
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
File: LTDDBwxuYe3FimTzIz-pf8X1c5s.mft (raw, json)
Hash identifier: Px2HohGLG91XiLjDRuxxJNojpgxcohKZUZynmbnwwz4=
Subject key identifier: 86:FB:25:FE:FE:37:04:79:DB:30:21:54:CA:A2:80:B3:2A:F5:74:B1
Authority key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
Certificate issuer: /CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Certificate serial: 01A148733A17343974777D04325302DE171C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
Manifest number: 1AAD
Signing time: Sat 17 Oct 2026 06:01:13 +0000
Manifest this update: Sat 17 Oct 2026 06:01:13 +0000
Manifest next update: Sun 18 Oct 2026 06:01:13 +0000
Files and hashes: 1: LTDDBwxuYe3FimTzIz-pf8X1c5s.crl (hash: 1mO3PYeTEEO+Dx6VCSfK4eLTUcCd1SeetnBUGt6z0es=)
2: Rd5ogL0rZH0GwJinSJKEBpZALRE.roa (hash: nV1zKTqNKFR84ggPUZVLKnPWuVDibn1TXYU/+rnDjXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:73:3a:17:34:39:74:77:7d:04:32:53:02:de:17:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Validity
Not Before: Oct 17 06:01:13 2026 GMT
Not After : Oct 18 06:01:13 2026 GMT
Subject: CN=86fb25fefe370479db302154caa280b32af574b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:ec:0f:89:09:9d:81:e8:90:ce:71:f2:ed:
69:2a:20:3b:8e:8e:bd:5f:3b:3f:15:c8:b3:e8:a6:
12:45:de:28:dd:1c:d2:81:66:66:11:51:d1:e9:ae:
9f:14:98:8d:8f:ef:f5:eb:b3:84:e1:09:59:ec:11:
e6:2b:a0:8d:1e:13:b1:5f:3f:f4:53:b3:48:70:93:
63:cc:82:6b:fd:88:96:1f:12:e8:37:78:de:5a:53:
b6:5d:ad:3c:ef:8a:f0:8f:0c:6c:50:31:e8:92:46:
85:5e:0a:7e:f4:8c:ec:dd:af:07:a4:97:2d:f5:c1:
0d:7d:34:c0:5c:d1:26:ae:82:28:02:61:b3:22:30:
27:9d:06:0a:af:c6:64:bf:0d:60:61:ad:f1:69:93:
da:2a:c2:d1:1f:4e:59:44:45:7c:64:72:3f:9b:bc:
1c:42:f9:49:de:c4:11:61:5c:4a:89:5f:64:c6:fc:
30:dd:43:d8:d2:b6:d4:b8:a8:4f:38:df:87:be:1d:
67:76:40:a0:c2:53:cf:e6:d9:53:50:64:2c:9f:f1:
9f:a7:82:eb:28:85:4c:44:d0:1e:4d:6c:e8:54:f2:
ac:0e:5c:57:93:57:ce:32:ee:1d:35:77:df:45:75:
0f:b6:fc:5d:76:d0:f8:7a:f0:4d:c6:fb:85:bd:8c:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FB:25:FE:FE:37:04:79:DB:30:21:54:CA:A2:80:B3:2A:F5:74:B1
X509v3 Authority Key Identifier:
keyid:2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:64:35:6c:8b:b6:61:3c:6d:ba:79:91:14:12:8b:a0:53:0a:
b4:f4:b0:10:a1:f3:38:fa:9b:ae:dc:78:25:47:a3:ad:8b:ec:
3d:45:38:7e:50:6c:e6:0b:38:bc:0d:a0:08:fd:97:50:d5:5e:
f8:f7:8f:b3:9b:3f:e0:6b:0b:78:f6:80:01:8d:6f:bd:1a:3d:
4f:82:81:ba:ee:62:66:64:16:99:e6:f0:95:15:40:6d:cd:67:
7a:eb:ad:88:e2:92:99:81:63:7a:af:a9:75:86:ab:ab:0e:5e:
3f:f5:26:f0:85:b3:e4:57:47:4a:0f:69:ec:cb:3b:fb:1c:ea:
4d:6b:88:fe:89:29:6d:79:b8:86:39:0d:ce:83:25:3e:55:c6:
33:20:b5:55:08:e7:09:0e:f3:cb:6b:17:e5:ad:74:de:35:42:
fb:92:03:dc:02:19:7c:36:f2:2e:c4:1e:a7:f8:57:0e:fd:1a:
6e:1d:c2:c6:85:74:38:61:55:79:56:74:13:03:87:f0:90:a9:
01:42:b8:db:7d:d3:1c:1a:48:4e:a7:76:0c:bc:b7:c9:f0:de:
52:93:cc:d2:86:bf:de:f4:79:11:66:18:49:32:05:53:30:19:
61:de:30:4e:6b:f3:03:6c:50:26:da:0d:f0:80:da:7d:7b:c6:
95:85:19:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:22:40 2026 by rpki-client