Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
File: lt2IX_TTiauqvQOlF10JdBrLpg0.mft (raw, json)
Hash identifier: uoxg2qfMyWUTYhrtsvcImICshIeZQeqk7vyQNZS0iJk=
Subject key identifier: FC:04:A3:57:85:7F:D7:A8:6D:48:91:FD:2E:E0:5C:66:7B:7B:82:51
Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
Certificate issuer: /CN=96dd885ff4d389abaabd03a5175d09741acba60d
Certificate serial: 019DDE43DFADA2D9FC775A519BBC69B884E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
Manifest number: 033D
Signing time: Thu 30 Apr 2026 12:01:23 +0000
Manifest this update: Thu 30 Apr 2026 12:01:23 +0000
Manifest next update: Fri 01 May 2026 12:01:23 +0000
Files and hashes: 1: 6kMdvrwU2pCwvdQx9e2jtc6HHm0.roa (hash: qE4aJsmYODQ0nzOFNhlgM1kvgijeIJ6BoQLe8YycTn8=)
2: lt2IX_TTiauqvQOlF10JdBrLpg0.crl (hash: UVdBgnkIRi9OVJd9kJJ17Aw3zEyqb56oi6aARxNtwk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:43:df:ad:a2:d9:fc:77:5a:51:9b:bc:69:b8:84:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d
Validity
Not Before: Apr 30 12:01:23 2026 GMT
Not After : May 1 12:01:23 2026 GMT
Subject: CN=fc04a357857fd7a86d4891fd2ee05c667b7b8251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:af:27:f2:ed:e6:8e:72:5e:16:fd:ca:68:
ab:dd:1d:23:3b:47:e3:49:7c:97:0d:9e:56:78:34:
55:45:20:a2:aa:c6:c9:1a:66:d2:4b:f6:14:23:b5:
e3:fe:d9:dc:55:3d:35:a9:90:63:1b:36:0f:c8:80:
b9:17:a4:a0:00:1c:4a:08:9f:71:d5:10:d2:81:28:
39:87:74:8e:b1:71:87:71:28:f7:de:d0:ea:17:ac:
a7:90:54:65:3b:89:21:f8:05:e9:10:0d:11:c8:29:
00:f8:ac:a3:61:33:4f:e3:82:69:03:8b:fd:49:98:
1e:ff:21:18:a5:9c:2d:b4:e9:d0:ae:38:73:32:99:
bd:f7:2c:80:4f:5d:db:42:18:6c:6b:27:ab:7c:00:
73:b4:d0:e2:c3:5c:1d:f3:a7:f3:80:4b:7d:a6:5f:
bd:ce:47:45:6e:86:8b:9a:d2:69:e3:a7:23:26:5f:
46:ae:48:2e:7c:58:d9:b7:e1:87:b8:a5:da:52:39:
ce:a5:e2:cf:0a:49:73:e9:49:09:20:60:35:a2:f7:
51:e4:0e:d6:d1:af:6e:55:35:c9:16:0c:19:7d:e2:
35:6a:cb:9c:a8:75:fe:71:66:63:87:eb:89:ef:85:
25:a6:22:a3:cb:9b:8f:36:bd:da:bc:29:84:bf:8c:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:04:A3:57:85:7F:D7:A8:6D:48:91:FD:2E:E0:5C:66:7B:7B:82:51
X509v3 Authority Key Identifier:
keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f4:fc:25:9c:3a:81:45:1f:da:63:4a:b6:a5:dc:6b:4e:96:
