Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: nUzngu7VBu2SAoDWvLK5KF2faz4FckYNLCGcvrHQWRU=
Subject key identifier: F2:7A:BD:4A:EE:E0:47:20:4A:3B:97:92:57:C6:66:69:29:C3:B4:1F
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 01A0EDE5DD96DE8A64A8A4F8B219B3343CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0DE4
Signing time: Tue 29 Sep 2026 16:00:59 +0000
Manifest this update: Tue 29 Sep 2026 16:00:59 +0000
Manifest next update: Wed 30 Sep 2026 16:00:59 +0000
Files and hashes: 1: MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa (hash: Ef0KimqUfcjmjAh99qPeo3PT6AwZiNEjh0UvdcbEniQ=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: 4TO8xFbNJbOtpXrdbq0io2xSS6mGnF8IXGRDPF5CRbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e5:dd:96:de:8a:64:a8:a4:f8:b2:19:b3:34:3c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Sep 29 16:00:59 2026 GMT
Not After : Sep 30 16:00:59 2026 GMT
Subject: CN=f27abd4aeee047204a3b979257c6666929c3b41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8f:31:44:67:08:09:66:51:f1:fc:60:85:18:
a7:d9:e9:0e:66:fb:db:1f:8d:e5:1d:66:db:72:a6:
9c:9e:a4:25:11:e8:84:f3:c6:38:ea:b3:c2:65:71:
55:cf:c8:2b:29:5d:d9:a4:ce:d9:2a:9a:98:e7:33:
f7:db:2a:2b:45:5a:88:64:c4:28:24:81:54:cb:78:
ae:b4:06:2f:17:40:21:1e:b9:ac:f2:03:dc:bc:d5:
b8:13:ca:30:48:d9:0d:98:82:b5:1b:d8:31:15:54:
f7:49:91:14:b5:8f:84:2c:0a:32:0b:6d:c6:60:48:
30:92:8d:93:9e:87:2f:09:d4:84:a1:c1:80:93:97:
fc:a9:2a:4a:e3:4f:65:19:25:37:17:17:d0:92:12:
9d:1d:c9:57:d7:ef:93:d9:82:6a:f2:38:12:e8:f1:
9d:2d:c0:30:2d:8d:3c:36:ca:d5:41:47:d9:02:98:
f9:66:6f:b9:b3:db:cf:a0:45:08:47:4e:70:4e:04:
2c:7d:77:8b:e0:3a:be:ba:f7:69:d2:ea:c9:69:89:
58:b9:fa:99:e3:66:40:04:30:70:f6:b8:65:bb:be:
7f:d5:c8:69:02:11:56:f6:16:6c:55:69:9d:31:7d:
2d:b6:40:08:be:ce:16:05:4b:cc:bd:88:11:8b:1a:
42:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7A:BD:4A:EE:E0:47:20:4A:3B:97:92:57:C6:66:69:29:C3:B4:1F
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:01:fe:0a:ca:4d:d7:15:0b:5b:d8:b1:00:0e:48:c4:f2:02:
d9:bc:d1:8b:91:09:85:21:b8:fc:a6:8b:f6:fe:e1:0b:c0:b4:
7d:3e:c7:a6:65:6d:34:62:f2:7a:71:0f:fa:cb:1d:f9:2a:25:
f0:66:c1:3a:a5:4d:75:6d:1d:90:05:5c:99:73:03:63:12:74:
d4:69:9f:5f:dd:84:5d:de:20:a6:91:83:52:4c:bc:52:7c:72:
13:f9:41:2e:ed:e4:d7:cf:50:fc:d7:89:d4:dd:90:76:e1:ac:
b1:a4:99:23:51:42:46:60:6d:13:54:43:eb:47:e3:57:3c:04:
76:b0:b0:0c:a7:0d:a6:44:5d:7e:39:fe:6e:53:cf:6f:b5:57:
11:89:82:d0:2b:7a:00:8f:06:c2:bb:7d:eb:a0:03:92:72:0f:
76:2e:b4:02:c0:3a:b4:65:83:1a:d6:7c:92:1f:96:c5:37:1c:
54:52:93:27:f9:43:4d:97:37:72:a5:0b:bf:93:76:81:8c:5f:
ee:dc:97:56:7f:21:4f:66:df:73:2e:ac:7f:4f:0c:4e:9d:4a:
aa:d6:57:dc:4d:f8:69:79:41:8f:2e:7e:9f:0a:83:55:ec:e5:
2c:ee:2b:39:80:1a:7a:13:08:8f:40:86:a0:f9:cf:f9:38:f4:
d9:b4:f4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 21:07:34 2026 by rpki-client