Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
File: LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json)
Hash identifier: rP+Yv7mWjEWOffjDxNjm8TyzS1hE8kB+ba3VCmhHgKM=
Subject key identifier: 55:0D:37:62:92:E9:09:58:08:67:EB:68:D9:1F:96:6A:1E:1E:6A:93
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial: 01A17E17FCDAB29007D7F9DB2CD32463F054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
Manifest number: 0464
Signing time: Tue 27 Oct 2026 16:01:03 +0000
Manifest this update: Tue 27 Oct 2026 16:01:03 +0000
Manifest next update: Wed 28 Oct 2026 16:01:03 +0000
Files and hashes: 1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: 5Hs4xRIg50FQ1rsJICiOAU0Q24OdwsjlKhEE0vt+8Uw=)
2: ewGTe6Hr3gHf6RyjuICwtU-Nauk.roa (hash: MJpbl0zNHfTW/zitpZZ1mZa6+bfsCE2CL+6tDuUFc3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:17:fc:da:b2:90:07:d7:f9:db:2c:d3:24:63:f0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Validity
Not Before: Oct 27 16:01:03 2026 GMT
Not After : Oct 28 16:01:03 2026 GMT
Subject: CN=550d376292e909580867eb68d91f966a1e1e6a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:4c:fd:f6:c7:18:43:c4:e9:e0:ef:6f:0c:
57:52:a9:62:f4:04:ad:c7:61:39:9c:5b:b6:1e:5d:
53:8e:20:31:19:39:73:1a:2a:37:04:c4:ff:7d:0f:
2a:cf:87:a6:1d:da:09:22:5c:62:b0:ff:02:31:af:
ac:f2:ef:2a:31:64:87:f7:f5:73:12:b2:7e:9e:69:
d9:75:3c:e3:d8:bc:bd:0e:c0:4f:a7:05:ad:da:22:
71:f9:49:b7:4f:52:97:27:38:6b:39:c7:c9:a7:5c:
09:a6:23:b6:e8:04:d7:78:51:1b:c6:12:91:9a:ef:
fb:26:00:25:3c:b9:e9:8d:35:c5:2f:96:97:a4:3d:
61:8f:33:32:9c:bf:d2:f4:15:b8:d1:9a:8e:b6:14:
f6:0d:0a:24:b4:8b:0a:09:37:b5:82:74:a9:c1:4b:
60:ef:b6:52:9f:94:36:a7:7d:2b:0d:d6:a7:b2:7b:
d0:28:6c:c1:9c:55:5b:43:fb:e2:87:48:35:62:6f:
6f:14:87:c6:08:a9:47:30:7c:8f:bf:8d:ae:18:48:
fa:10:21:f4:3f:c8:16:e3:01:73:cb:1e:79:48:a8:
22:ed:4d:8f:88:01:32:8e:19:56:f6:81:fb:3a:27:
b1:77:11:6e:a0:3e:a7:a9:84:d2:01:79:65:a0:af:
66:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0D:37:62:92:E9:09:58:08:67:EB:68:D9:1F:96:6A:1E:1E:6A:93
X509v3 Authority Key Identifier:
keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8a:04:08:fd:81:0c:be:83:8d:0f:e7:4c:93:5a:36:67:63:
6a:1c:07:52:6c:82:9a:2e:d7:91:86:ec:4f:89:12:4e:5f:67:
7d:3c:df:13:a2:25:60:e9:08:e9:27:57:94:27:9e:5c:40:c5:
4f:01:e0:18:6f:5e:e0:e4:6f:cd:58:f0:10:4b:1f:ef:ba:da:
0d:37:00:23:47:da:d5:3b:de:7f:75:3f:93:34:82:b9:e9:4d:
33:a4:1f:2d:cc:3b:3d:f7:49:b3:06:eb:eb:05:6b:de:fe:27:
f7:a9:7b:50:43:19:76:b9:a5:e6:ae:3e:ad:36:12:ce:52:ab:
48:ae:3b:b2:83:d8:84:33:8d:e4:7f:a2:56:14:c7:c9:c5:aa:
ae:ca:0d:48:39:f9:44:62:17:61:2a:a6:37:81:46:73:e0:7f:
38:05:94:cc:98:3c:8b:f6:10:c7:a3:24:e9:b7:e0:5f:38:b9:
a2:61:d6:18:d4:79:f3:bb:01:b7:10:2d:8b:4a:53:04:9f:2b:
b9:dc:e3:81:8f:81:eb:a2:d2:de:9f:7d:b8:d5:35:1e:e4:f2:
f2:cd:ab:89:52:52:38:12:78:24:9b:32:e7:82:9d:ab:50:75:
0f:02:60:a9:a2:e9:7d:80:d3:97:a6:bb:93:e1:1c:52:c3:3b:
13:3e:0a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:27:45 2026 by rpki-client