Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
File: lt2IX_TTiauqvQOlF10JdBrLpg0.mft (raw, json)
Hash identifier: A+bqWHCzqU3pC3+NWEm+xaZQkNKyYQ2Ial98avDH7c4=
Subject key identifier: 3C:4D:EE:02:65:7B:47:16:0F:85:DD:58:B6:22:D0:EF:B0:6D:88:E4
Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
Certificate issuer: /CN=96dd885ff4d389abaabd03a5175d09741acba60d
Certificate serial: 019FAFADB7DAD0760139D513845BB28990D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
Manifest number: 042E
Signing time: Wed 29 Jul 2026 21:00:25 +0000
Manifest this update: Wed 29 Jul 2026 21:00:25 +0000
Manifest next update: Thu 30 Jul 2026 21:00:25 +0000
Files and hashes: 1: 6kMdvrwU2pCwvdQx9e2jtc6HHm0.roa (hash: qE4aJsmYODQ0nzOFNhlgM1kvgijeIJ6BoQLe8YycTn8=)
2: lt2IX_TTiauqvQOlF10JdBrLpg0.crl (hash: n4HhQgJm6huGcWIOQ6g0LOnkaY93Dz81ZG7Gqoht9yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:ad:b7:da:d0:76:01:39:d5:13:84:5b:b2:89:90:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d
Validity
Not Before: Jul 29 21:00:25 2026 GMT
Not After : Jul 30 21:00:25 2026 GMT
Subject: CN=3c4dee02657b47160f85dd58b622d0efb06d88e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f5:ac:d9:81:67:c5:c7:ff:39:70:92:d0:75:
68:e7:46:82:1c:65:4f:c8:29:bb:23:b4:37:0d:a2:
95:00:61:65:e8:62:3d:c8:6c:0a:35:00:f7:d5:fb:
a6:2a:ba:15:69:b8:32:f3:dc:a7:28:f4:d9:14:b6:
53:61:03:54:b5:6a:f2:fd:98:69:05:75:9a:5a:f4:
cc:c7:9a:c7:b2:cf:79:f8:41:de:67:75:98:9a:7c:
94:93:d3:9c:67:e1:13:e5:af:db:d7:ba:84:a7:5a:
ed:0d:9a:0b:5c:fe:2c:b5:bc:05:a1:fc:e5:ab:26:
c1:0f:93:44:33:14:b3:81:79:e7:52:c0:d2:2b:a3:
8f:c2:e7:25:86:21:1a:3a:8d:4e:fe:e5:cd:0b:0c:
02:a2:39:0b:5a:de:75:50:76:78:82:cb:1c:69:9f:
8a:3c:73:e2:6c:fe:45:6b:a8:9f:22:e4:7c:bd:c7:
98:33:20:18:a0:45:fc:19:67:06:f8:cb:c3:9a:3d:
a4:36:4d:ec:fc:ee:9c:1c:6c:7e:52:46:6a:66:bb:
e4:68:fa:f4:c8:f2:b4:8b:8f:d6:27:0f:c3:cf:13:
af:30:d1:93:24:14:19:ba:fe:1d:dc:89:0d:9f:45:
7c:96:86:3c:f3:fa:95:5a:b2:51:2b:d7:68:3f:f9:
c2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4D:EE:02:65:7B:47:16:0F:85:DD:58:B6:22:D0:EF:B0:6D:88:E4
X509v3 Authority Key Identifier:
keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5f:13:31:0e:71:8d:99:d9:a2:e1:3e:9e:87:62:38:57:ce:
55:fd:d9:b4:ab:a1:e2:a0:33:96:a5:2a:32:5d:8a:90:dc:88:
a0:8b:30:32:46:79:3c:51:08:0c:a0:5d:ff:e6:13:d0:36:bb:
55:41:37:40:21:c0:38:89:19:21:63:2c:c5:0f:16:3f:96:25:
42:b0:d7:fb:38:5c:d1:dc:92:6a:10:73:21:bf:ea:2b:fe:3f:
a1:8f:b3:c7:be:8b:5f:df:04:19:7b:0d:b7:a1:0b:35:89:46:
5d:e9:aa:67:82:47:dc:5d:7e:5f:d0:a0:2e:ed:a6:cf:9d:de:
c2:8f:0f:ed:b3:1a:2a:4c:a3:d8:2b:3a:4d:57:86:1c:84:53:
7a:84:90:41:4a:f2:f3:a6:a2:c3:e6:7a:52:a7:52:4b:1e:7c:
58:77:d4:33:a0:c5:cf:53:4b:a8:6b:c1:c5:cf:89:b6:1e:c1:
18:d3:22:d1:17:7f:4f:a0:fd:59:94:0c:65:e7:ca:8f:bd:8e:
82:5e:3a:a4:7f:c5:84:2b:cb:22:cb:0c:b5:93:6a:40:a6:fa:
88:25:52:c8:19:f2:5f:3f:1a:86:70:c6:77:c0:c1:4c:66:f3:
d2:1b:a9:0d:27:91:fd:d8:8a:a7:ac:80:98:bd:60:bd:17:3c:
10:df:5c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 02:48:59 2026 by rpki-client