Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
File: lTXl04RZIbnV_fI2N8WYEbg4Y08.mft (raw, json)
Hash identifier: 66Qoxue3xMenPv9XoodrSG7KrECQxJ76gQTw+PVxSNs=
Subject key identifier: 6B:59:3D:6D:A7:CC:14:04:2C:50:AA:DB:BA:85:50:D3:B8:96:65:3A
Authority key identifier: 95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
Certificate issuer: /CN=9535e5d3845921b9d5fdf23637c59811b838634f
Certificate serial: 019E1E35243AF8FF69E3FDFC33908D1F1E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
Manifest number: 02F1
Signing time: Tue 12 May 2026 22:00:59 +0000
Manifest this update: Tue 12 May 2026 22:00:59 +0000
Manifest next update: Wed 13 May 2026 22:00:59 +0000
Files and hashes: 1: S0T2kL_9PWLHXGxcH-DefO6iYPU.roa (hash: Pu+0PGdxODxmEsVaBVFzUtH5CFGWNyj6dWAHyNzOXw4=)
2: lTXl04RZIbnV_fI2N8WYEbg4Y08.crl (hash: XQWIyylAFaFfq0h6fhHB2kX8hHKGfTDnnFxqGz3mY6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:24:3a:f8:ff:69:e3:fd:fc:33:90:8d:1f:1e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535e5d3845921b9d5fdf23637c59811b838634f
Validity
Not Before: May 12 22:00:59 2026 GMT
Not After : May 13 22:00:59 2026 GMT
Subject: CN=6b593d6da7cc14042c50aadbba8550d3b896653a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:67:ee:67:be:53:a5:2f:8f:49:df:ac:5b:
69:2a:4a:f7:28:16:d8:81:a7:cd:12:a4:d5:29:ba:
98:7d:e8:ff:93:9e:63:d6:9a:5b:9d:32:14:3e:40:
3f:77:6d:80:86:1f:ce:89:21:8f:d1:d3:6b:92:23:
08:43:7f:25:b5:1d:d8:40:91:4a:c4:ef:fd:83:11:
13:29:32:27:a5:a9:d2:d8:1d:66:0a:fe:aa:24:71:
e0:fb:24:b6:1c:77:80:8a:60:23:15:ae:8c:e9:35:
bc:aa:e4:0a:79:8c:4a:af:70:73:30:e9:6d:3e:3a:
4b:ad:80:86:4c:66:ee:40:13:85:b4:a7:48:8f:5c:
57:df:81:bc:0d:df:0f:4a:a5:84:71:84:b1:ad:c8:
72:46:13:14:90:58:3d:21:69:ea:ec:cd:99:e0:27:
86:ab:8f:48:11:33:ef:9b:c1:41:98:b8:cd:dd:6e:
34:96:0c:2e:5c:d6:4c:fd:ba:3b:a2:3c:d1:a7:0b:
97:d4:46:81:6a:0c:26:fa:67:9e:cc:b3:dc:b4:4f:
7c:ef:3f:bc:2c:1a:54:69:3e:a4:4b:5e:0d:60:bf:
18:3c:52:85:65:42:d9:f3:3d:64:60:32:9e:3d:c4:
0d:17:01:b6:6d:d6:3a:66:43:f3:2f:44:80:e8:22:
4d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:59:3D:6D:A7:CC:14:04:2C:50:AA:DB:BA:85:50:D3:B8:96:65:3A
X509v3 Authority Key Identifier:
keyid:95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1d:cf:fb:05:c6:f8:d2:b2:ab:63:c7:05:8f:58:29:c2:75:
c6:cc:b6:68:c0:6d:9f:48:59:d8:0d:dd:3f:96:21:a9:94:4c:
