Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: OAkm8zsGTtknJYVeajul19L5RQG2wSdT2iy9z02dS+0=
Subject key identifier: A4:93:0D:BA:F4:94:03:69:AA:B0:59:7B:67:E1:CF:81:41:BC:B3:B6
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 019E916F5DEE85632466C12E3523AF429440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0CAB
Signing time: Thu 04 Jun 2026 07:00:55 +0000
Manifest this update: Thu 04 Jun 2026 07:00:55 +0000
Manifest next update: Fri 05 Jun 2026 07:00:55 +0000
Files and hashes: 1: MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa (hash: Ef0KimqUfcjmjAh99qPeo3PT6AwZiNEjh0UvdcbEniQ=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: mADMIOBDva5HvxGqbDUS6qAnoAISjvLJfyH2Oi0e1Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:6f:5d:ee:85:63:24:66:c1:2e:35:23:af:42:94:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Jun 4 07:00:55 2026 GMT
Not After : Jun 5 07:00:55 2026 GMT
Subject: CN=a4930dbaf4940369aab0597b67e1cf8141bcb3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:63:dc:26:89:73:c5:b5:c0:67:08:41:80:
dc:c7:55:1f:ae:40:a7:c3:f6:62:a1:3d:6a:7d:d9:
b4:94:83:ab:0c:08:47:04:dc:97:8a:ea:48:a9:de:
02:7d:06:54:06:31:6d:86:f7:39:9f:83:79:56:15:
c6:51:ef:f9:7a:2c:1f:fe:b7:83:42:c9:75:b4:b2:
2d:dc:3e:07:fd:e6:cb:28:9c:76:e9:7e:df:ed:26:
d4:74:f8:2b:10:9d:02:94:0e:80:8b:a9:9f:04:9c:
07:3b:dd:17:2f:85:a0:5e:45:5e:0c:3d:27:c0:ef:
73:f9:93:74:26:ba:26:6e:84:60:5f:fa:d3:80:e4:
31:f0:a8:21:f5:c8:d3:b5:08:aa:8e:30:0d:de:01:
3b:15:85:67:51:00:93:fa:fe:f6:83:f2:19:a0:55:
91:e9:54:23:9a:9e:09:19:d3:da:2c:a6:31:2d:06:
d7:e4:34:36:9a:2f:28:f0:8a:2c:ed:f8:34:53:eb:
80:d9:d3:55:92:02:f3:50:f5:6d:75:11:0e:92:6e:
fe:60:29:58:53:92:50:3d:d4:3b:fe:cc:99:ea:94:
2f:a5:c4:a8:3e:f0:af:01:13:62:00:97:b7:ba:5a:
b5:cf:3e:58:99:5c:5c:45:eb:59:e8:fc:a7:bd:47:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:93:0D:BA:F4:94:03:69:AA:B0:59:7B:67:E1:CF:81:41:BC:B3:B6
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:30:98:7f:7a:d1:c2:ed:da:a6:7a:46:de:3e:be:f8:82:8b:
e0:fe:d6:4d:ff:a3:10:68:69:c8:ff:6e:00:47:c5:60:a2:d7:
57:b1:cc:8e:83:c7:42:12:11:27:96:46:67:7a:cd:76:b8:f2:
da:4c:b5:bb:9a:d7:05:6e:fe:7c:13:09:cd:a9:43:89:6f:06:
c4:82:da:2c:08:d4:a1:4b:12:bc:a4:47:bc:c5:d5:34:bd:06:
48:b7:c7:c7:82:0d:7b:e3:58:e1:00:d2:6f:38:b3:1a:0a:9b:
9c:cc:a2:f8:8c:04:91:f5:c3:ee:56:cc:88:42:9c:25:a2:8f:
87:42:63:88:47:63:3a:d3:b3:f3:32:22:83:1d:7d:21:46:12:
08:84:e2:aa:32:23:cd:7e:66:25:6f:d0:4c:82:3c:37:a5:ae:
bf:16:d3:23:4c:9a:a9:b6:b3:37:52:63:0c:b1:fd:0f:ad:a1:
fc:7b:f1:22:c1:0d:dc:f8:4b:65:14:aa:4a:22:c4:d0:9d:2a:
5a:3e:0d:72:71:d3:9c:44:53:dc:6f:88:66:42:3f:50:e8:6e:
a1:d5:c8:7e:d0:4d:44:82:b8:18:b3:67:41:52:3a:1a:ab:df:
df:88:f2:0a:bc:8a:45:cc:5c:10:25:22:e2:d3:5b:7a:b6:66:
52:48:99:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6Rb13uhWMkZsEuNSOvQpRAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZDk1ZmUyZDkwOTQzYzkyZjZjMjhmM2IzMjlmODIwMTVj
ZDkyYWUwHhcNMjYwNjA0MDcwMDU1WhcNMjYwNjA1MDcwMDU1WjAzMTEwLwYDVQQD
EyhhNDkzMGRiYWY0OTQwMzY5YWFiMDU5N2I2N2UxY2Y4MTQxYmNiM2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYtj3CaJc8W1wGcIQYDcx1UfrkCn
w/ZioT1qfdm0lIOrDAhHBNyXiupIqd4CfQZUBjFthvc5n4N5VhXGUe/5eiwf/reD
Qsl1tLIt3D4H/ebLKJx26X7f7SbUdPgrEJ0ClA6Ai6mfBJwHO90XL4WgXkVeDD0n
wO9z+ZN0JromboRgX/rTgOQx8Kgh9cjTtQiqjjAN3gE7FYVnUQCT+v72g/IZoFWR
6VQjmp4JGdPaLKYxLQbX5DQ2mi8o8Ios7fg0U+uA2dNVkgLzUPVtdREOkm7+YClY
U5JQPdQ7/syZ6pQvpcSoPvCvARNiAJe3ulq1zz5YmVxcRetZ6PynvUdC0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSTDbr0lANpqrBZe2fhz4FBvLO2MB8GA1UdIwQY
MBaAFJbZX+LZCUPJL2wo87Mp+CAVzZKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMmNjMjctOTQ0OC00MzdiLTk3MjIt
ZGM5YjljNjAxM2Y2LzEvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zMmNjMjctOTQ0OC00MzdiLTk3MjItZGM5YjljNjAxM2Y2
LzEvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjCYf3rR
wu3apnpG3j6++IKL4P7WTf+jEGhpyP9uAEfFYKLXV7HMjoPHQhIRJ5ZGZ3rNdrjy
2ky1u5rXBW7+fBMJzalDiW8GxILaLAjUoUsSvKRHvMXVNL0GSLfHx4INe+NY4QDS
bzizGgqbnMyi+IwEkfXD7lbMiEKcJaKPh0JjiEdjOtOz8zIigx19IUYSCITiqjIj
zX5mJW/QTII8N6WuvxbTI0yaqbazN1JjDLH9D62h/HvxIsEN3PhLZRSqSiLE0J0q
Wj4NcnHTnERT3G+IZkI/UOhuodXIftBNRIK4GLNnQVI6Gqvf34jyCryKRcxcECUi
4tNberZmUkiZwA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:08:27 2026 by rpki-client