Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: mqPwmfKOumFUNBI/Xmc5nQQz7Jtazvzaaox8cze06X0=
Subject key identifier: FB:0E:93:50:7D:4A:6B:0B:8F:9D:5B:1B:D1:2E:A8:74:17:FE:4E:DB
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 019F84C3492FF20E58A059C020FB2AA7A5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0D29
Signing time: Tue 21 Jul 2026 13:00:18 +0000
Manifest this update: Tue 21 Jul 2026 13:00:18 +0000
Manifest next update: Wed 22 Jul 2026 13:00:18 +0000
Files and hashes: 1: MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa (hash: Ef0KimqUfcjmjAh99qPeo3PT6AwZiNEjh0UvdcbEniQ=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: sI8wbHkBatRPqBUFY4iOWJbvNz8FA58HTLDImRLR8lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:49:2f:f2:0e:58:a0:59:c0:20:fb:2a:a7:a5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Jul 21 13:00:18 2026 GMT
Not After : Jul 22 13:00:18 2026 GMT
Subject: CN=fb0e93507d4a6b0b8f9d5b1bd12ea87417fe4edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cb:58:ac:72:84:c7:e4:4b:a1:af:59:00:c4:
d0:2f:31:37:1a:51:93:6c:c9:22:f8:73:e0:b2:80:
e9:2f:d4:d6:d8:45:29:0c:77:54:68:d4:53:61:ff:
1a:1b:82:29:89:2b:6a:56:3a:f6:c3:d8:23:3e:2b:
f4:9a:ab:e4:94:e9:0a:d5:af:ad:c9:f0:ae:81:2a:
5a:20:f2:6b:0b:c2:ca:1e:f2:02:ed:ec:0f:7b:e7:
b1:a5:5f:91:72:5f:eb:6e:48:d3:48:53:ef:00:37:
f2:85:12:ed:b0:e3:fd:ab:ae:5f:7d:0d:31:14:51:
37:52:89:71:15:6e:d9:15:2b:6d:ca:a4:13:d9:99:
d8:6b:9e:20:b2:69:c6:da:2e:01:3e:e8:2c:5a:c2:
d7:93:84:af:a7:a4:d5:69:19:46:1f:8b:47:c2:d3:
6b:61:01:5e:71:23:15:8e:b6:1d:ab:6f:4e:4b:ed:
78:b1:cb:f0:0d:5b:43:a2:3e:aa:51:44:58:2d:c9:
0d:77:b8:32:da:5a:8a:6c:c0:f7:ff:21:34:3c:0c:
95:a4:ab:c3:00:01:cb:56:fd:cd:d6:a7:e4:7c:14:
d7:e0:7f:5d:fe:04:9a:17:c7:ad:36:41:32:58:80:
2e:af:a7:db:91:c6:80:8f:57:a7:d5:c9:3a:55:e6:
40:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0E:93:50:7D:4A:6B:0B:8F:9D:5B:1B:D1:2E:A8:74:17:FE:4E:DB
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:67:1d:38:32:9c:b2:e4:c0:b0:65:ec:c9:38:41:4f:ae:6a:
e5:54:c0:8b:e5:5e:6a:5c:de:87:44:bc:e9:84:55:28:71:26:
bd:75:45:69:73:7e:7d:fb:8e:07:6b:ca:b2:eb:16:28:e9:38:
ef:ed:d5:09:0d:4b:38:0f:10:22:0f:7d:d8:e6:48:7e:91:cd:
7e:27:e0:3c:2a:fc:69:c0:d1:11:9e:68:a0:19:27:be:e4:4e:
9c:db:4e:ad:4b:6f:81:96:11:36:1e:bc:b7:e6:02:23:1f:5f:
4b:c1:31:ca:37:88:fa:8f:04:73:c2:14:5d:4e:46:b0:87:97:
20:c0:aa:2f:00:30:a2:ad:97:a7:74:49:38:6f:be:81:2f:3f:
14:80:c5:bb:e2:8d:35:c5:00:4e:e9:44:80:b5:86:d7:7d:63:
10:1d:27:76:98:00:77:32:f4:96:d4:06:14:81:79:77:1f:99:
58:7d:88:9a:63:f5:90:78:3b:d4:6a:17:ba:8c:b8:a6:fc:8b:
cb:73:25:0e:57:cd:75:8e:e4:4f:30:52:47:21:e2:ab:67:c9:
e8:8e:7c:39:de:3e:5a:13:ea:07:80:8b:e3:cc:44:6a:39:a4:
73:39:ed:f9:bf:38:d8:b4:98:cb:03:8c:f7:b6:1c:f6:86:ff:
ca:e7:4a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:13:30 2026 by rpki-client