Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
File: _ltNUIvcIUFbR1LuvESNSqrGNdk.mft (raw, json)
Hash identifier: EZn7eC52aL94JyvlPTGi1IUMs/k8vvSOGQ3N4OmdDSY=
Subject key identifier: 22:9A:E3:82:8C:6B:56:2F:A7:44:1E:E5:91:8C:8A:9B:6D:03:CF:25
Authority key identifier: FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
Certificate issuer: /CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Certificate serial: 019D14FD6371C748E3515259029DB3EDC41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
Manifest number: 02F9
Signing time: Sun 22 Mar 2026 10:00:43 +0000
Manifest this update: Sun 22 Mar 2026 10:00:43 +0000
Manifest next update: Mon 23 Mar 2026 10:00:43 +0000
Files and hashes: 1: 9J2k_v-AhLXeWsx0gyZ7MSycihA.roa (hash: KdEABeI7OUulamOMnpjJAOHhCOTUaC4bju9UuYK4BXI=)
2: _ltNUIvcIUFbR1LuvESNSqrGNdk.crl (hash: SJaki1mvyTYkeQBrCYkIH7uUoutkeJHiWHrKolUowEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:14:fd:63:71:c7:48:e3:51:52:59:02:9d:b3:ed:c4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Validity
Not Before: Mar 22 10:00:43 2026 GMT
Not After : Mar 23 10:00:43 2026 GMT
Subject: CN=229ae3828c6b562fa7441ee5918c8a9b6d03cf25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:49:d1:38:ba:0f:f6:5f:91:56:29:ec:21:6a:
ee:57:fd:33:1c:63:9c:c1:c6:a1:f7:d3:36:3c:46:
23:f1:65:b5:9d:dc:65:7f:ff:1b:bf:9d:61:23:4e:
a1:bc:7c:4d:35:e6:05:6a:1e:1d:60:a1:ac:cc:bc:
25:ef:12:af:b2:c9:62:89:82:4d:fc:0a:ae:0e:a9:
82:ef:72:5a:e1:18:ed:5a:20:26:aa:42:e5:19:9b:
e4:10:3e:93:0b:0d:44:88:4b:f5:2e:0b:4c:58:89:
24:9a:ad:0d:07:ee:ba:b4:9f:b9:1b:a8:f4:f4:8c:
e3:fb:df:09:86:ff:08:03:ea:42:9c:ec:17:8c:22:
51:12:7c:97:df:8d:70:f5:eb:92:1b:51:31:3c:e5:
ee:40:bf:15:ab:d4:81:f3:ef:fb:50:b8:7d:e9:89:
ba:02:59:02:ca:64:7a:4f:c6:bd:e2:90:40:9f:ad:
76:f4:63:73:0d:b5:65:a6:bd:2c:e5:8b:36:98:59:
77:4c:6b:f0:94:95:ba:ef:94:6a:40:3a:45:6f:bc:
6b:c8:b4:04:fe:c7:a7:b0:a4:b4:5b:ad:bb:44:32:
87:71:8e:d2:96:2b:66:d9:de:ad:10:49:11:d2:c8:
e6:5e:59:a4:e4:4e:99:fb:a2:13:30:2d:2b:6e:98:
dc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9A:E3:82:8C:6B:56:2F:A7:44:1E:E5:91:8C:8A:9B:6D:03:CF:25
X509v3 Authority Key Identifier:
keyid:FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:dd:84:18:b4:be:11:55:9a:fd:84:d4:6f:5e:7b:9a:0e:f2:
e9:15:4a:21:79:ce:b4:b6:c0:46:cc:76:6d:98:b8:69:fb:d2:
ac:fd:2b:0a:a5:36:a2:31:09:99:ee:17:ce:60:38:20:a9:e7:
8d:bc:ca:26:ed:ac:dd:86:5b:17:6d:b0:92:b5:0e:7d:86:cc:
11:15:ba:8e:60:5c:35:41:02:cc:df:47:68:aa:29:f6:80:c5:
44:55:a9:3f:c3:be:91:cb:81:49:24:a7:84:51:b9:88:52:c1:
db:76:91:e4:79:c0:a5:61:30:5e:2d:f9:9a:39:68:b1:60:2e:
50:c1:eb:62:bd:20:0b:4f:d9:ea:aa:b4:f8:09:62:58:e0:e2:
05:dc:11:c2:25:39:8c:e8:9d:26:a0:73:84:16:01:eb:6d:16:
62:43:b1:1b:d5:36:08:fd:0f:52:4e:5e:15:66:4a:fb:00:f3:
b1:64:f3:e3:62:f6:58:03:9c:76:a3:3b:1c:94:32:d2:e8:5c:
b1:58:3e:0f:7f:62:36:2c:64:e9:99:6b:2d:d6:0e:10:47:13:
8d:42:7f:3e:2a:6e:12:b3:89:fc:a5:8a:2e:b4:57:eb:51:78:
fc:f8:f7:5a:5c:6e:22:67:91:00:d2:e2:c5:54:c8:f5:8f:2f:
a5:c8:b3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 13:32:36 2026 by rpki-client