Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: 461bxRpkWtl1eMzlye36XJhle0Sig2IC7+qtNstnnQk=
Subject key identifier: AF:23:94:36:C5:EC:DC:12:D8:26:57:19:91:A9:7E:AD:C6:26:DA:0A
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 01A16D5B01E87202D22E2246632D935DBC5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0E26
Signing time: Sat 24 Oct 2026 10:00:42 +0000
Manifest this update: Sat 24 Oct 2026 10:00:42 +0000
Manifest next update: Sun 25 Oct 2026 10:00:42 +0000
Files and hashes: 1: MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa (hash: Ef0KimqUfcjmjAh99qPeo3PT6AwZiNEjh0UvdcbEniQ=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: pRGbJOCS0cUuSzQq1+0aFM5RrsEWD3so7u4lVTl/MSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:5b:01:e8:72:02:d2:2e:22:46:63:2d:93:5d:bc:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Oct 24 10:00:42 2026 GMT
Not After : Oct 25 10:00:42 2026 GMT
Subject: CN=af239436c5ecdc12d826571991a97eadc626da0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:df:78:e8:ba:70:d8:2f:41:1a:73:95:91:
e3:0b:57:55:88:44:7a:f3:f5:01:c6:4d:94:b9:a0:
1a:b7:fc:3a:5b:e5:e9:e5:67:1c:a3:ae:9e:af:ba:
4b:38:6b:60:9c:0e:1c:21:d6:b3:af:33:3b:13:c2:
b8:60:16:09:e8:aa:42:f4:8e:07:c4:b2:68:9d:88:
15:6a:91:0f:de:bc:c4:6b:d4:dc:3b:0e:e0:78:7c:
f1:00:06:16:db:88:9f:16:37:2f:7b:e3:01:49:b8:
4a:c5:56:1c:1f:ce:8b:8b:d5:54:52:0a:1f:60:29:
fb:84:eb:8e:20:b6:82:52:64:e0:a7:13:3f:a9:b2:
6e:24:92:d1:41:d5:6d:80:5e:b6:e3:5f:fd:5f:1f:
35:7b:87:ea:df:24:4f:df:f2:fc:b7:ac:65:8c:ad:
ae:6d:65:f2:f4:ef:2f:20:7d:6c:76:10:eb:73:27:
1b:47:2c:67:49:64:68:68:85:06:c0:df:c9:a9:68:
3c:1e:0e:b3:3f:69:24:b9:dc:7a:9a:11:0b:a1:be:
05:1f:01:db:04:cf:d9:e1:c3:c0:af:bb:94:45:57:
ea:18:b0:94:ee:69:60:18:cd:08:97:31:68:8c:a5:
4f:a3:25:07:e3:f1:ad:92:75:d5:03:30:7f:e1:4e:
a6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:23:94:36:C5:EC:DC:12:D8:26:57:19:91:A9:7E:AD:C6:26:DA:0A
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5a:e4:b3:cb:af:fd:34:5a:30:3d:97:93:11:98:6c:ab:4d:
7b:9e:18:bc:8b:6c:7d:46:ac:bb:b1:ef:d9:1b:10:69:c0:80:
dc:e1:bd:e6:1d:4f:d2:f7:d9:21:b5:1a:02:64:25:c7:77:e8:
a2:ad:0a:89:fc:5d:55:29:3d:26:57:e1:76:49:e2:36:a6:53:
99:2c:1e:15:3c:be:99:cb:89:de:cb:86:ab:46:5d:01:19:c2:
53:4f:5d:f7:cc:9d:4b:5e:18:6c:4a:88:44:40:2a:70:6a:52:
f8:04:16:de:7b:5f:4e:df:1f:b8:70:9c:30:a9:03:1f:12:87:
fd:f5:3a:23:02:d6:d3:30:a5:eb:1d:78:a5:b8:4b:46:e4:a7:
52:cb:5a:91:80:7d:23:ba:ed:45:e0:bc:6f:0c:b3:ff:81:b0:
6f:59:ea:bb:1c:6b:ff:ff:f0:6c:fa:53:ef:ff:78:49:1f:4e:
52:4a:83:d3:0d:e7:87:5d:a5:59:73:0a:fc:e6:f5:ea:4f:72:
4d:6b:80:a1:f3:0a:02:b9:f3:a8:18:8b:68:52:ed:a5:cc:59:
c0:6e:7c:1f:32:19:10:a4:fd:7a:1f:98:3d:17:91:96:91:01:
35:21:3d:c8:d0:52:4f:17:be:1e:4b:c5:28:f8:34:81:53:19:
fb:a9:5b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:29:42 2026 by rpki-client