Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
File: _ltNUIvcIUFbR1LuvESNSqrGNdk.mft (raw, json)
Hash identifier: 54lrphAlP7aoOeYDC9QlBRbo/ZrKYiQfhwUG8mIV+Tg=
Subject key identifier: 72:77:65:E8:AF:7B:DC:90:52:05:83:92:9D:AF:12:D0:ED:61:0F:32
Authority key identifier: FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
Certificate issuer: /CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Certificate serial: 019DFEAA544FFA5401EA4CE735910E144007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
Manifest number: 0372
Signing time: Wed 06 May 2026 19:01:08 +0000
Manifest this update: Wed 06 May 2026 19:01:08 +0000
Manifest next update: Thu 07 May 2026 19:01:08 +0000
Files and hashes: 1: 9J2k_v-AhLXeWsx0gyZ7MSycihA.roa (hash: KdEABeI7OUulamOMnpjJAOHhCOTUaC4bju9UuYK4BXI=)
2: _ltNUIvcIUFbR1LuvESNSqrGNdk.crl (hash: xOi6Ss+yHY6WdugaeShjzM38E1mrVAg+ro1GDW5vhM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fe:aa:54:4f:fa:54:01:ea:4c:e7:35:91:0e:14:40:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Validity
Not Before: May 6 19:01:08 2026 GMT
Not After : May 7 19:01:08 2026 GMT
Subject: CN=727765e8af7bdc90520583929daf12d0ed610f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:fb:aa:09:b0:d8:4e:d3:08:b6:d8:a9:98:
d7:01:da:1c:d7:97:2c:fb:08:30:53:17:ff:ad:c7:
97:5e:07:66:44:20:37:2e:09:c6:ef:89:26:77:9a:
34:14:85:c0:92:44:f0:62:88:f0:7d:b5:9e:14:3f:
20:64:5f:2a:ea:d3:84:12:5c:b2:82:62:5b:43:cf:
d3:e0:28:2a:0c:18:2d:cb:92:ce:17:83:ff:9b:0b:
02:64:e9:f2:b8:8d:13:2f:53:27:78:a1:fb:72:fc:
38:0e:b4:45:a1:b6:dd:da:06:83:1f:f6:a9:db:7e:
3e:d1:3f:ac:dc:6f:47:63:6f:1a:05:0f:6f:2c:29:
f9:02:f0:91:95:39:3e:3e:40:92:69:4b:49:c1:07:
d2:64:1d:5a:ba:be:d5:97:8e:06:de:4a:60:98:a0:
c5:b6:5b:3c:5e:eb:80:0f:ae:8e:01:db:0c:fa:13:
0e:5e:30:2a:f1:d3:dc:c8:33:98:41:a8:74:62:ff:
73:b8:0a:cf:f0:44:46:92:48:8c:80:06:67:71:72:
cf:10:d9:3d:8d:3a:c3:8a:f2:9b:e1:1a:a7:8d:e1:
c0:c2:4b:e4:ff:96:cd:03:26:7b:e8:78:f4:0e:ee:
22:96:9d:e4:03:40:90:3a:20:90:fb:f3:2e:77:c8:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:77:65:E8:AF:7B:DC:90:52:05:83:92:9D:AF:12:D0:ED:61:0F:32
X509v3 Authority Key Identifier:
keyid:FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5f:03:39:3d:c2:c8:f7:9e:3c:08:1e:d1:63:83:35:55:7c:
a1:50:77:ac:99:0b:a5:a7:bf:09:c9:71:bc:7e:18:06:06:1e:
c0:7b:55:95:d5:f7:04:da:97:8a:17:11:dd:61:9a:5a:3e:3b:
7a:0a:1e:31:5d:b4:18:f0:bc:1c:b6:e8:7c:b5:f0:ae:da:d6:
2c:e2:1d:3f:ba:7d:25:4d:ae:38:cd:a0:6a:53:a7:94:19:64:
69:3d:f3:40:77:fc:46:1b:ec:fa:0a:de:3f:77:72:7e:23:bd:
2a:b2:83:08:a7:a3:02:f0:55:3c:51:0e:57:91:58:c3:06:ce:
0c:ab:33:44:31:79:6d:ec:89:ab:d9:ac:ca:ea:4b:ea:c0:52:
01:4a:0e:72:79:39:6b:a1:d8:18:30:e2:fd:ce:13:ba:ae:70:
b0:4b:73:0a:15:64:52:13:8c:ea:c9:32:55:94:92:3f:10:93:
10:d7:2b:c8:29:be:45:67:23:5a:17:d1:f8:df:2b:bf:8a:63:
06:9c:09:1f:71:69:f6:7b:5b:c7:75:cf:80:7b:b2:83:85:0a:
18:64:61:5e:2e:57:69:a1:2c:13:2c:67:b8:1e:e5:e7:b8:8b:
e0:2d:d3:ef:56:15:76:9b:44:11:bb:9b:76:57:d9:c5:ea:b7:
4d:e7:02:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:38:20 2026 by rpki-client