Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
File: ltTArxW-ONL8XjD-NFdHXTS3g5o.mft (raw, json)
Hash identifier: mPfl71XxT2QUsfI329IJGqZ/oYQm782kDKiiWXaZ0pQ=
Subject key identifier: FC:5B:77:14:5A:70:42:FA:18:D7:6C:BD:5F:B4:E2:CD:69:3A:E9:F1
Authority key identifier: 96:D4:C0:AF:15:BE:38:D2:FC:5E:30:FE:34:57:47:5D:34:B7:83:9A
Certificate issuer: /CN=96d4c0af15be38d2fc5e30fe3457475d34b7839a
Certificate serial: 01A1803D9C34F7E5E8E05ACF2456BDB67659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
Manifest number: 1737
Signing time: Wed 28 Oct 2026 02:01:23 +0000
Manifest this update: Wed 28 Oct 2026 02:01:23 +0000
Manifest next update: Thu 29 Oct 2026 02:01:23 +0000
Files and hashes: 1: XBtHtuKci1agMYoAIbxlgLgNorQ.roa (hash: K/XN2YjLK2jmisrBtvQv+NBYLEC9Bay9uqdYWiM4dHY=)
2: ltTArxW-ONL8XjD-NFdHXTS3g5o.crl (hash: pGcM17zEgzZrNjzopXRK/DF2xfTkcC3Aknb0js7rLsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:9c:34:f7:e5:e8:e0:5a:cf:24:56:bd:b6:76:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d4c0af15be38d2fc5e30fe3457475d34b7839a
Validity
Not Before: Oct 28 02:01:23 2026 GMT
Not After : Oct 29 02:01:23 2026 GMT
Subject: CN=fc5b77145a7042fa18d76cbd5fb4e2cd693ae9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:fd:1d:a8:ca:41:f4:27:d6:d4:86:dc:e3:
3e:bc:e9:ba:26:98:e6:24:82:55:78:97:19:02:4a:
d8:7c:73:79:90:c9:54:38:6e:31:2b:06:61:b5:e6:
94:24:1f:5a:11:16:97:c3:9f:0a:35:76:c7:27:9c:
62:7f:7b:a9:21:21:93:48:e2:8e:43:d1:1b:22:1a:
2a:0d:e8:57:35:3f:6f:6c:39:3c:be:b0:ce:8a:e9:
8f:e9:6c:54:94:e3:ba:fc:3e:1e:66:78:50:7b:0f:
5a:f6:1c:3a:95:62:af:ec:35:08:4f:21:cd:e9:e0:
d8:df:d7:9d:9e:a5:a1:ee:49:96:97:f7:74:d0:71:
a1:82:af:ff:c4:ac:dd:b5:7a:e4:db:a6:0d:2b:d0:
a5:a5:e2:8b:b3:b2:5f:49:87:c1:03:4d:4b:25:74:
6a:98:9e:e3:9c:53:aa:e7:d2:11:d7:5f:7c:88:a4:
76:32:63:9b:36:d6:cf:c8:41:b1:6f:7c:55:6b:66:
5d:f6:b2:d8:31:db:a5:0d:72:d6:d0:10:72:94:d8:
b5:1b:10:fc:49:29:b4:21:5b:55:f7:e9:7a:d1:60:
b5:5e:00:06:2d:14:84:13:39:15:38:37:9a:69:7c:
96:14:3c:e7:58:ae:b7:64:3d:dd:16:4e:10:23:be:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5B:77:14:5A:70:42:FA:18:D7:6C:BD:5F:B4:E2:CD:69:3A:E9:F1
X509v3 Authority Key Identifier:
keyid:96:D4:C0:AF:15:BE:38:D2:FC:5E:30:FE:34:57:47:5D:34:B7:83:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:54:be:01:f8:27:e4:a2:29:1d:b1:d3:35:d7:6c:5c:da:0b:
c3:0d:ae:e8:2b:c8:c3:e3:7f:b5:70:e4:8c:4a:d4:f6:dd:23:
09:90:6a:4f:33:e8:04:93:da:18:f8:c4:4b:77:e0:b1:06:4e:
9f:e2:4e:a8:14:91:c0:36:25:92:37:fa:5f:5e:c2:52:7b:30:
6a:f3:3e:b3:93:02:de:47:d1:45:e3:a1:62:a8:9f:42:41:f8:
53:35:24:35:df:0d:fe:d4:14:69:e4:7b:4c:a8:c7:ca:63:af:
0e:52:31:7c:e8:bf:8a:4c:36:c1:ba:35:7f:4f:c9:39:25:cc:
f1:dd:01:29:08:f0:92:e3:1a:ac:b7:cb:dc:54:d7:8d:8a:36:
38:5e:d0:e6:51:e0:da:0b:a8:a1:13:63:54:be:2a:58:f4:e4:
77:40:ec:9c:ca:b9:e4:7c:c7:63:c7:56:6f:fc:aa:4b:e6:84:
22:67:16:0d:6d:50:65:f8:f8:2c:b4:c9:07:92:21:2f:57:71:
b9:d8:3a:a9:33:0b:a7:6f:70:3c:4f:64:61:9c:bf:b5:6a:9b:
19:1c:21:e5:0f:76:5b:5c:18:64:77:8d:2d:8e:5b:9a:05:39:
3a:f1:26:06:cd:19:28:a6:22:e8:a4:4c:27:16:5a:ea:ba:f7:
c7:11:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:16:21 2026 by rpki-client