Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
File: Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft (raw, json)
Hash identifier: 8RLLGtejmWlv1hYZXEWh8Ep9EM/TwPQNtvartv0jpnU=
Subject key identifier: 71:F9:1C:95:24:39:7D:0E:24:79:5C:07:43:7F:3D:69:A7:03:BD:71
Authority key identifier: 2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
Certificate issuer: /CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Certificate serial: 019F3BCF749DAA917111621AFFC97361E102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
Manifest number: 09C7
Signing time: Tue 07 Jul 2026 09:01:19 +0000
Manifest this update: Tue 07 Jul 2026 09:01:19 +0000
Manifest next update: Wed 08 Jul 2026 09:01:19 +0000
Files and hashes: 1: Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl (hash: LuAY0gCbN+7zirB13Pjzly1aI4xzCHGoutwCWGcPW5w=)
2: RCbtWtfNbNugIvs-Dmql2deK4Ko.roa (hash: Rgh4Ci+jMhlRgR9C2JdR2931yRKR2EjS9oS9ki8UOrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:cf:74:9d:aa:91:71:11:62:1a:ff:c9:73:61:e1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Validity
Not Before: Jul 7 09:01:19 2026 GMT
Not After : Jul 8 09:01:19 2026 GMT
Subject: CN=71f91c9524397d0e24795c07437f3d69a703bd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ce:68:87:d6:38:91:cc:80:6d:c9:80:79:af:
08:1f:10:bd:4c:c2:99:c1:b6:14:02:3a:d1:12:38:
8f:20:76:9c:66:36:32:c5:ef:9a:3d:dd:7f:d2:2b:
0d:cf:01:d9:b5:fb:41:fc:30:01:64:b8:2e:d4:d2:
67:96:dc:2e:c9:06:94:7d:cf:d0:51:ed:f7:58:50:
7f:87:05:e4:ab:98:5b:1f:69:b0:39:65:d5:99:03:
41:f0:0c:e9:f3:b4:89:af:79:05:a9:2c:0f:b8:49:
6c:8c:7a:f6:a0:4e:97:af:ab:d1:6d:47:26:9f:3b:
bb:8c:8d:ba:c9:2f:c6:d5:5b:09:92:6e:62:4a:9e:
ab:d8:94:fd:0a:d7:f9:b6:67:37:b9:9e:4c:93:ac:
d5:75:29:23:19:85:59:ee:35:f9:9d:81:9a:75:07:
db:60:fd:a5:71:a0:9d:21:84:49:3c:36:c0:5f:c5:
8d:53:82:1a:c8:7d:58:d7:9c:e9:24:34:60:88:d6:
1e:c9:c2:66:a7:0a:03:4a:01:f0:ef:c9:ef:c8:ca:
47:09:62:db:c9:a6:5f:1c:16:75:c5:4d:34:c3:82:
9b:dd:2d:4e:5c:7f:da:6a:57:e0:38:fa:fd:f4:ec:
d9:18:96:3f:d5:ff:d8:6b:59:0a:13:8f:85:35:9b:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F9:1C:95:24:39:7D:0E:24:79:5C:07:43:7F:3D:69:A7:03:BD:71
X509v3 Authority Key Identifier:
keyid:2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f8:c3:32:7f:74:a4:c8:04:93:0d:b2:23:63:8b:6b:c2:57:
69:01:59:11:a0:a7:31:51:c9:c4:c5:85:5c:61:d8:c7:45:c8:
1c:10:d2:52:2c:97:3c:85:6a:20:9b:d5:cf:2a:25:05:84:c2:
da:52:d0:5f:f5:d7:c2:44:f3:00:49:93:7b:ec:53:44:35:a1:
a7:98:fd:d0:ca:5b:6e:84:4f:03:06:ab:ed:83:58:d1:c2:21:
23:25:f2:ac:f4:df:49:4b:e7:0f:c3:ee:9b:8a:77:c5:3b:5f:
cc:b3:7b:01:7d:d0:dd:7c:02:2f:cf:cb:54:bd:27:a5:1f:63:
94:b3:53:82:08:44:1d:de:7d:2c:b2:fc:bb:1e:79:cc:12:76:
cd:73:6e:f9:fb:a5:26:49:16:11:d4:00:bc:16:a6:4b:ae:f3:
bd:41:34:70:7a:23:9f:10:b6:fc:e8:81:66:e5:06:61:d6:2a:
82:ef:5e:d5:ac:44:e5:41:43:6c:16:63:9f:fb:2c:65:c0:0a:
b6:4d:71:09:c1:06:a3:52:7f:01:19:8f:b4:22:2a:28:15:ba:
a3:2f:a3:92:3d:6f:d2:37:05:ba:c7:68:28:f2:93:0f:a0:15:
4d:87:97:b9:bd:fd:b8:6d:c4:95:cd:97:62:dc:31:f7:c5:e9:
72:79:8a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 14:42:58 2026 by rpki-client