Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
File: LTOrAnhiOJzMHx_IsKVkpuvXy40.mft (raw, json)
Hash identifier: JOTloWPdsc99h73KBmrx8yaJYGQTCY/V+h9muNvpJ8Q=
Subject key identifier: 0F:72:25:4A:51:B9:06:91:32:C5:D1:E3:99:E0:EA:5D:57:17:0E:D8
Authority key identifier: 2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
Certificate issuer: /CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Certificate serial: 019F9FCD900FA69B6FF3F8098C4A7A7D8995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
Manifest number: 0C66
Signing time: Sun 26 Jul 2026 19:01:16 +0000
Manifest this update: Sun 26 Jul 2026 19:01:16 +0000
Manifest next update: Mon 27 Jul 2026 19:01:16 +0000
Files and hashes: 1: LTOrAnhiOJzMHx_IsKVkpuvXy40.crl (hash: vQG0uRztUley6ysBHk3k93IBNQI+s9SPtE11EGlT72w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:90:0f:a6:9b:6f:f3:f8:09:8c:4a:7a:7d:89:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Validity
Not Before: Jul 26 19:01:16 2026 GMT
Not After : Jul 27 19:01:16 2026 GMT
Subject: CN=0f72254a51b9069132c5d1e399e0ea5d57170ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f6:80:39:8c:1e:1d:75:32:e5:5e:11:60:de:
69:93:fd:65:c1:f2:ea:31:e4:db:46:06:3e:85:cd:
a9:3f:95:2a:4f:c2:52:37:38:3b:c7:01:1c:61:26:
fe:9a:b2:3e:6a:77:a2:67:11:77:99:ba:21:3f:70:
ff:2a:da:c6:cc:78:b1:0e:3c:a1:3b:ac:1b:45:fa:
01:2a:6b:5f:e6:6e:f4:b9:7f:55:5e:79:89:42:8f:
f5:68:94:8a:4a:a9:3f:e9:c2:ad:8a:68:53:35:f8:
68:71:9b:92:26:ff:85:3c:d9:21:69:0b:c0:59:36:
ff:2a:cb:a4:61:f6:b6:89:fa:6d:19:45:56:36:18:
89:06:11:16:ef:e7:cb:12:d5:11:a7:e8:e9:a6:91:
84:76:d7:ce:60:92:8b:a0:33:b6:22:7d:60:2b:80:
50:98:71:c4:ea:e6:b1:a0:c8:54:22:3a:5e:d7:58:
19:d7:49:f7:24:36:6f:52:b2:a6:a4:f0:f3:dc:85:
6d:72:a6:c6:4e:4a:56:d1:e8:ba:a1:5d:ce:0a:eb:
00:c5:16:62:7b:04:69:da:a2:46:7e:3c:ba:a9:b4:
cd:50:01:eb:6d:31:83:5e:e2:ea:6f:54:47:92:c8:
22:1b:c2:13:25:10:1a:73:76:c0:64:ae:fe:b7:37:
d4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:72:25:4A:51:B9:06:91:32:C5:D1:E3:99:E0:EA:5D:57:17:0E:D8
X509v3 Authority Key Identifier:
keyid:2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d7:cd:fe:cd:6e:4e:b6:1f:f0:4a:31:27:bc:25:b2:d2:ca:
0e:83:9b:be:d3:99:ca:c9:ec:6d:5f:48:0b:c6:84:b1:f9:16:
d9:fb:60:71:46:93:38:07:7a:b2:f9:3e:a6:8e:83:5b:5d:c6:
7a:05:1f:bd:4a:f2:dd:d5:c1:e9:8d:b0:4a:18:bb:13:ea:b8:
b8:5f:47:8c:77:35:f4:a9:2f:ee:c3:0f:20:a1:cb:21:c8:2d:
95:79:8e:8f:76:2f:3d:45:77:27:69:ae:27:c1:00:21:7e:b7:
24:43:63:0b:ef:04:b9:7d:a7:0a:6c:e2:08:ad:42:46:b7:8d:
d1:ec:eb:f4:84:dc:4a:26:4a:7c:49:91:58:33:32:55:33:c0:
b1:9c:e4:55:aa:4c:76:1a:5a:50:76:8b:27:66:8a:2a:92:3c:
75:79:79:d9:b3:ea:c9:68:2a:9e:f6:b1:35:67:7b:a1:30:d7:
75:ff:48:17:59:cc:98:90:82:1e:60:80:4b:a7:c2:3f:dc:ee:
48:4a:fa:3e:3a:cb:99:03:d0:da:70:a4:47:b6:d0:21:f3:37:
be:64:60:cb:48:01:56:4d:88:5f:fa:e1:ed:5d:c5:db:bb:19:
2f:c8:a0:17:10:8c:5b:a0:c4:a3:24:8d:37:ed:a3:0d:fc:76:
b5:a0:0b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 22:40:39 2026 by rpki-client