Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
File: LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json)
Hash identifier: RbA1L+dboB80+CZFIeXzE34CDtInjcqG3qYbD6GazLY=
Subject key identifier: 95:82:40:36:92:94:C6:0B:0C:8A:12:1F:1C:6E:F4:70:8C:3F:66:8E
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial: 01A06D94E269A9EC8F538514E99748E2D091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
Manifest number: 03D6
Signing time: Fri 04 Sep 2026 18:01:08 +0000
Manifest this update: Fri 04 Sep 2026 18:01:08 +0000
Manifest next update: Sat 05 Sep 2026 18:01:08 +0000
Files and hashes: 1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: HWC2UiNtroewj7d1h43Mlsv3Cah7zelfaLwkV4dXqXY=)
2: YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa (hash: r+jOonrhaqNcXtHMcC3c05txxmDgPgiD9LqnOUDboTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:94:e2:69:a9:ec:8f:53:85:14:e9:97:48:e2:d0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Validity
Not Before: Sep 4 18:01:08 2026 GMT
Not After : Sep 5 18:01:08 2026 GMT
Subject: CN=958240369294c60b0c8a121f1c6ef4708c3f668e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:ec:72:16:97:db:79:75:ba:c7:ce:2a:21:
73:a7:79:42:46:e2:f4:4d:46:93:ef:d9:c9:dc:ad:
8d:a0:48:a4:af:77:d4:95:1d:bc:a6:d0:61:e6:7e:
5f:98:d9:62:89:a0:04:67:fc:ec:7d:24:b5:8e:3e:
ac:2b:a6:80:48:7f:23:5b:29:92:af:e4:13:55:82:
bf:5e:49:e4:f7:3d:d1:fc:d5:00:57:c8:6f:94:1b:
92:aa:b9:99:1a:6c:b8:ae:dd:fb:b0:81:6f:f0:87:
0b:43:06:64:32:f3:f3:38:f8:81:af:f6:02:9f:53:
25:e7:0b:a6:24:82:69:d6:7a:6b:3a:8a:65:d1:01:
77:23:0f:5a:7d:83:14:46:02:76:c9:de:1f:f4:f4:
49:46:fe:7f:a3:c3:f1:12:2d:9a:7d:b1:49:1c:07:
d9:c7:3f:f1:08:3f:87:42:85:47:92:d9:e2:ae:d9:
b4:da:58:91:7b:c0:b9:39:a3:78:a9:98:2c:db:2d:
d3:f9:c6:94:6f:27:52:3e:46:88:7b:60:0b:b2:2c:
65:23:df:08:9e:a6:4a:90:04:0f:dd:b9:ce:50:6b:
b7:2e:ed:9b:3b:1d:28:c4:4f:20:b0:68:70:57:d3:
44:e3:6b:5c:0a:0b:ba:33:8e:07:59:c2:e1:f2:ef:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:82:40:36:92:94:C6:0B:0C:8A:12:1F:1C:6E:F4:70:8C:3F:66:8E
X509v3 Authority Key Identifier:
keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a1:cf:df:4a:a9:49:5e:e8:c5:8c:08:af:38:4e:58:be:4e:
1e:ca:31:05:49:6c:eb:ad:39:a4:ee:55:6b:65:8d:01:23:50:
b8:0d:1b:85:29:01:9c:07:bd:18:74:10:0c:33:82:00:dd:90:
fd:11:0d:c6:d2:0b:32:8a:59:ca:20:96:fb:b3:24:09:15:a9:
22:e4:a1:ff:02:09:f5:4a:1c:df:ec:35:d3:68:e4:4b:09:fd:
b1:ce:af:ed:60:7f:16:79:12:f2:dc:3a:42:41:a5:bf:2d:9a:
28:d5:1b:ec:23:0a:a1:47:43:70:a7:90:56:58:31:03:e1:09:
4a:be:25:e5:86:68:b4:7a:91:a2:64:5a:b4:a5:95:17:dc:93:
96:39:a1:06:70:e3:fd:24:96:25:45:ce:38:2a:cc:ce:e1:d3:
aa:28:8d:00:ec:8f:df:92:c6:32:f4:f6:fb:72:05:dd:df:db:
90:65:64:98:98:2b:88:4d:e8:c1:3d:72:98:64:4d:d6:f7:65:
6b:a7:4d:93:0b:e4:de:d4:98:31:16:33:a7:33:d5:b0:4a:53:
54:86:11:38:d9:e4:8e:28:49:90:ff:ba:52:34:18:f7:7d:d8:
42:27:1a:8f:63:8c:97:95:da:39:52:ec:83:bb:36:31:8f:1e:
ac:90:61:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtlOJpqeyPU4UU6ZdI4tCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZDQwODdhMzcyN2YwNDdlMDk2ZGI2OTJlMDAzZDZjMDEx
M2YxZTIwHhcNMjYwOTA0MTgwMTA4WhcNMjYwOTA1MTgwMTA4WjAzMTEwLwYDVQQD
Eyg5NTgyNDAzNjkyOTRjNjBiMGM4YTEyMWYxYzZlZjQ3MDhjM2Y2NjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOHschaX23l1usfOKiFzp3lCRuL0
TUaT79nJ3K2NoEikr3fUlR28ptBh5n5fmNliiaAEZ/zsfSS1jj6sK6aASH8jWymS
r+QTVYK/Xknk9z3R/NUAV8hvlBuSqrmZGmy4rt37sIFv8IcLQwZkMvPzOPiBr/YC
n1Ml5wumJIJp1nprOopl0QF3Iw9afYMURgJ2yd4f9PRJRv5/o8PxEi2afbFJHAfZ
xz/xCD+HQoVHktnirtm02liRe8C5OaN4qZgs2y3T+caUbydSPkaIe2ALsixlI98I
nqZKkAQP3bnOUGu3Lu2bOx0oxE8gsGhwV9NE42tcCgu6M44HWcLh8u8rrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWCQDaSlMYLDIoSHxxu9HCMP2aOMB8GA1UdIwQY
MBaAFC7UCHo3J/BH4JbbaS4APWwBE/HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHRRSWVqY244RWZnbHR0cExnQTliQUVUOGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81MzlkZGItNTA3OC00ODFjLTliNzIt
Y2M4NGViNDJhYzM5LzEvTHRRSWVqY244RWZnbHR0cExnQTliQUVUOGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC81MzlkZGItNTA3OC00ODFjLTliNzItY2M4NGViNDJhYzM5
LzEvTHRRSWVqY244RWZnbHR0cExnQTliQUVUOGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6HP30qp
SV7oxYwIrzhOWL5OHsoxBUls6605pO5Va2WNASNQuA0bhSkBnAe9GHQQDDOCAN2Q
/RENxtILMopZyiCW+7MkCRWpIuSh/wIJ9Uoc3+w102jkSwn9sc6v7WB/FnkS8tw6
QkGlvy2aKNUb7CMKoUdDcKeQVlgxA+EJSr4l5YZotHqRomRatKWVF9yTljmhBnDj
/SSWJUXOOCrMzuHTqiiNAOyP35LGMvT2+3IF3d/bkGVkmJgriE3owT1ymGRN1vdl
a6dNkwvk3tSYMRYzpzPVsEpTVIYRONnkjihJkP+6UjQY933YQicaj2OMl5XaOVLs
g7s2MY8erJBh4A==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:40:55 2026 by rpki-client