Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
File: _ltNUIvcIUFbR1LuvESNSqrGNdk.mft (raw, json)
Hash identifier: NOe/I+TBgKG0HzpRxnG986xdl2yMxInPeGMYeWkb6f4=
Subject key identifier: A3:C2:84:2C:E4:B3:70:87:2C:31:D9:9F:02:EA:0B:43:B6:CE:B4:5F
Authority key identifier: FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
Certificate issuer: /CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Certificate serial: 019EF7C9E0D6FC526CC32B407CCD99B86D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
Manifest number: 03F3
Signing time: Wed 24 Jun 2026 04:01:02 +0000
Manifest this update: Wed 24 Jun 2026 04:01:02 +0000
Manifest next update: Thu 25 Jun 2026 04:01:02 +0000
Files and hashes: 1: 9J2k_v-AhLXeWsx0gyZ7MSycihA.roa (hash: KdEABeI7OUulamOMnpjJAOHhCOTUaC4bju9UuYK4BXI=)
2: _ltNUIvcIUFbR1LuvESNSqrGNdk.crl (hash: ZUPaP4xWGg5GXaM5VlYaE9EwTjRcJrPvlphYNIqbpmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f7:c9:e0:d6:fc:52:6c:c3:2b:40:7c:cd:99:b8:6d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Validity
Not Before: Jun 24 04:01:02 2026 GMT
Not After : Jun 25 04:01:02 2026 GMT
Subject: CN=a3c2842ce4b370872c31d99f02ea0b43b6ceb45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:4e:41:1e:9d:e9:47:54:54:72:5a:a9:89:
7b:12:1c:ba:77:3b:af:77:47:f0:d8:e1:9c:a0:95:
14:d1:2d:80:f3:31:cd:0b:cb:7d:7f:48:37:60:ef:
89:89:ca:52:67:1b:a0:aa:d4:8d:53:fd:bf:20:24:
d8:2a:12:e8:50:68:55:6c:64:8c:f7:7c:d0:0b:b4:
80:a2:46:30:91:9f:0b:d8:11:1c:c1:2e:7e:f9:27:
5f:1b:b2:16:0b:08:dd:77:8e:c1:cc:93:76:5c:f3:
38:58:cc:29:73:7f:89:a4:1d:4f:c9:52:b7:52:79:
60:bc:aa:ef:e1:64:2f:95:1b:d0:ef:8d:b0:8a:2d:
8d:d4:27:31:b2:78:af:3c:91:d7:d9:78:3b:61:68:
b8:06:56:c3:35:ce:bf:dc:d4:13:98:05:c6:bf:4f:
b8:bd:d7:de:0a:04:19:9f:bc:e6:71:69:a1:25:ff:
f4:b1:21:57:e7:61:e4:42:50:11:c7:c9:ed:bb:61:
f8:47:2f:5e:21:e1:74:5e:2e:ff:a3:06:0f:08:43:
e9:b4:df:79:83:3b:28:b2:f5:ec:68:72:23:b7:8c:
dc:66:2e:de:84:0d:a1:92:2c:17:23:01:f1:5c:22:
8b:75:a9:3a:9a:ba:d3:2c:d4:39:c7:b7:e0:75:a4:
03:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C2:84:2C:E4:B3:70:87:2C:31:D9:9F:02:EA:0B:43:B6:CE:B4:5F
X509v3 Authority Key Identifier:
keyid:FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d9:ec:6e:30:28:57:d7:f8:79:06:d5:0d:4e:94:f1:e4:a2:
b2:f2:cf:bb:55:53:b8:f1:c5:4e:46:94:d3:90:e2:8b:13:ba:
d8:46:ab:6d:bb:1b:23:5a:b9:1c:62:ae:66:e1:c0:47:e3:6e:
4f:bf:8b:59:45:42:1b:57:2c:6a:2c:e8:d3:10:1f:58:ca:e2:
34:15:bf:4e:1c:a0:50:83:c3:33:be:6c:3f:f4:6d:d4:af:a1:
de:fa:b3:70:81:53:db:86:ff:df:c7:40:70:33:02:86:0e:f1:
15:77:0a:60:c2:e6:86:cb:17:2c:ab:4d:56:3d:61:03:f0:55:
2c:ba:e3:45:95:8e:a1:6f:6c:98:a2:af:e8:72:1f:e4:34:e0:
32:e9:14:0c:0e:b2:f3:1c:27:32:e4:06:4f:c7:82:1b:1c:74:
2d:d9:cb:13:c2:8a:f9:ab:3a:73:39:5f:6a:b7:32:5f:d5:55:
4c:bf:77:dc:74:19:4a:f4:0d:3d:9e:16:d8:4f:ab:42:50:49:
3d:35:66:1d:4d:08:e8:d7:c5:61:f0:28:55:33:b7:35:85:20:
29:f1:8a:59:09:e6:d2:73:c8:47:be:38:c7:44:59:9b:7f:3e:
64:70:95:c9:30:bc:ce:f5:42:b3:a0:60:01:79:ea:4f:c7:ff:
00:c2:d8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 06:40:55 2026 by rpki-client