Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
File: ltzrqozTLcS_HWbQhzobbz1zSY8.mft (raw, json)
Hash identifier: ZfMiuyQ+n/jjSREIdENXh2CEwUHFKCyrXPr0eL4PXrQ=
Subject key identifier: 66:FE:1B:50:B0:47:E4:16:A3:BB:97:3E:D7:16:E8:CE:29:8A:B6:2D
Authority key identifier: 96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
Certificate issuer: /CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Certificate serial: 019D38D34DFF514F2FC56CD0E3B519A6AA38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:05 +0000
Manifest this update: Sun 29 Mar 2026 09:01:05 +0000
Manifest next update: Mon 30 Mar 2026 09:01:05 +0000
Files and hashes: 1: ltzrqozTLcS_HWbQhzobbz1zSY8.crl (hash: 8p8LX0IC1jIi0R1GJRN1PLANFOqV5rlGUQIWqHug9Jw=)
2: xyVPs0ecwv7hgKVZwIDRh0zqfGM.roa (hash: V+bXCXbV9NnDV0p52d/jRRKy0cavlH8sSqLEer0tVtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4d:ff:51:4f:2f:c5:6c:d0:e3:b5:19:a6:aa:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Validity
Not Before: Mar 29 09:01:05 2026 GMT
Not After : Mar 30 09:01:05 2026 GMT
Subject: CN=66fe1b50b047e416a3bb973ed716e8ce298ab62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:95:a6:41:a1:2f:a8:e9:1d:7f:a5:e7:ce:
8b:1b:ef:50:e4:eb:e6:61:25:5e:72:1a:e1:ff:79:
85:47:fe:11:fa:3a:83:8e:44:74:41:e7:59:b0:ee:
98:00:83:89:92:47:08:88:a3:f9:25:49:26:1b:1e:
33:65:98:35:85:9a:76:8f:be:8e:f9:e3:1d:aa:f2:
db:80:b0:e1:0f:90:7e:31:23:64:ca:94:c5:36:c7:
6d:f4:f4:ec:e5:dd:49:89:72:4c:af:5f:ad:21:45:
ab:3a:95:6d:3a:f5:15:18:dd:19:0c:ce:db:0b:20:
2c:d6:ac:de:e3:d2:f9:7b:87:4b:08:04:69:3d:07:
21:83:41:0f:90:64:0a:10:db:20:14:49:46:9a:75:
e2:10:92:68:ca:9b:ad:a3:49:1a:3f:d4:36:a6:ce:
e4:a2:f7:e8:51:c7:17:6d:04:f8:9f:84:59:c4:7c:
53:2e:8e:36:d8:26:8c:90:97:47:e4:f5:6b:db:d3:
22:8c:9e:28:63:69:27:5d:c3:dd:09:87:3a:33:f6:
fc:5b:43:40:96:de:67:fe:7e:91:b5:17:ca:6b:2a:
fc:9b:0f:7c:e3:98:23:93:41:a0:77:29:cf:12:66:
d2:c6:a6:2c:8e:7f:e9:a0:cf:e1:5a:53:d9:66:a1:
c3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FE:1B:50:B0:47:E4:16:A3:BB:97:3E:D7:16:E8:CE:29:8A:B6:2D
X509v3 Authority Key Identifier:
keyid:96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:14:77:f7:6d:3c:5b:ad:75:31:f5:47:0b:76:42:66:a1:ff:
f0:26:68:94:04:8c:fe:89:a7:36:40:51:42:a4:4a:fc:73:a0:
4d:4f:46:2b:98:6e:94:d4:3e:04:c8:36:cf:6a:2a:16:72:c4:
f4:27:99:da:25:6c:ab:c0:b8:4f:01:8b:15:38:f7:67:21:ac:
80:fb:f6:4d:b1:21:56:8f:7a:83:27:70:0f:87:46:1b:ee:34:
fe:12:d7:07:2d:be:45:49:86:c3:4b:27:3e:6a:c9:2c:a6:60:
0d:f5:8b:81:e4:41:e7:a6:9d:58:9b:14:2c:3d:0a:e0:c7:56:
58:41:52:90:dc:7f:e2:7b:f4:bc:eb:29:28:7d:12:77:d7:a6:
40:6a:b5:55:0e:c8:c2:f4:c4:df:3c:a8:e4:4b:fa:ef:11:34:
e4:af:c8:98:fe:c6:06:0b:ab:49:0f:88:d4:a2:fb:27:8c:57:
65:01:f6:02:77:d2:c8:8a:ba:49:d5:5b:b8:db:10:c0:1e:5a:
4a:bb:6e:99:66:1e:fc:a5:5c:b6:0e:8f:44:23:96:2e:2d:20:
64:ff:06:b0:be:d5:25:87:84:74:8c:ad:84:c6:4a:b0:b4:2b:
88:77:a6:e4:f5:cb:be:d3:a3:75:b3:27:c1:27:87:4e:1b:c8:
f9:87:48:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:06 2026 by rpki-client