Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
File: LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft (raw, json)
Hash identifier: jgr37ggL5S7wvPvyawwiGqMQ643Ea9IzBnpVETsYhog=
Subject key identifier: 35:7B:06:06:EA:F9:73:FE:64:D0:BF:01:02:5D:A5:43:A7:E5:23:9B
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 019DB3C7A12F4990A92EDC6470E084B5D9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
Manifest number: 0205
Signing time: Wed 22 Apr 2026 06:01:37 +0000
Manifest this update: Wed 22 Apr 2026 06:01:37 +0000
Manifest next update: Thu 23 Apr 2026 06:01:37 +0000
Files and hashes: 1: DQVqjzC5rdONHq62ZKGqNPJyrRw.roa (hash: dDYajOCYrao79EK9Kj5vMqOndXhk7A3V1BOKDwNdvCc=)
2: LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl (hash: JC5VYhZr/R+VbYnH1BBdIZ4gZcRiLD0g90IfQsWk3LE=)
3: NE7mP6LXofTtetMrz0bZ4gVjQZQ.roa (hash: OKq/sE5vI4Tp87JPYnyleJOP67qF4AH8+fsvJkq27uQ=)
4: c4PWOTsWtb2BHJ2drzbMurS1uj4.roa (hash: GfaIz/k9kQAzF2LqeZrCe55euhWttcaoPzS2hsKifpc=)
5: p38nf1_J-hf5pJoRzzg0ttvCGMc.roa (hash: VNYm4Y42SOlQ9dXOHkzUE+m/pzdyaj+7nbqcjEjzt8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:c7:a1:2f:49:90:a9:2e:dc:64:70:e0:84:b5:d9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Apr 22 06:01:37 2026 GMT
Not After : Apr 23 06:01:37 2026 GMT
Subject: CN=357b0606eaf973fe64d0bf01025da543a7e5239b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8c:5f:2c:21:bf:ab:77:6f:ca:2b:dc:b8:ef:
76:94:c4:d0:68:03:3d:18:db:9b:80:26:76:3d:e9:
9e:61:77:bd:d6:2e:4d:85:92:e0:f9:8d:63:59:e8:
17:43:e7:2c:9d:1d:e3:3f:20:5f:e8:50:d0:45:3f:
34:74:ab:d4:8d:0c:03:09:4b:99:36:ff:93:8b:c8:
16:c9:ab:fd:84:30:03:8d:f0:dc:83:bf:f4:30:96:
4f:e3:df:3f:93:32:01:2c:76:76:6d:3c:2d:ef:03:
6b:7f:ed:e3:b4:38:6d:e5:c1:03:c0:e3:c2:79:4b:
4d:11:94:42:bb:1c:8c:a3:ab:ab:90:ed:ff:4e:d4:
75:0e:9d:30:99:8d:e7:ea:3d:db:12:88:a4:e7:57:
56:34:e9:d9:30:e1:e5:0f:d9:b2:fc:39:12:07:c7:
7c:0f:f2:89:9b:18:6a:3f:08:13:a4:92:a7:69:ad:
a5:48:67:1f:2a:99:04:d8:c5:fb:1c:16:e7:01:1f:
78:ff:4c:32:43:8b:62:04:ea:7e:8a:10:b3:f7:7f:
2a:d8:5e:93:2b:7a:f1:23:6d:af:ad:44:5a:bc:14:
e6:d7:80:17:f4:ff:c8:4b:5c:21:5f:05:f4:26:bf:
a0:33:82:d0:6a:bd:6e:d2:06:23:15:62:2a:1a:f8:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7B:06:06:EA:F9:73:FE:64:D0:BF:01:02:5D:A5:43:A7:E5:23:9B
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:56:0b:c1:75:54:41:14:56:56:a5:64:c7:ac:47:79:1e:ed:
a7:7b:f8:86:87:8a:10:ff:af:aa:69:c6:20:c6:02:f1:57:47:
35:1f:ce:64:e1:9e:f1:48:6f:0a:67:2f:82:77:e0:ee:36:12:
1e:68:77:3a:b8:e2:29:92:f2:90:00:73:06:d1:96:e0:31:9f:
da:b6:ce:0c:5e:30:05:6b:4e:0e:17:58:cb:76:44:53:de:3d:
ff:04:b1:cd:4d:32:9a:ba:ac:72:27:83:61:59:47:90:0d:0e:
46:5b:01:31:5b:37:40:9a:f5:11:a4:7d:78:53:f9:8b:72:50:
17:5b:31:8b:24:c9:1c:17:b0:87:34:5b:4d:20:85:4f:d0:ae:
f3:1a:9e:78:31:8d:47:4a:65:d1:27:f0:5a:1c:03:dc:bf:0c:
6f:24:75:13:54:0b:ed:ed:16:40:1d:12:fe:5a:41:ef:08:d8:
67:16:92:5a:e1:d7:11:68:25:4d:91:a6:3a:81:50:fc:98:a4:
4c:df:2e:b6:15:df:3e:c3:08:6f:1d:40:f1:61:4c:ae:47:15:
72:75:54:92:b8:a7:f1:7e:8f:57:79:e0:a1:d0:3b:f3:04:aa:
10:c7:a4:d2:62:5f:f4:d4:f7:c7:c2:c2:0a:f6:1f:15:7f:47:
39:ea:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 08:49:44 2026 by rpki-client