fb:5a:3c:46:3b:8c:80:23:5a:7a:d0:25:de:54:cc:97:44:a7:
03:50:15:5e:36:7b:23:56:bd:7a:da:27:8a:1b:73:17:ab:50:
c1:14:f8:a0:e9:f3:3f:0a:51:e0:d1:9c:aa:ae:ee:e3:07:70:
04:40:8c:31:4a:3a:0d:c7:ad:ac:7c:9c:b4:d7:ed:d7:6f:52:
bd:ea:14:28:e0:f4:9e:2b:9a:68:ed:7b:61:24:14:11:8f:76:
b1:fa:7d:0c:91:2b:b4:d6:f7:d7:bc:00:83:88:39:bb:ec:11:
c5:eb:a9:cf:80:ba:7e:ba:86:53:de:7a:9f:d8:84:aa:e7:2d:
34:d8:1a:8c:c7:94:52:1a:71:a2:6a:53:64:ed:28:5c:2e:c2:
d3:76:25:cf:2c:ce:26:2b:a2:5e:59:ef:2e:0b:f4:9e:47:28:
f6:4e:dc:d3:ef:46:94:e3:85:a8:8d:09:01:c8:b4:9f:8f:49:
58:50:8b:56:f0:9d:b9:4f:25:ae:c7:97:a7:31:ac:65:b8:61:
98:17:cc:0f:b3:9d:ea:d3:5e:cb:84:48:3f:74:3f:57:09:38:
4f:c8:f2:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNSQ6+P9p4/38M5CNHx5jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MzVlNWQzODQ1OTIxYjlkNWZkZjIzNjM3YzU5ODExYjgz
ODYzNGYwHhcNMjYwNTEyMjIwMDU5WhcNMjYwNTEzMjIwMDU5WjAzMTEwLwYDVQQD
Eyg2YjU5M2Q2ZGE3Y2MxNDA0MmM1MGFhZGJiYTg1NTBkM2I4OTY2NTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIdn7me+U6Uvj0nfrFtpKkr3KBbY
gafNEqTVKbqYfej/k55j1ppbnTIUPkA/d22Ahh/OiSGP0dNrkiMIQ38ltR3YQJFK
xO/9gxETKTInpanS2B1mCv6qJHHg+yS2HHeAimAjFa6M6TW8quQKeYxKr3BzMOlt
PjpLrYCGTGbuQBOFtKdIj1xX34G8Dd8PSqWEcYSxrchyRhMUkFg9IWnq7M2Z4CeG
q49IETPvm8FBmLjN3W40lgwuXNZM/bo7ojzRpwuX1EaBagwm+meezLPctE987z+8
LBpUaT6kS14NYL8YPFKFZULZ8z1kYDKePcQNFwG2bdY6ZkPzL0SA6CJNWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtZPW2nzBQELFCq27qFUNO4lmU6MB8GA1UdIwQY
MBaAFJU15dOEWSG51f3yNjfFmBG4OGNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRYbDA0UlpJYm5WX2ZJMk44V1lFYmc0WTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mZGQyNTUtZDYxZS00MGI2LWE3OGYt
OWNlZjkxN2I4ZTM3LzEvbFRYbDA0UlpJYm5WX2ZJMk44V1lFYmc0WTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mZGQyNTUtZDYxZS00MGI2LWE3OGYtOWNlZjkxN2I4ZTM3
LzEvbFRYbDA0UlpJYm5WX2ZJMk44V1lFYmc0WTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAih3P+wXG
+NKyq2PHBY9YKcJ1xsy2aMBtn0hZ2A3dP5YhqZRM+1o8RjuMgCNaetAl3lTMl0Sn
A1AVXjZ7I1a9etonihtzF6tQwRT4oOnzPwpR4NGcqq7u4wdwBECMMUo6DcetrHyc
tNft129SveoUKOD0niuaaO17YSQUEY92sfp9DJErtNb317wAg4g5u+wRxeupz4C6
frqGU956n9iEquctNNgajMeUUhpxompTZO0oXC7C03YlzyzOJiuiXlnvLgv0nkco
9k7c0+9GlOOFqI0JAci0n49JWFCLVvCduU8lrseXpzGsZbhhmBfMD7Od6tNey4RI
P3Q/Vwk4T8jy0w==
-----END CERTIFICATE-----
Generated at Wed May 13 05:34:37 2026 by rpki-client