Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: OWQWC2X/OC9y33xfl8dl8lYDXYR/jJRnDiON17KNfeM=
Subject key identifier: 56:29:02:13:C7:1A:21:84:5A:EC:20:42:E4:FE:9D:57:34:9C:2D:A5
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 019D37BFFD7CB2B9D748B8BA70764E101D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0BF8
Signing time: Sun 29 Mar 2026 04:00:22 +0000
Manifest this update: Sun 29 Mar 2026 04:00:22 +0000
Manifest next update: Mon 30 Mar 2026 04:00:22 +0000
Files and hashes: 1: MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa (hash: Ef0KimqUfcjmjAh99qPeo3PT6AwZiNEjh0UvdcbEniQ=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: p5oky4XtOTg4bGLcNCwBk854Kl9YTy84ABFD1ehvFNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:fd:7c:b2:b9:d7:48:b8:ba:70:76:4e:10:1d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Mar 29 04:00:22 2026 GMT
Not After : Mar 30 04:00:22 2026 GMT
Subject: CN=56290213c71a21845aec2042e4fe9d57349c2da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:51:89:09:ef:5a:46:0b:d6:e3:cf:a2:52:
19:c0:59:3f:47:6b:92:67:1b:2b:55:58:0a:97:68:
11:e2:2e:9a:95:fe:b6:e5:c3:80:51:85:6f:b9:b3:
27:2b:11:79:85:8f:b9:f2:df:e3:83:f2:08:da:36:
ca:88:32:63:29:7f:ae:cb:c6:46:a1:e1:7b:d7:7c:
85:10:9c:77:f6:cb:d6:a8:92:bc:35:15:aa:3e:1f:
da:2b:e4:f9:57:b7:f8:8e:21:54:c7:dd:ef:0b:83:
53:7d:80:18:2b:d0:fe:36:bf:02:a1:53:22:04:fc:
e6:d7:64:ba:da:00:98:43:49:c2:d0:3a:18:1b:42:
d4:c3:34:62:ef:6b:52:0e:cb:d5:b8:b7:7a:2b:3f:
87:3e:a0:85:62:ab:0f:92:84:9c:1d:2a:cb:b0:5e:
33:a9:c9:9c:be:5b:7b:88:8d:3f:3a:b4:48:95:df:
f8:07:40:0f:05:86:ee:1d:12:e7:e2:69:37:66:ea:
bf:29:bd:15:b7:3c:13:b7:13:08:4a:6c:fd:71:15:
3f:38:5e:6d:f5:04:0a:fc:56:a0:00:f1:b5:53:5d:
ab:13:0c:09:36:d0:77:cd:84:6c:21:51:6e:f1:d3:
d3:10:1e:cc:9f:61:22:1a:46:fc:d9:c8:67:a2:2b:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:29:02:13:C7:1A:21:84:5A:EC:20:42:E4:FE:9D:57:34:9C:2D:A5
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a5:c3:58:fe:9c:8e:2e:bf:21:e0:f7:6e:c4:35:a3:fa:d4:
84:bb:38:20:aa:6a:e6:c3:e3:8b:4d:3c:17:b5:d4:fc:79:07:
f9:c6:1a:7b:7b:d9:cb:6a:16:75:b7:e5:f4:77:38:69:25:c0:
95:75:73:8f:27:45:c9:c2:55:1f:d6:13:bf:d8:f3:a6:c4:c3:
ab:79:75:9a:ea:3e:e4:9a:f0:23:cc:7e:e7:00:f6:4b:cd:5e:
4e:4b:8b:f7:79:55:b3:e6:80:c5:c1:8b:cd:e2:68:81:71:3f:
7a:a5:f2:b5:48:0f:70:a7:35:a5:4a:11:11:d1:43:6d:23:60:
8b:79:89:4c:33:32:a5:c4:91:8b:23:87:14:4c:f6:b6:13:bc:
4c:1e:28:ff:d0:9a:be:4a:17:ed:71:73:95:b3:48:f9:d2:c5:
b1:59:8a:68:65:d8:f1:5b:18:3e:f4:91:8b:e8:de:ce:28:b9:
74:df:e3:8a:07:db:f0:a8:2c:07:4e:3f:5b:90:0d:a6:11:1e:
0e:6d:96:96:7f:78:ca:c0:0e:bd:42:d7:85:15:62:f8:3d:ed:
c3:f5:cd:4c:f0:06:51:b1:e3:02:a9:da:f3:24:8f:a9:96:7f:
a2:a4:e3:55:fb:68:57:82:aa:50:7a:61:2b:fe:db:ce:83:7e:
e8:f0:2e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:06 2026 by rpki-client