Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: eazIK/+jtwT6zMArHtODNx+Q1pt0wvaNwjp4IMm7AkU=
Subject key identifier: 87:D7:40:05:A8:4F:DF:7C:1A:EF:44:C1:44:EB:FC:4E:C0:9D:96:9C
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 019F9436E14E03644836697903F77451B5A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0D31
Signing time: Fri 24 Jul 2026 13:00:52 +0000
Manifest this update: Fri 24 Jul 2026 13:00:52 +0000
Manifest next update: Sat 25 Jul 2026 13:00:52 +0000
Files and hashes: 1: MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa (hash: Ef0KimqUfcjmjAh99qPeo3PT6AwZiNEjh0UvdcbEniQ=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: bGHaSar4EcRbPSlMFFIsznHW/CsRu1M/EZWuCeWi2Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:e1:4e:03:64:48:36:69:79:03:f7:74:51:b5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Jul 24 13:00:52 2026 GMT
Not After : Jul 25 13:00:52 2026 GMT
Subject: CN=87d74005a84fdf7c1aef44c144ebfc4ec09d969c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:13:1b:89:09:9e:76:2e:bc:b3:cc:be:ee:
40:50:34:f5:04:42:b4:d3:40:fa:7f:83:ce:3c:87:
12:de:47:e3:1d:73:7f:0b:40:e0:9b:dc:9d:9b:70:
a0:9a:2e:52:2b:c0:5b:68:84:29:e3:5b:55:93:44:
6b:c0:13:f6:83:c1:30:cc:54:73:75:f2:a8:d1:31:
8a:78:48:aa:c0:45:ef:d2:0d:3a:2f:3b:bc:99:32:
6f:3e:9d:d1:47:33:97:c0:7f:4c:07:30:fd:08:71:
a6:1c:fd:4b:2a:8d:8d:ed:6e:15:29:d5:de:7a:a1:
e1:cc:f8:33:c4:88:a6:70:4a:80:8f:0d:f8:48:19:
62:de:af:46:af:06:9f:ff:e6:0b:e8:ba:12:10:a3:
a9:e1:5a:66:5d:6a:f3:1d:4e:fe:ce:88:f3:2b:0e:
1c:76:ff:3a:3c:dc:8b:76:9b:b7:6e:18:c6:eb:e4:
55:a6:3e:d5:c6:c8:26:1b:ce:a1:bc:c9:3b:ea:ba:
2b:0d:9a:98:eb:d7:69:21:08:91:da:38:db:2d:27:
ae:bc:c0:c4:25:f5:47:03:48:24:16:d4:9d:00:27:
04:2b:93:c6:95:09:b6:b8:99:f4:21:ab:a8:08:ad:
2b:a6:40:0e:dc:19:7f:72:0e:7d:c4:51:f2:e3:e8:
75:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D7:40:05:A8:4F:DF:7C:1A:EF:44:C1:44:EB:FC:4E:C0:9D:96:9C
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:63:ef:45:2c:b5:0e:c0:10:59:3d:90:79:67:37:a6:d8:8b:
4e:34:c3:9d:51:75:b1:92:ff:d1:1e:38:8d:51:ea:a6:1d:76:
9e:ad:ae:bb:a2:a0:6e:55:f4:28:6f:46:f7:01:1b:aa:f8:41:
b0:65:2d:2e:13:1e:e5:2c:ae:2f:ee:e1:8b:24:80:34:dd:1c:
cb:ca:25:d1:58:13:98:ad:75:58:22:26:a9:ca:f2:d0:06:26:
cd:fb:a9:73:93:27:86:fc:09:66:3e:9e:b4:14:ae:89:72:fc:
c0:5a:e3:10:46:fe:97:4e:c9:09:b7:15:57:d8:21:01:a9:7b:
28:e6:a7:b4:bd:e0:c2:b7:ab:67:1d:79:da:10:1b:4f:ce:e2:
17:e4:79:35:85:3e:54:26:85:22:a4:00:48:90:7f:41:07:5f:
94:a0:74:6a:50:30:ce:cc:0b:8f:02:f7:3e:fb:a4:42:eb:ef:
8e:aa:5a:bc:10:9c:1f:62:ff:c6:6d:82:f2:bc:d3:cc:84:c0:
cf:de:a0:ce:c0:f0:d8:d8:2f:7a:97:75:db:8d:b9:65:45:96:
7e:76:79:40:bc:89:d1:07:5c:27:13:a6:70:2c:58:11:f9:92:
7d:36:98:16:45:da:ff:f4:d7:77:2c:51:3b:b3:2b:94:f9:94:
37:d9:20:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:01:58 2026 by rpki-client