
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
File: LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json)
Hash identifier: WhM8AdRyUStTVmvozR++WjnhiAnQVmQpG9BYOY/yv+U=
Subject key identifier: 56:61:D0:AE:A0:5C:5A:3E:C8:05:D3:39:DA:D3:33:04:50:04:F4:AD
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial: 019E31F3635013020AB412D0EC9EB0D72D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
Manifest number: 02AE
Signing time: Sat 16 May 2026 18:01:34 +0000
Manifest this update: Sat 16 May 2026 18:01:34 +0000
Manifest next update: Sun 17 May 2026 18:01:34 +0000
Files and hashes: 1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: TJ0EnM10Gc7tXv0L4qPxUmuWts3KH2MYy5Z9djt7Ans=)
2: YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa (hash: r+jOonrhaqNcXtHMcC3c05txxmDgPgiD9LqnOUDboTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 18:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f3:63:50:13:02:0a:b4:12:d0:ec:9e:b0:d7:2d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Validity
Not Before: May 16 18:01:34 2026 GMT
Not After : May 17 18:01:34 2026 GMT
Subject: CN=5661d0aea05c5a3ec805d339dad333045004f4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:28:e8:ae:e1:53:82:c2:2a:1b:7f:fc:e3:
e2:b4:47:b3:fd:9d:76:c6:c6:7d:63:63:56:67:23:
21:f0:40:e0:9e:91:cb:32:8f:b6:f7:4d:5c:12:6f:
1c:e7:d2:a4:8d:35:d5:72:ca:7e:2e:99:a6:c9:e3:
52:87:14:3b:f5:99:f6:7e:38:87:8a:0a:53:a2:0d:
f9:40:a9:d8:2d:78:d0:4b:46:e6:84:5b:62:a2:14:
b7:99:2b:38:8c:e4:56:71:60:6c:e5:ac:92:f8:e6:
32:bf:42:53:5a:3b:ca:f0:5c:98:f7:40:95:4d:b2:
6c:db:b3:3d:fd:aa:bb:b6:a0:85:c3:55:45:1d:44:
a1:25:58:58:1d:bf:e1:2d:f0:8c:3a:82:4f:0c:45:
3e:6b:c4:78:86:59:fd:ae:16:83:21:6f:9a:c1:ea:
22:81:0e:ac:59:34:68:b0:f1:84:08:12:f9:52:4b:
90:af:54:fa:66:7b:b7:b5:52:9f:e9:39:10:9d:d6:
02:4e:7d:84:13:27:0b:e4:f3:60:b5:6b:d1:c4:db:
14:9c:93:f2:b7:a9:7f:8e:a2:28:74:8c:b4:ee:76:
ec:20:0e:2a:29:1c:59:24:14:72:86:09:90:ef:a9:
3a:23:b4:34:fd:aa:62:d4:21:ee:73:f0:27:cd:bd:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:61:D0:AE:A0:5C:5A:3E:C8:05:D3:39:DA:D3:33:04:50:04:F4:AD
X509v3 Authority Key Identifier:
keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d8:41:cf:ed:ee:dc:44:51:54:85:9f:55:ab:71:27:74:81:
d9:c2:91:6f:07:1e:b2:f0:0a:2c:06:e4:27:d5:45:e3:41:27:
08:0e:7e:6c:c5:08:2c:35:a1:5d:a3:b1:8f:f7:f3:9a:b7:a2:
f1:e6:4b:bb:35:73:d2:9d:81:0f:48:63:0f:5c:54:e4:25:ac:
2a:7d:c1:0d:ed:f6:89:3d:62:36:60:b0:cb:bd:05:40:9a:71:
50:3f:74:b8:b8:47:2f:47:46:ff:92:ce:16:2e:29:a7:fa:75:
85:33:a1:83:4a:30:2f:55:fb:64:19:af:7d:6e:06:40:6e:29:
14:16:f4:f0:aa:8d:f0:c0:58:4d:6d:5b:8b:d5:68:be:fc:98:
48:48:33:48:66:3e:c4:f7:ee:ec:49:cb:7e:f6:fc:54:fa:2b:
0f:3e:67:ac:d4:11:85:2c:b2:59:4e:1b:39:b2:01:34:c6:85:
1a:80:32:c0:f1:6c:ea:15:10:af:06:7c:04:52:83:0d:8f:23:
92:c0:7d:0b:1c:62:23:0f:fd:3f:87:8a:3f:f6:ba:57:12:8f:
a8:7d:71:09:ac:5e:84:28:0f:0c:88:9f:ea:e7:01:75:24:98:
b7:9e:97:04:30:a5:e4:1d:35:ab:33:ba:0d:0c:11:d3:b8:6c:
fa:71:01:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:33:27 2026 by rpki-client