Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
File: ltl3-HCvlNbcEWribZDw5mWOMqg.mft (raw, json)
Hash identifier: nn7b5saMIyVrxWNPioorqCURl9dzFaCXgiuJDtJmNvc=
Subject key identifier: A4:10:9F:C8:1B:FB:CB:18:5B:2E:3E:13:13:6E:C9:85:4F:8F:37:90
Authority key identifier: 96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8
Certificate issuer: /CN=96d977f870af94d6dc116ae26d90f0e6658e32a8
Certificate serial: 019D3865757487C1D9ADA6FB36184866D87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
Manifest number: 0C9B
Signing time: Sun 29 Mar 2026 07:01:06 +0000
Manifest this update: Sun 29 Mar 2026 07:01:06 +0000
Manifest next update: Mon 30 Mar 2026 07:01:06 +0000
Files and hashes: 1: ltl3-HCvlNbcEWribZDw5mWOMqg.crl (hash: TLyTjSMqkFFGHuJ2pXRMaXYO/EH9wTGuGKbLie/qND0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:75:74:87:c1:d9:ad:a6:fb:36:18:48:66:d8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d977f870af94d6dc116ae26d90f0e6658e32a8
Validity
Not Before: Mar 29 07:01:06 2026 GMT
Not After : Mar 30 07:01:06 2026 GMT
Subject: CN=a4109fc81bfbcb185b2e3e13136ec9854f8f3790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:27:ac:2b:34:99:13:db:72:16:a2:f0:cf:63:
de:2d:16:d0:33:ce:15:db:ca:24:b0:50:e6:fa:e5:
25:c5:e1:8b:f3:c3:b4:ef:fe:f5:a0:26:3c:c6:6f:
67:d1:02:a2:93:81:5a:ef:a6:08:0f:84:2a:a9:c6:
3c:97:26:a6:c7:7a:6d:a3:cc:cb:84:86:94:da:f6:
6f:19:71:dd:69:ca:19:ad:41:80:ec:1d:10:6f:6f:
3d:63:ae:87:03:39:b5:a7:14:bb:d2:81:00:39:e8:
a9:b1:0d:a3:be:f7:68:fa:20:13:0e:41:11:6b:5b:
0a:6b:3a:be:d3:78:f0:14:78:d9:d3:d4:a0:08:c1:
1c:25:3a:54:ba:b9:11:7c:1c:99:fe:e1:a1:49:6b:
ba:cc:d2:79:65:3e:96:4d:65:54:e1:0a:3f:1a:41:
bf:a2:e7:33:83:e6:a4:d1:6c:64:67:91:e3:bd:f1:
5b:11:b4:2c:8f:25:67:17:42:a4:45:b2:3e:10:d5:
34:94:2e:12:93:ca:54:51:08:72:c0:9d:a8:aa:0b:
c7:67:3a:c6:7e:eb:1d:d9:fb:41:7a:14:26:82:ba:
3f:9d:54:96:01:6c:bf:ff:63:89:f6:fc:0f:5f:7c:
59:75:c4:aa:ac:e7:df:f3:97:93:b6:a0:87:dd:ad:
1f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:10:9F:C8:1B:FB:CB:18:5B:2E:3E:13:13:6E:C9:85:4F:8F:37:90
X509v3 Authority Key Identifier:
keyid:96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:28:de:df:62:ea:d5:30:01:ca:40:00:cd:aa:3b:2a:79:0b:
73:73:7d:35:ff:d9:0b:a0:d4:44:b2:d8:9c:3a:84:c3:a8:97:
0e:87:d5:5e:88:0b:de:2a:25:ec:d2:eb:86:15:0d:a3:80:b2:
20:72:9c:21:7c:66:ee:b6:59:45:71:22:7a:63:97:38:f2:68:
87:e9:c0:da:d5:31:88:e6:7e:5f:00:63:fd:e4:5a:f9:b0:e7:
06:e4:a2:6c:96:15:93:3e:01:b8:bb:1b:70:02:0f:2a:6e:af:
88:e5:8c:af:5d:87:d8:38:f7:10:33:0b:26:49:d8:83:a3:0a:
8d:25:fd:9f:29:8f:2b:88:34:05:48:2b:7b:76:4d:fd:0c:69:
2b:42:6d:b5:7e:ee:14:46:14:b1:ee:4b:b6:b8:ae:77:96:71:
6b:6b:f5:0f:ef:8f:3f:e9:4d:bc:04:7d:b2:9c:70:3c:83:76:
41:30:36:74:4f:77:41:e8:a3:15:52:c5:20:6b:89:5d:df:ed:
6f:af:c9:ee:ff:2a:61:61:41:fc:9d:b7:53:ad:4a:13:5a:e5:
4d:72:c6:31:c9:de:71:3e:08:2b:6b:7b:ab:2e:ac:44:9a:b8:
6c:a2:da:70:50:6a:c8:74:88:74:b4:7b:f3:d6:ce:9a:dc:5d:
e9:d2:c1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:05 2026 by rpki-client