d5:dc:62:a6:4a:c8:67:81:6a:16:b0:a9:5d:09:4b:c7:24:22:
af:d0:10:03:07:15:33:0c:1b:c7:95:e3:23:2c:f1:39:f5:ee:
fc:78:e4:2f:b3:04:71:1c:15:f1:a0:3b:78:85:5a:8d:cc:3b:
7e:e1:55:a2:d5:2b:d8:3f:c7:18:f0:2f:6a:bd:e3:96:fd:a4:
f1:af:7f:57:3d:9d:9a:78:5c:85:fc:97:9e:fa:eb:99:8b:58:
2b:ed:c5:d4:ae:61:84:76:c1:a3:34:8c:99:34:7a:11:e7:13:
1b:e1:ea:79:2f:a7:e8:b8:57:ea:a5:9c:ce:66:9c:92:86:e7:
bc:e2:d1:a7:d8:06:c6:f3:42:41:6d:0d:43:eb:e1:a2:b1:e5:
08:4a:88:88:1c:f7:04:2d:d4:db:eb:20:f3:5b:55:3c:78:67:
30:e7:1f:08:a7:c2:57:47:5e:0c:26:f8:84:d7:fa:a8:d7:e3:
75:5e:43:4c:dc:74:b5:f5:f8:ef:b7:a9:a1:e8:dd:e5:be:ee:
b0:16:9b:12:55:b4:6a:f1:7e:9a:52:24:da:7a:80:9c:04:ac:
e5:c0:77:87:b8:10:ef:38:09:b3:e7:c8:84:3c:b0:d0:7a:5d:
13:fb:7d:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3eQ9+totn8d1pRm7xpuIThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZGQ4ODVmZjRkMzg5YWJhYWJkMDNhNTE3NWQwOTc0MWFj
YmE2MGQwHhcNMjYwNDMwMTIwMTIzWhcNMjYwNTAxMTIwMTIzWjAzMTEwLwYDVQQD
EyhmYzA0YTM1Nzg1N2ZkN2E4NmQ0ODkxZmQyZWUwNWM2NjdiN2I4MjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxCvJ/Lt5o5yXhb9ymir3R0jO0fj
SXyXDZ5WeDRVRSCiqsbJGmbSS/YUI7Xj/tncVT01qZBjGzYPyIC5F6SgABxKCJ9x
1RDSgSg5h3SOsXGHcSj33tDqF6ynkFRlO4kh+AXpEA0RyCkA+KyjYTNP44JpA4v9
SZge/yEYpZwttOnQrjhzMpm99yyAT13bQhhsayerfABztNDiw1wd86fzgEt9pl+9
zkdFboaLmtJp46cjJl9GrkgufFjZt+GHuKXaUjnOpeLPCklz6UkJIGA1ovdR5A7W
0a9uVTXJFgwZfeI1asucqHX+cWZjh+uJ74UlpiKjy5uPNr3avCmEv4wenwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwEo1eFf9eobUiR/S7gXGZ7e4JRMB8GA1UdIwQY
MBaAFJbdiF/004mrqr0DpRddCXQay6YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8wYzUyNjUtMzJhZi00OGYyLTkwNmQt
YjY1MmM4NTU1NmJiLzEvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8wYzUyNjUtMzJhZi00OGYyLTkwNmQtYjY1MmM4NTU1NmJi
LzEvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/T8JZw6
gUUf2mNKtqXca06W1dxipkrIZ4FqFrCpXQlLxyQir9AQAwcVMwwbx5XjIyzxOfXu
/HjkL7MEcRwV8aA7eIVajcw7fuFVotUr2D/HGPAvar3jlv2k8a9/Vz2dmnhchfyX
nvrrmYtYK+3F1K5hhHbBozSMmTR6EecTG+HqeS+n6LhX6qWczmackobnvOLRp9gG
xvNCQW0NQ+vhorHlCEqIiBz3BC3U2+sg81tVPHhnMOcfCKfCV0deDCb4hNf6qNfj
dV5DTNx0tfX477epoejd5b7usBabElW0avF+mlIk2nqAnASs5cB3h7gQ7zgJs+fI
hDyw0HpdE/t9vg==
-----END CERTIFICATE-----
Generated at Thu Apr 30 17:29:23 2026 by rpki-client