Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
File: LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json)
Hash identifier: 3epi9hrhcMGaPZm1nOeC3/iXQ8RkCLiivXGSicfUIF0=
Subject key identifier: 91:B0:E2:ED:56:BD:3F:8F:FE:F6:9A:DE:38:97:AD:60:80:15:77:93
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial: 019D38D2F7819AFEA20BA4CEF9776323FB47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
Manifest number: 022D
Signing time: Sun 29 Mar 2026 09:00:43 +0000
Manifest this update: Sun 29 Mar 2026 09:00:43 +0000
Manifest next update: Mon 30 Mar 2026 09:00:43 +0000
Files and hashes: 1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: 7jp/RBIcA96ZHCUfFA+TBj/6P7Mfg8EcdH8OhqZd+V4=)
2: YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa (hash: r+jOonrhaqNcXtHMcC3c05txxmDgPgiD9LqnOUDboTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f7:81:9a:fe:a2:0b:a4:ce:f9:77:63:23:fb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Validity
Not Before: Mar 29 09:00:43 2026 GMT
Not After : Mar 30 09:00:43 2026 GMT
Subject: CN=91b0e2ed56bd3f8ffef69ade3897ad6080157793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:d0:51:95:9e:5c:24:d1:5c:1e:d1:e1:f0:
fd:10:ff:26:47:ab:61:ab:05:15:4e:e3:f5:1a:28:
94:1e:5b:07:7a:1e:12:3b:f9:c2:59:64:5d:ea:5e:
06:34:78:7d:8f:69:30:b3:c1:a5:3e:b4:2a:fa:10:
20:a0:b0:11:e5:37:ac:fb:6c:75:51:43:ae:34:4e:
91:43:f0:09:eb:df:0e:2a:4f:78:69:2c:66:38:c2:
74:8f:2e:d8:81:85:a4:48:92:62:e6:0a:d0:73:ed:
29:c7:3f:4f:26:73:db:e9:af:91:b9:42:39:38:2e:
2a:8b:7f:aa:e7:43:d7:26:de:e2:72:f7:55:31:39:
a9:13:6b:bd:4f:7f:48:16:64:5a:1a:7d:6d:4f:cd:
4b:5c:7e:90:e2:2e:de:ae:6f:a7:2b:89:c9:b4:e2:
7e:f4:bf:ed:ce:5e:b2:59:a5:47:bb:37:80:51:6e:
48:42:a4:e3:8b:26:52:84:2d:be:87:fe:18:aa:dc:
30:77:9c:59:25:f0:98:63:17:80:f3:73:87:40:f2:
e8:9c:d6:25:40:d0:91:43:49:21:b4:e7:70:53:17:
57:da:82:37:33:c1:81:ba:3a:4c:34:a9:5a:11:a5:
d8:d8:3c:d7:db:44:28:73:c0:fd:16:84:8f:c5:ba:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B0:E2:ED:56:BD:3F:8F:FE:F6:9A:DE:38:97:AD:60:80:15:77:93
X509v3 Authority Key Identifier:
keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:63:10:ee:a3:f1:11:7c:83:9b:51:ea:4f:01:6a:47:c6:93:
d2:79:d0:33:73:61:cd:61:11:f8:46:02:d2:9c:42:54:89:ca:
6d:5a:a3:26:3d:0b:e9:80:62:04:1e:2a:a4:a3:87:da:98:46:
5e:c2:fb:57:0c:35:37:87:a4:2c:16:60:93:f6:b0:bf:1d:89:
8a:79:1c:a6:7e:80:f8:04:6b:61:7b:c9:c2:91:53:ab:c9:2c:
c8:d8:75:f7:7a:fc:c0:4a:16:82:fb:2e:72:0d:c0:f4:52:55:
70:7b:3b:6a:1c:c4:8a:fb:36:30:93:3a:b8:de:da:14:61:71:
e7:8d:a0:27:e9:1c:b2:43:56:47:6d:96:3d:cb:db:0a:31:63:
2a:ad:9c:fb:b1:99:aa:f7:93:7c:d3:f7:eb:a0:1b:e5:f0:98:
eb:e0:33:49:e9:6b:17:50:9e:72:7a:55:cb:67:81:24:a1:83:
46:aa:8d:db:be:55:dc:bd:77:d1:9c:4f:61:47:95:8f:88:ed:
a8:03:ed:64:fd:70:25:5f:b7:0e:91:f8:96:1c:c9:c5:18:f2:
63:36:0c:23:89:fb:b4:de:02:fe:74:c4:23:e8:2d:d5:f8:f2:
c7:1b:bc:6f:d4:2b:1f:9b:33:e1:6e:01:9c:5c:d6:ce:46:02:
bc:fe:20:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:14 2026 by rpki-client