Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
File: LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft (raw, json)
Hash identifier: dk4ewfwHTxCakDebm1Q7baYjAx1jtSHWMfbsfstxsY0=
Subject key identifier: 70:68:F1:38:CB:82:A4:9B:2B:BD:82:21:03:D7:7D:62:37:3D:2B:F1
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 019EB9FDD22A7006F72A22F442B63CDE5912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
Manifest number: 028E
Signing time: Fri 12 Jun 2026 04:01:19 +0000
Manifest this update: Fri 12 Jun 2026 04:01:19 +0000
Manifest next update: Sat 13 Jun 2026 04:01:19 +0000
Files and hashes: 1: Bf-kgPolKWlpqLCjiXuRyWUMvOg.roa (hash: MYsif03ryw6vdmDjCofd2KTIbWmT1q0FEmKDj3mHFcA=)
2: LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl (hash: Ga/pVgBjD1plF0XUVI+congbqqZZlGJdKHKn/fqUAzc=)
3: c4PWOTsWtb2BHJ2drzbMurS1uj4.roa (hash: GfaIz/k9kQAzF2LqeZrCe55euhWttcaoPzS2hsKifpc=)
4: p38nf1_J-hf5pJoRzzg0ttvCGMc.roa (hash: VNYm4Y42SOlQ9dXOHkzUE+m/pzdyaj+7nbqcjEjzt8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:d2:2a:70:06:f7:2a:22:f4:42:b6:3c:de:59:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Jun 12 04:01:19 2026 GMT
Not After : Jun 13 04:01:19 2026 GMT
Subject: CN=7068f138cb82a49b2bbd822103d77d62373d2bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:1a:f3:c2:31:eb:28:68:c8:31:f3:c1:ca:
be:2d:91:dd:ed:a5:a4:2a:f0:9e:20:fe:68:73:32:
5b:c4:fd:81:e4:09:a9:b4:7f:41:4c:8b:9d:4c:da:
a8:f1:1d:88:47:a8:fa:a5:7b:19:7e:32:f2:9b:7d:
b4:f8:92:52:c6:5b:90:d2:a4:08:1f:78:a3:c4:ff:
78:60:5a:ae:32:80:a0:14:a5:5e:38:0f:42:83:cd:
15:49:08:d5:93:75:ad:86:70:cc:75:92:ba:58:42:
d5:ce:7e:1f:6b:cb:eb:ea:d3:bd:e8:8f:64:bf:dc:
b7:0d:d8:3e:c4:fd:d0:40:99:49:4f:cf:9e:3d:90:
ef:db:cb:18:41:26:a3:23:f0:ed:86:0c:33:19:3b:
dd:43:c5:11:7d:d9:2e:b9:45:3c:22:51:91:a9:7a:
e1:13:4b:52:67:0e:88:4c:e7:a7:68:c5:3e:49:62:
80:3b:63:e3:27:a4:a5:fb:af:1e:db:e8:a3:b3:a6:
47:81:ba:25:78:b6:21:3e:3c:57:d5:d1:42:2d:e2:
eb:6c:3b:ee:02:6e:f8:24:4a:40:80:be:71:67:10:
ca:75:8f:4a:a6:36:8e:e0:54:c6:e0:d8:50:6c:00:
24:17:a4:b1:df:c5:a3:4b:f2:a2:08:2a:06:07:c4:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:68:F1:38:CB:82:A4:9B:2B:BD:82:21:03:D7:7D:62:37:3D:2B:F1
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:13:44:38:28:dd:da:13:8a:30:97:1e:be:5d:2e:b0:8e:15:
af:3f:ff:e3:b2:66:44:9c:90:75:8a:c8:cb:8b:06:31:07:72:
f2:b2:3f:3d:ed:2c:dc:16:6a:46:bc:ec:77:d5:1a:47:4b:cb:
ef:2b:36:59:31:cb:6a:ea:1b:af:83:47:ef:a4:98:04:71:d1:
a1:99:6b:70:dd:99:f4:52:be:43:63:01:0d:25:24:8e:9a:60:
57:bc:e1:e2:bc:e8:54:62:f9:55:a4:24:b0:19:7c:a7:ca:6f:
7f:60:d3:a2:c7:1f:fc:69:0b:b5:7c:0c:9b:2f:22:23:7a:99:
1b:6e:0e:76:05:43:45:17:f0:55:20:38:66:1c:ae:60:83:9b:
27:58:85:3f:9a:79:83:37:a3:b3:1a:5f:43:57:fc:76:c0:89:
73:57:c4:98:fd:8b:7d:f9:80:83:22:0b:94:89:9e:75:30:50:
28:bf:0d:cc:79:3e:88:80:29:53:f4:1f:2c:ba:42:ec:a2:3b:
2d:5f:82:d8:32:bc:82:55:22:f5:96:10:2b:cb:16:8b:c3:0d:
1d:80:4c:81:cf:bc:28:a6:ef:7b:fc:dd:37:d0:c8:b7:f8:63:
92:b4:8d:0a:eb:ec:e7:cb:2f:71:63:f5:10:63:6f:ae:5b:9b:
e2:de:df:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:11 2026 by rpki-client