Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
File: LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft (raw, json)
Hash identifier: a390EZnjSK9PPIVXCFyCPBJoX0YjRWXYlctz41ePlKs=
Subject key identifier: 53:07:EA:CA:F2:7F:6D:C8:62:E0:1D:FF:D2:17:AD:EF:1B:F9:07:06
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 019CC9081683573BEC4F3609E0763FA449C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
Manifest number: 018B
Signing time: Sat 07 Mar 2026 16:01:16 +0000
Manifest this update: Sat 07 Mar 2026 16:01:16 +0000
Manifest next update: Sun 08 Mar 2026 16:01:16 +0000
Files and hashes: 1: DQVqjzC5rdONHq62ZKGqNPJyrRw.roa (hash: dDYajOCYrao79EK9Kj5vMqOndXhk7A3V1BOKDwNdvCc=)
2: LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl (hash: GkNcPg5DAjBuP8WZzX+4eZ5CXRfF07rNVZYACIT8i74=)
3: NE7mP6LXofTtetMrz0bZ4gVjQZQ.roa (hash: OKq/sE5vI4Tp87JPYnyleJOP67qF4AH8+fsvJkq27uQ=)
4: fE9cNRDKHoumM1hRkT3ZAa2rwPs.roa (hash: Zy3HM17iHdXxNk/UVoAmsPQwfcZdi0N5Gh6yWp44W4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:08:16:83:57:3b:ec:4f:36:09:e0:76:3f:a4:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Mar 7 16:01:16 2026 GMT
Not After : Mar 8 16:01:16 2026 GMT
Subject: CN=5307eacaf27f6dc862e01dffd217adef1bf90706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:23:2b:e6:b0:94:30:30:5a:74:9c:b9:e0:
04:60:bb:41:e1:4c:7b:48:b9:3a:e6:07:e4:b6:97:
cd:41:17:65:b7:d0:07:7d:a5:f8:54:29:6e:78:3e:
cf:14:1c:da:b6:fe:5e:80:da:31:30:c9:24:20:bc:
eb:ec:da:b3:0d:1d:40:b1:50:4b:cb:65:1e:19:89:
65:87:b9:6e:67:e5:93:b4:9d:23:67:7c:98:bf:19:
9c:f3:2c:69:ae:2e:1d:e3:c4:e4:06:99:c5:d8:05:
a6:de:50:3e:ad:44:a2:75:64:13:9d:4c:26:7d:5d:
a2:d7:13:16:ba:db:b3:20:a0:34:c8:e7:18:d8:c9:
72:5b:4a:14:02:54:6f:b2:56:fc:89:a8:e2:44:8a:
cb:b9:6b:43:03:58:03:6b:82:69:f4:2e:30:f8:3b:
0b:e4:c9:56:4d:cf:a0:ab:f2:45:fc:84:8f:00:f5:
ee:62:23:a3:67:31:a4:ea:4d:ee:90:fd:82:b0:30:
48:59:29:1d:40:f4:35:4e:60:48:c3:ba:8a:26:57:
76:e7:39:95:ba:80:fd:27:32:43:0b:af:6e:2e:37:
ec:f7:bb:0b:bf:f5:fb:27:17:e1:14:ab:d9:56:f7:
91:ac:fa:c1:08:73:f4:06:ce:b7:9c:e7:b7:89:e4:
5b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:07:EA:CA:F2:7F:6D:C8:62:E0:1D:FF:D2:17:AD:EF:1B:F9:07:06
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:21:1f:80:44:12:9b:25:12:4d:80:4a:24:3c:30:47:65:01:
5e:0e:ac:05:d5:67:66:b9:d4:62:d9:f8:b6:69:d2:57:05:c7:
