Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
File: ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft (raw, json)
Hash identifier: wy31It/qBbc626E7hfSuoR/G0G63CYwd5EXh554ZPP8=
Subject key identifier: CB:8F:12:97:08:95:E4:1E:18:8E:A9:0A:58:43:0C:30:A3:97:E8:62
Authority key identifier: 96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50
Certificate issuer: /CN=96d66966ffda0a5d0e131d134a79d93205c8c550
Certificate serial: 019CA9E5ACFE5E8AEBF1949F6AEDCBFCC4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
Manifest number: 02D0
Signing time: Sun 01 Mar 2026 14:55:27 +0000
Manifest this update: Sun 01 Mar 2026 14:55:27 +0000
Manifest next update: Mon 02 Mar 2026 14:55:27 +0000
Files and hashes: 1: 8xWsq3Ksmca02iiHJdJUQxcFexE.roa (hash: 87bJiUuXc7TUv7OU+ZddkP+23jZwBuJLuJStO3EeuZU=)
2: COArWkWp4H7Fpsqqvu-1UmRg6mU.roa (hash: mQQnglVyiRMK/Nrf0tRpl8G0nODZ3VkTzaOu82uT2J8=)
3: dxbyRDdv09ICKS6ChlM_L9Xumnw.roa (hash: lvevmivI4N4dOsAp3mTKLKEujagdYH7PHaCaaKJbn/g=)
4: ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl (hash: EhIxLxzWqp/Lu0KR3Uq2qmNMs6+cY+EmmkRuqUquVxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:e5:ac:fe:5e:8a:eb:f1:94:9f:6a:ed:cb:fc:c4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d66966ffda0a5d0e131d134a79d93205c8c550
Validity
Not Before: Mar 1 14:55:27 2026 GMT
Not After : Mar 2 14:55:27 2026 GMT
Subject: CN=cb8f12970895e41e188ea90a58430c30a397e862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:42:78:3b:5f:25:98:fc:e4:93:83:23:4f:
90:6c:07:df:e7:03:57:65:bf:b5:6f:45:36:83:d8:
c1:57:ea:90:89:67:2e:70:a8:d2:89:c5:4c:1f:71:
ba:cb:da:19:c5:41:b7:d1:d0:b2:bf:06:d6:d1:5c:
a7:99:0e:76:ee:72:0d:70:c1:56:d5:00:c7:b5:4b:
92:24:21:96:db:af:db:36:eb:b9:52:f9:b9:84:44:
03:1a:93:ea:d5:2a:34:66:ca:6a:66:33:6a:80:64:
fe:24:5e:06:00:87:0c:ed:3a:d9:11:1a:43:c7:ab:
37:27:b9:1d:c7:b8:c9:ab:14:2d:11:5a:d2:bd:1c:
20:17:f2:52:67:c8:b2:6e:69:2f:04:cf:30:c9:1f:
69:67:9a:bc:c9:88:c3:52:e5:e1:72:d5:ce:bb:51:
49:98:82:fe:f9:c8:ad:26:1a:b1:30:dd:93:b9:c6:
f5:66:5e:3b:f9:fa:e3:cd:3e:8a:cb:10:28:42:ce:
e9:7c:50:5d:24:34:19:9d:de:6f:33:ea:49:9f:cc:
e2:4c:44:c4:d0:13:e7:b1:0b:a8:66:3b:a7:8b:ae:
16:a8:85:df:bb:3e:94:69:4a:41:5a:fc:61:a0:af:
d9:7f:52:a7:c3:3c:23:3c:e3:8d:c3:27:a3:f4:74:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8F:12:97:08:95:E4:1E:18:8E:A9:0A:58:43:0C:30:A3:97:E8:62
X509v3 Authority Key Identifier:
keyid:96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e3:8c:03:49:1b:9c:c5:ce:3d:aa:7c:14:d8:55:3d:a2:16:
fa:9c:1f:f4:ba:8d:12:b2:25:6f:28:21:5b:c7:14:69:be:b5:
31:87:50:81:56:9e:16:24:5b:26:97:66:1e:03:1c:0a:6f:08:
49:f2:9e:7f:1a:09:fc:7c:f6:19:e2:ef:4c:d0:b1:e0:7d:fe:
83:fa:ea:7f:54:50:39:bd:20:29:fa:7a:63:de:6f:0c:d5:c8:
f1:7b:da:47:fe:f5:ea:bf:88:a5:16:fb:f7:59:d3:05:a8:6f:
40:43:7f:d6:64:f1:aa:64:3c:e4:82:48:15:20:7b:ae:2d:a8:
40:98:d5:b3:da:d7:aa:73:84:b5:6e:80:26:ed:a7:8e:d5:d0:
b4:33:ff:9c:f9:65:38:8f:54:3c:a1:6a:2b:7e:4b:de:e6:85:
35:d7:18:76:41:90:a0:35:1c:6f:1f:2e:80:54:fd:7d:af:66:
28:9e:fa:50:98:32:52:16:86:03:be:53:b5:38:94:6b:a8:b4:
f7:db:c5:2c:45:d7:e5:9d:c0:03:43:a7:79:0a:d0:5e:0b:16:
94:bc:14:25:20:9c:53:00:dc:9a:d5:75:c3:01:21:a3:19:ba:
77:88:6e:64:37:75:02:75:e3:2d:cb:6a:62:ef:d2:11:94:fc:
3d:b0:b8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:42:54 2026 by rpki-client