:be:47:f3:60:59:be:68:90:de:9c:
c8:3d:11:f9:b6:d6:7a:43:09:51:de:bf:76:3f:0b:bc:1e:2c:
44:9a:3d:4b:90:da:ca:cd:c5:26:41:eb:f3:6e:25:81:fe:a1:
f9:33:20:8b:13:9c:9f:74:15:17:28:66:5a:08:a1:9a:6a:28:
55:ba:f7:4f:7c:b0:e2:ea:2b:b2:00:6e:2d:20:89:53:e7:d9:
95:92:ad:c1:92:0b:0a:2e:58:32:fe:d2:f1:2e:9c:72:0d:22:
18:a8:6a:e5:bb:33:b5:56:55:b9:64:60:2d:f4:88:87:eb:77:
d1:d0:90:82:1d:5a:79:cb:49:6e:52:4c:70:60:40:e1:6e:73:
0b:ad:ea:c1:60:9f:26:39:0c:1a:92:31:50:d1:47:26:ee:a9:
a1:87:37:23:7f:0c:81:35:19:00:d5:e7:fb:0d:0b:c7:2b:4f:
81:9a:45:cb:02:8a:34:be:70:6e:a5:90:54:84:37:26:6c:8c:
e6:4e:39:5e:05:5e:d9:e3:f7:e7:8f:7c:b4:5d:9a:a0:93:c6:
85:22:6f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:33 2026 by rpki-client