Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
File: LtxXg3JdWVAZYqostbWQxCtX314.mft (raw, json)
Hash identifier: wefwMTOvgYvIPMosBmm4MAHf9sAh56Ycp1DsbNwpGH4=
Subject key identifier: A1:F7:09:00:12:1E:27:F4:40:23:E7:84:30:9B:B6:A1:0B:1B:5F:2E
Authority key identifier: 2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
Certificate issuer: /CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Certificate serial: 019D3940FB1D1979CBBE0055B679AE026602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
Manifest number: 15DA
Signing time: Sun 29 Mar 2026 11:00:53 +0000
Manifest this update: Sun 29 Mar 2026 11:00:53 +0000
Manifest next update: Mon 30 Mar 2026 11:00:53 +0000
Files and hashes: 1: LtxXg3JdWVAZYqostbWQxCtX314.crl (hash: g7JIJ7O8z7bm6wB6qhGNsgOIzIoYlppWVNfC20hjHNw=)
2: P0OUzf8dSvmExJwUtJ0n2x9_5To.roa (hash: TK5fbLc52j4bkHB/r8jxGRizxLaHRCRki8SR0RyXg1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:fb:1d:19:79:cb:be:00:55:b6:79:ae:02:66:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Validity
Not Before: Mar 29 11:00:53 2026 GMT
Not After : Mar 30 11:00:53 2026 GMT
Subject: CN=a1f70900121e27f44023e784309bb6a10b1b5f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:4d:b4:d2:e7:e7:e2:9a:d1:3e:05:d2:84:
58:a4:bf:a0:90:95:1d:1a:d9:e5:dd:ee:b4:66:11:
aa:89:44:97:41:11:12:38:67:1e:23:7a:36:b3:b7:
b5:b4:d1:4f:7c:39:81:63:f0:18:6a:6a:18:56:bc:
96:8a:ec:d4:a7:76:39:11:49:6a:a3:25:f7:a8:51:
78:bd:ff:83:53:4c:88:20:4c:6b:1e:15:1f:28:35:
56:59:2b:c5:36:06:d0:62:51:67:bb:a9:6c:1c:0d:
f4:36:65:8d:2b:26:3a:86:cf:d5:eb:bb:61:4d:79:
e9:66:a3:61:cf:19:5d:49:3e:df:39:2b:24:77:59:
a8:08:49:50:69:d3:35:bd:b3:ea:e6:d3:df:d7:7b:
3e:95:cb:8e:61:30:d8:47:38:fa:6c:2b:88:3d:21:
28:3a:6a:6f:be:89:39:97:33:99:0f:2b:f0:29:92:
c4:f4:ab:64:6f:50:8d:db:ca:0b:c1:b9:53:ae:f7:
51:90:0e:14:70:44:fc:f8:26:0d:b9:cf:12:63:08:
be:a2:89:9c:ba:0e:8b:b8:11:8d:35:7e:a6:81:67:
6c:0f:46:33:8f:f7:e4:bf:a2:79:0b:b5:2e:7e:5f:
f2:2d:10:51:f5:9d:16:32:3f:cc:03:72:e2:8a:22:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F7:09:00:12:1E:27:F4:40:23:E7:84:30:9B:B6:A1:0B:1B:5F:2E
X509v3 Authority Key Identifier:
keyid:2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:22:4c:9d:1d:df:d5:87:43:7e:23:ff:8d:f1:3f:4d:44:ea:
99:7e:5d:22:3f:7d:7c:7e:00:c6:19:64:57:59:30:4c:f4:a8:
cb:cf:02:70:0a:2f:cd:d4:7b:12:6d:27:74:78:c3:e6:b1:9b:
bd:2e:64:ec:e5:ef:77:18:8a:88:5a:e7:6d:95:45:a1:54:8d:
7b:d0:90:58:75:d6:2d:e1:28:40:83:89:24:53:3e:71:94:05:
ba:e2:38:ba:45:d1:21:39:87:64:5a:c9:1c:a2:1d:09:2a:cc:
8a:8e:58:78:c5:ee:ed:dc:ac:6e:0c:dc:e2:b4:8c:8e:a5:8a:
f6:54:bc:58:9d:18:8e:74:e1:e0:55:56:96:5c:f0:e7:3c:33:
af:98:4e:62:62:2c:89:f9:fb:1d:27:d0:cf:bc:4c:37:73:e4:
fe:9b:c0:cf:a7:fb:51:59:0f:a5:75:b5:f0:aa:34:60:34:54:
2a:07:97:a2:49:f1:f5:8c:42:84:44:ac:26:13:00:74:af:75:
6a:1a:e2:5e:97:7b:d9:0d:4d:e0:77:08:a8:e8:3a:92:97:38:
20:53:09:02:9c:37:e2:dd:ab:e4:f5:47:12:7d:a7:fc:ae:91:
2e:ca:93:83:45:9d:4f:b1:17:12:9e:af:ac:2e:b9:af:24:d4:
08:81:c5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:00 2026 by rpki-client