7e:4e:07:cc:1b:7d:5f:43:11:32:5a:6e:34:11:af:87:af:c9:
17:c1:fe:a3:42:fa:26:c0:c8:8b:65:38:db:e6:83:ed:18:bb:
08:5b:0f:15:2d:55:54:a8:47:24:53:be:f9:06:9a:db:c3:05:
2e:0b:20:7e:4d:95:20:77:76:7e:8f:0b:56:5a:18:51:9e:c8:
c3:30:44:6f:05:8c:8d:e1:2f:64:60:3a:13:02:94:e3:1c:8f:
94:76:e8:30:65:1d:f1:fb:41:1c:64:14:c5:03:dc:f1:74:cc:
1e:38:99:10:61:b3:ae:3b:17:98:0c:ca:3e:7d:1f:ba:96:12:
74:8f:9d:9f:f8:30:88:78:3a:24:88:03:11:7e:b5:2d:08:2e:
de:a3:ee:0e:d3:cc:42:87:2c:29:65:ef:1b:6a:6b:a1:92:87:
e9:80:92:87:df:6c:a8:50:91:43:c7:a2:36:dd:24:f3:e9:c3:
87:10:4f:76:be:54:c6:e9:2c:e1:8f:5e:06:a2:98:6a:14:5e:
d1:5d:56:ce:66:b1:66:3a:db:01:e4:df:e3:80:e1:04:a2:17:
44:9e:b3:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzJCBaDVzvsTzYJ4HY/pEnAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkM2MzOTg3ZTdjMzRiMzY2YWEwZjA5YzQwZWE0YzgwYmZl
ZDBlMDEwHhcNMjYwMzA3MTYwMTE2WhcNMjYwMzA4MTYwMTE2WjAzMTEwLwYDVQQD
Eyg1MzA3ZWFjYWYyN2Y2ZGM4NjJlMDFkZmZkMjE3YWRlZjFiZjkwNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYAjK+awlDAwWnScueAEYLtB4Ux7
SLk65gfktpfNQRdlt9AHfaX4VClueD7PFBzatv5egNoxMMkkILzr7NqzDR1AsVBL
y2UeGYllh7luZ+WTtJ0jZ3yYvxmc8yxpri4d48TkBpnF2AWm3lA+rUSidWQTnUwm
fV2i1xMWutuzIKA0yOcY2MlyW0oUAlRvslb8iajiRIrLuWtDA1gDa4Jp9C4w+DsL
5MlWTc+gq/JF/ISPAPXuYiOjZzGk6k3ukP2CsDBIWSkdQPQ1TmBIw7qKJld25zmV
uoD9JzJDC69uLjfs97sLv/X7JxfhFKvZVveRrPrBCHP0Bs63nOe3ieRblQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMH6sryf23IYuAd/9IXre8b+QcGMB8GA1UdIwQY
MBaAFC08OYfnw0s2aqDwnEDqTIC/7Q4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFR3NWgtZkRTelpxb1BDY1FPcE1nTF90RGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNjhhNmMtOTIxYi00ZTBiLWJhN2Ut
M2E2ZGU5OWVkZTQ3LzEvTFR3NWgtZkRTelpxb1BDY1FPcE1nTF90RGdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wNjhhNmMtOTIxYi00ZTBiLWJhN2UtM2E2ZGU5OWVkZTQ3
LzEvTFR3NWgtZkRTelpxb1BDY1FPcE1nTF90RGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwCEfgEQS
myUSTYBKJDwwR2UBXg6sBdVnZrnUYtn4tmnSVwXHfk4HzBt9X0MRMlpuNBGvh6/J
F8H+o0L6JsDIi2U42+aD7Ri7CFsPFS1VVKhHJFO++Qaa28MFLgsgfk2VIHd2fo8L
VloYUZ7IwzBEbwWMjeEvZGA6EwKU4xyPlHboMGUd8ftBHGQUxQPc8XTMHjiZEGGz
rjsXmAzKPn0fupYSdI+dn/gwiHg6JIgDEX61LQgu3qPuDtPMQocsKWXvG2proZKH
6YCSh99sqFCRQ8eiNt0k8+nDhxBPdr5Uxuks4Y9eBqKYahRe0V1WzmaxZjrbAeTf
44DhBKIXRJ6zGQ==
-----END CERTIFICATE-----
Generated at Sun Mar 8 02:09:08 2026 by rpki-client