Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
File: LTOrAnhiOJzMHx_IsKVkpuvXy40.mft (raw, json)
Hash identifier: d77X4/3Q1URVdW7lzM65fEV/FZmCUp88DMIwW2TmqmU=
Subject key identifier: A6:DC:85:F5:11:8C:CE:B7:36:1D:2D:59:DE:65:B1:52:BF:C2:D8:13
Authority key identifier: 2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
Certificate issuer: /CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Certificate serial: 01A08B686BC63E34B2B04A8D450F72666B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
Manifest number: 0CE0
Signing time: Thu 10 Sep 2026 13:01:11 +0000
Manifest this update: Thu 10 Sep 2026 13:01:11 +0000
Manifest next update: Fri 11 Sep 2026 13:01:11 +0000
Files and hashes: 1: LTOrAnhiOJzMHx_IsKVkpuvXy40.crl (hash: ph5GeOoQvcdlIGZa/dTTe/SHBYaezYCSWS0OUzq1jEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:6b:c6:3e:34:b2:b0:4a:8d:45:0f:72:66:6b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Validity
Not Before: Sep 10 13:01:11 2026 GMT
Not After : Sep 11 13:01:11 2026 GMT
Subject: CN=a6dc85f5118cceb7361d2d59de65b152bfc2d813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:f4:6c:5a:ba:c4:d2:0d:53:84:43:a8:e1:
03:5e:2a:5d:ea:bd:a1:07:c7:35:6e:d4:c0:bb:8e:
ce:d2:9c:a3:fc:60:85:ec:e1:92:f7:ad:34:7a:af:
37:0a:f0:69:11:31:67:0f:e0:b3:08:ef:1e:f7:da:
cf:54:be:2c:c5:53:73:07:98:81:c2:12:8c:6a:a6:
7d:12:d7:fa:b9:2b:ca:fe:4c:17:63:1b:82:fb:5a:
dc:5b:7f:8f:1c:84:bd:20:2b:ef:5c:43:fb:f2:19:
b1:cc:b9:f6:2d:f1:a6:10:b8:1b:c6:14:09:58:a5:
4d:eb:5f:f1:88:41:f3:3f:5b:6c:86:42:d3:ef:e7:
fd:66:62:f6:28:5c:22:3c:2c:27:85:67:ee:0b:24:
b3:14:54:35:08:00:ae:86:f3:2f:40:6a:2a:6c:ac:
d4:bc:3c:b7:ee:8b:b4:0b:9c:94:a4:a4:4c:6b:3e:
b0:04:4a:7b:1e:f5:87:70:c8:77:9a:04:01:4a:de:
5b:83:9e:25:13:74:94:4d:17:f5:8f:61:fa:a0:7a:
22:0b:eb:f7:ba:34:f7:8b:fd:43:55:2d:58:8f:c1:
4e:75:58:75:f3:9e:02:f0:5b:39:17:f8:7a:17:95:
8e:18:1d:90:15:d3:84:85:e3:79:67:9c:34:96:4b:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DC:85:F5:11:8C:CE:B7:36:1D:2D:59:DE:65:B1:52:BF:C2:D8:13
X509v3 Authority Key Identifier:
keyid:2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5d:2f:61:ec:9a:89:6c:b0:03:1c:d9:d2:a2:e2:1a:3e:fc:
ba:79:b7:42:65:c3:5a:79:5a:7f:f9:9c:35:fc:a6:26:e7:63:
ad:e3:bd:74:80:80:dc:85:cd:ff:b7:3a:d9:ec:1a:8d:0c:58:
76:78:ad:42:8d:a1:8c:73:fe:fb:7a:08:ce:2a:4b:a8:67:22:
46:be:47:06:d6:ca:8c:6d:d0:4b:e0:a4:7a:64:b6:86:8f:dc:
33:72:2b:f9:73:37:24:c7:74:4e:f3:e3:74:99:33:b4:09:de:
61:12:6d:03:99:90:06:2d:17:43:88:ce:a2:0d:4a:31:7d:8b:
df:6e:73:06:a4:72:49:47:85:03:ca:2c:49:32:84:07:ba:af:
b2:87:78:7e:fd:89:82:68:53:a1:94:85:53:9f:4f:17:f6:80:
0a:c9:1a:49:b4:4a:4d:cb:1d:0a:fb:df:47:b1:e0:69:85:3c:
e5:19:71:0a:08:84:0e:ec:80:73:f7:71:31:8b:0d:cf:75:85:
50:0b:43:5d:33:e9:b7:2f:15:45:0f:00:df:a4:bc:84:6e:9e:
fa:61:39:56:e1:6c:1d:85:d1:89:8f:be:b6:5c:41:f8:d8:4f:
99:41:64:3f:a8:d3:94:fb:1e:37:2e:f0:74:bf:02:99:cd:ee:
7d:3e:e2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:53:01 2026 by rpki-client