Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
File: lt2IX_TTiauqvQOlF10JdBrLpg0.mft (raw, json)
Hash identifier: oLddtL0SZmw+ylHaxe6CAVyldijWl1hgbupIdZv+SwI=
Subject key identifier: CE:70:40:A7:95:F1:4F:45:F2:DD:7E:B7:9D:56:39:02:9C:3E:05:9B
Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
Certificate issuer: /CN=96dd885ff4d389abaabd03a5175d09741acba60d
Certificate serial: 019CECDD37EEAC1C29D5D1E82A51F49B9AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
Manifest number: 02C0
Signing time: Sat 14 Mar 2026 15:00:46 +0000
Manifest this update: Sat 14 Mar 2026 15:00:46 +0000
Manifest next update: Sun 15 Mar 2026 15:00:46 +0000
Files and hashes: 1: 6kMdvrwU2pCwvdQx9e2jtc6HHm0.roa (hash: qE4aJsmYODQ0nzOFNhlgM1kvgijeIJ6BoQLe8YycTn8=)
2: lt2IX_TTiauqvQOlF10JdBrLpg0.crl (hash: OXhOsrBCpwZ5Fjq4Dc7JlPuoMZCc7tLZOEfvBIV2140=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:dd:37:ee:ac:1c:29:d5:d1:e8:2a:51:f4:9b:9a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d
Validity
Not Before: Mar 14 15:00:46 2026 GMT
Not After : Mar 15 15:00:46 2026 GMT
Subject: CN=ce7040a795f14f45f2dd7eb79d5639029c3e059b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:0a:2d:3f:a4:04:fa:58:6f:8a:51:0e:6f:
40:1e:49:99:fb:ba:48:21:65:8c:dd:32:af:b6:cf:
a5:2c:db:9e:48:5a:3b:1f:da:a2:8c:1b:01:bb:46:
ab:0e:10:8e:4a:ee:34:ed:5e:9c:af:ae:6e:74:d8:
d8:df:53:2f:3a:f0:9d:69:e5:44:a4:72:c1:26:ce:
fa:8a:e6:a9:48:89:11:5d:78:af:66:e3:77:b7:4f:
82:8d:42:0f:5a:7c:0d:8c:c2:11:9b:ea:3d:56:56:
3e:0d:79:95:17:c7:8b:3d:4c:98:f3:91:ce:97:ca:
ed:d0:78:08:88:bb:ec:ba:c3:43:18:6c:0d:23:e4:
f3:90:2d:79:ca:b9:c8:53:ff:be:43:1b:fa:9c:bf:
60:a0:24:2b:60:5c:25:f7:6c:41:3d:b4:ac:54:e0:
e0:c4:5f:d9:12:d2:b2:c9:91:5a:00:6f:cc:5f:b2:
e9:a9:e9:37:d0:b6:6f:2d:b3:10:00:9f:c0:c8:45:
f7:eb:47:7a:64:8f:6f:b5:fe:bd:16:f5:43:ff:4f:
9b:81:ac:6a:f3:13:8c:74:43:53:8d:a0:08:2a:9e:
b2:b0:8d:42:60:56:3f:9a:ff:25:27:4d:89:08:0a:
00:12:86:eb:b3:90:e4:46:b6:19:1d:d8:2a:13:31:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:70:40:A7:95:F1:4F:45:F2:DD:7E:B7:9D:56:39:02:9C:3E:05:9B
X509v3 Authority Key Identifier:
keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:52:d9:d8:a9:da:fd:67:b7:d4:05:19:21:55:da:2c:b4:57:
06:36:f1:13:8d:f7:80:0c:02:a3:bb:e6:b9:b0:01:dd:da:71:
84:a6:ba:b9:f9:5a:bf:1b:a8:b3:f7:b8:e6:a4:b4:76:76:c9:
fc:06:36:cc:ce:8a:d1:8a:aa:85:7b:96:40:f1:65:8b:8c:54:
e1:cb:ce:26:e4:c7:37:44:c5:d2:e9:29:e2:30:73:c6:70:0e:
19:69:70:eb:ce:1c:e2:5f:87:cc:99:7a:79:05:49:7d:ab:16:
13:17:7e:d9:9b:b4:bb:1b:6a:d6:04:b9:37:54:34:4b:ce:9f:
1b:0c:4a:26:c7:64:4b:08:c1:cf:5a:24:a8:9f:d2:88:7d:c6:
db:58:04:57:da:f6:76:88:ca:91:9d:40:71:0c:14:b7:f4:1c:
60:b5:c7:6e:b6:c0:15:2d:37:41:de:96:ae:a6:f6:86:3c:bd:
75:c8:0e:56:f1:9d:07:8a:4b:09:e4:85:98:ee:04:4f:94:e1:
0a:5f:16:03:77:99:f1:97:95:36:37:cc:b2:68:74:8f:9d:7c:
17:8d:f8:a8:18:6e:8a:98:a8:e9:0e:f5:3a:46:b3:ca:86:22:
65:f5:60:3d:03:cf:f9:59:ca:f8:e0:1f:f8:96:99:e0:c7:28:
d7:68:3a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:50:20 2026 by rpki-client