Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: /k78W0YERMuKt/0tePTHQ82qPtBe2XqYGkWeSZW6Zls=
Subject key identifier: 04:B9:32:92:1C:2D:F5:AE:05:9B:55:42:FD:14:DF:99:BA:EC:A2:B2
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 019E1F7EC732F0314D963D6A2570675EB96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0C70
Signing time: Wed 13 May 2026 04:01:02 +0000
Manifest this update: Wed 13 May 2026 04:01:02 +0000
Manifest next update: Thu 14 May 2026 04:01:02 +0000
Files and hashes: 1: MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa (hash: Ef0KimqUfcjmjAh99qPeo3PT6AwZiNEjh0UvdcbEniQ=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: oY1uQUpO2ARYbBjM+laLbbndYGN2T8E1Fa8rZqeyUq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:c7:32:f0:31:4d:96:3d:6a:25:70:67:5e:b9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: May 13 04:01:02 2026 GMT
Not After : May 14 04:01:02 2026 GMT
Subject: CN=04b932921c2df5ae059b5542fd14df99baeca2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5e:95:93:13:d2:d3:e0:a3:a0:6d:cf:4e:ee:
47:06:bc:33:ea:7c:e6:03:5c:87:5a:df:a1:b0:b4:
a9:a0:09:dc:3d:4b:11:39:e3:1f:9f:f3:be:62:04:
eb:1b:56:7b:5b:59:15:94:67:1b:b9:32:f0:06:ca:
a5:47:08:b1:46:19:c3:66:f0:62:45:cf:f4:83:65:
60:91:58:3c:6c:dc:a3:dc:b5:83:2f:09:a3:38:63:
f3:b9:cf:43:fc:ca:27:d1:c3:56:5c:77:a0:4b:71:
b4:ed:53:2a:e9:d1:cb:2c:03:7a:08:67:2e:89:8a:
04:f9:b8:b2:69:37:bd:49:51:6e:f2:69:3f:b5:87:
2b:d3:83:fb:ad:db:4c:f1:d9:70:66:1b:c9:a6:96:
61:2e:01:08:67:37:09:68:84:15:2a:d3:ec:fe:26:
cf:e6:54:eb:75:11:7a:dd:43:e3:c1:90:85:87:2c:
d4:d4:4f:a0:a2:30:9e:70:84:46:3e:77:4b:2d:1d:
e2:d3:ab:13:2c:a4:7c:0c:94:85:f7:40:a3:0b:3e:
e9:73:5c:ff:fd:75:f6:82:9f:56:10:75:43:bf:5c:
bb:14:10:01:e7:1a:8e:53:39:1c:ff:0a:ae:38:59:
ae:e5:50:fd:90:02:ae:09:97:93:d2:9e:6a:2c:13:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B9:32:92:1C:2D:F5:AE:05:9B:55:42:FD:14:DF:99:BA:EC:A2:B2
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a2:87:9e:03:6e:0c:e0:82:52:3e:14:1e:e4:16:d7:57:40:
d3:fa:b5:3b:b6:16:4e:ba:a4:d8:80:16:5a:d4:f5:ea:21:f6:
7a:65:fc:99:5d:b8:3e:77:f0:a2:75:5f:38:37:53:3a:3c:a0:
bb:eb:4d:20:78:f8:9c:e8:8f:00:45:c2:3e:6f:05:76:b0:f7:
ce:23:12:da:c6:6a:5e:c7:03:f9:22:96:61:bd:a7:32:0b:21:
22:b7:de:f3:e0:39:a8:93:5c:c6:af:03:e1:6c:2c:24:c7:cf:
e7:20:34:42:01:a6:7b:d5:9f:28:1f:03:73:d7:cf:fa:2f:ea:
71:92:95:a4:61:3c:67:5f:83:31:5c:03:1a:94:ba:06:7e:1a:
68:21:c2:d4:0f:b1:c3:6f:59:9e:ad:e1:1b:84:3c:12:f0:f1:
32:67:e7:f6:2e:71:25:ac:81:5e:e7:b4:42:2f:4d:db:cd:cc:
69:89:c2:c3:19:ce:9b:97:00:bb:d2:2f:fe:f0:57:dc:64:27:
52:41:6c:1d:f2:df:62:e0:26:a9:67:c6:bf:5e:ec:f3:76:a0:
53:80:1e:55:7d:f9:34:e1:30:e8:6f:63:2b:1e:1a:c2:09:7c:
cb:c9:8c:bc:dc:e9:55:eb:8a:26:3b:e2:fd:38:29:9f:13:96:
12:69:ef:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:49:53 2026 by rpki-client