Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
File: lt2IX_TTiauqvQOlF10JdBrLpg0.mft (raw, json)
Hash identifier: GI62/k1yzi3VGlKadWYGAxvDoR7JBdRbmeiCyckMjIA=
Subject key identifier: 15:B9:22:2F:87:0F:53:46:E0:97:77:24:4C:6F:A0:78:95:B2:A5:43
Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
Certificate issuer: /CN=96dd885ff4d389abaabd03a5175d09741acba60d
Certificate serial: 01A12278591868D6FE25664606472A77B5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
Manifest number: 04EE
Signing time: Fri 09 Oct 2026 21:01:14 +0000
Manifest this update: Fri 09 Oct 2026 21:01:14 +0000
Manifest next update: Sat 10 Oct 2026 21:01:14 +0000
Files and hashes: 1: 6kMdvrwU2pCwvdQx9e2jtc6HHm0.roa (hash: qE4aJsmYODQ0nzOFNhlgM1kvgijeIJ6BoQLe8YycTn8=)
2: lt2IX_TTiauqvQOlF10JdBrLpg0.crl (hash: /kn/rLRCAJR/hyryyhzXNuHNA2/2umqQUhybB23Zr+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:78:59:18:68:d6:fe:25:66:46:06:47:2a:77:b5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d
Validity
Not Before: Oct 9 21:01:14 2026 GMT
Not After : Oct 10 21:01:14 2026 GMT
Subject: CN=15b9222f870f5346e09777244c6fa07895b2a543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a5:63:34:1e:fd:9d:aa:16:bb:2b:39:54:ad:
f0:e6:aa:59:f7:b8:0b:9d:af:63:73:c0:c3:65:10:
e1:86:e6:11:bb:d3:5f:88:90:9f:87:68:63:57:39:
cb:a8:6e:ce:34:c2:07:24:bb:d4:12:c2:7d:c8:b1:
73:0d:9f:db:d4:55:17:ad:87:17:48:bb:85:bf:58:
77:dc:bf:db:92:53:30:9e:13:cd:e5:c3:fd:e4:13:
73:0e:22:3d:fe:ac:d0:11:6a:8d:8b:18:13:6f:c3:
ff:4c:58:b7:0c:03:03:87:5e:d6:d5:f2:2b:7d:4c:
e2:01:b4:49:1c:36:a0:3b:a2:0c:c3:f0:05:96:e1:
26:1a:15:e7:f3:8f:b0:86:cc:52:bb:12:96:08:3b:
70:e8:52:b2:b4:c4:0f:9b:e3:d5:fb:b1:87:75:7a:
56:bf:d7:e0:33:df:39:e6:a6:d6:42:a5:34:2d:81:
23:27:17:21:be:b5:6c:83:cf:12:71:86:99:11:5b:
59:32:2b:85:ca:c8:4e:48:8e:a3:be:72:d0:17:67:
35:49:66:ec:d0:30:67:a1:bb:02:d4:4d:59:12:3d:
18:32:7e:c5:c9:91:f5:a9:6a:9c:26:da:a7:34:78:
7a:ec:8c:de:93:7e:79:bc:39:c2:3c:60:1b:34:fc:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B9:22:2F:87:0F:53:46:E0:97:77:24:4C:6F:A0:78:95:B2:A5:43
X509v3 Authority Key Identifier:
keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:89:39:4d:b3:72:2f:9f:9e:e2:5f:5d:1a:5e:9a:4d:97:4b:
b4:d7:c4:96:1f:d1:3e:91:2a:a8:fa:49:5f:d3:e9:1e:be:50:
2e:32:63:ec:98:29:bc:27:92:55:c9:ef:93:24:c0:87:b2:ab:
83:e5:67:e5:e1:35:e6:80:fe:3e:67:4d:b5:0a:e2:c6:9e:14:
1b:f7:c7:72:63:06:74:ae:aa:a8:ec:43:ce:3a:aa:6a:6b:55:
80:c1:29:4d:61:72:5b:62:94:2f:9c:75:be:cb:87:4b:1e:1f:
8d:67:46:30:3c:b0:ca:2c:7d:70:ee:60:58:51:35:a3:51:86:
0a:f6:5d:94:19:81:ec:2b:c9:6c:f0:ff:da:a5:e6:06:8b:ce:
c3:a4:38:9c:99:d8:f2:68:42:69:03:75:39:51:af:a8:69:ff:
75:26:26:16:bb:de:bd:4f:34:81:5d:51:2e:de:17:f3:5e:25:
8f:fc:30:6d:cb:81:f9:1c:98:88:3a:ba:6f:d2:f9:17:5f:fd:
f7:ed:19:5f:d2:59:9c:e8:c8:ca:24:45:58:96:d0:38:11:b5:
1b:63:05:a6:fe:ef:b2:9a:6d:54:83:36:f7:c2:a9:17:96:e4:
ad:3b:44:4b:05:78:6a:52:73:04:69:f7:c6:46:de:07:18:07:
d0:66:77:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:15:34 2026 by rpki-client