Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
File: LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft (raw, json)
Hash identifier: qL9TEt6MODEA4JzejjhNjbO3vYX99HW73e7mLlatBlQ=
Subject key identifier: 2B:73:EF:B6:A0:B5:DB:A9:64:A3:91:C3:84:C8:AE:83:C5:BD:E1:AB
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 019EC1B7593C2B79C3F73B0D45CD131257FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
Manifest number: 0292
Signing time: Sat 13 Jun 2026 16:01:18 +0000
Manifest this update: Sat 13 Jun 2026 16:01:18 +0000
Manifest next update: Sun 14 Jun 2026 16:01:18 +0000
Files and hashes: 1: Bf-kgPolKWlpqLCjiXuRyWUMvOg.roa (hash: MYsif03ryw6vdmDjCofd2KTIbWmT1q0FEmKDj3mHFcA=)
2: LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl (hash: JiUuGUnQ2ppZE36AGpUc0fhblQ8fEzFYZejXdbyuPd8=)
3: c4PWOTsWtb2BHJ2drzbMurS1uj4.roa (hash: GfaIz/k9kQAzF2LqeZrCe55euhWttcaoPzS2hsKifpc=)
4: p38nf1_J-hf5pJoRzzg0ttvCGMc.roa (hash: VNYm4Y42SOlQ9dXOHkzUE+m/pzdyaj+7nbqcjEjzt8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:59:3c:2b:79:c3:f7:3b:0d:45:cd:13:12:57:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Jun 13 16:01:18 2026 GMT
Not After : Jun 14 16:01:18 2026 GMT
Subject: CN=2b73efb6a0b5dba964a391c384c8ae83c5bde1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:c4:13:75:70:e1:a5:94:97:94:0b:66:0e:
0d:d6:d3:2c:23:10:d1:13:ed:61:73:8f:61:c5:d4:
a4:d6:c5:52:9f:2e:99:b2:e2:43:73:c3:57:88:b6:
9f:ae:3f:30:dc:13:28:8f:d2:5b:e3:e5:58:fc:31:
82:ae:b4:e0:a7:ac:cd:ed:8f:8c:68:ec:8e:30:50:
41:d4:9e:ca:4a:46:29:66:49:d6:6a:08:fe:56:e1:
45:ff:1f:2f:0c:f8:95:13:ee:0e:44:f6:3c:7f:22:
98:99:a4:ea:f5:a8:a6:fb:c3:7d:ce:68:ae:00:ba:
b1:c8:6b:58:42:55:74:cf:56:17:fc:d9:a6:b8:db:
80:64:3d:45:32:bf:51:01:f1:d7:ab:aa:e5:da:1e:
40:37:8a:7d:ea:91:a3:8d:60:cb:16:54:00:6b:c5:
f7:3c:8d:00:83:cf:2c:5f:2a:00:04:9f:77:8a:1d:
1c:6c:15:5c:f9:29:59:df:67:31:37:29:90:97:7d:
93:f9:00:6a:ba:8e:a6:02:be:f3:ce:27:5a:53:e9:
1a:8e:fc:80:35:01:7d:a1:1b:5a:c5:70:49:13:cb:
41:1c:d3:70:93:9c:c0:9c:b7:2f:3d:5e:0b:96:4b:
35:c4:df:d3:5b:6b:25:86:03:d4:c7:7d:81:cb:4c:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:73:EF:B6:A0:B5:DB:A9:64:A3:91:C3:84:C8:AE:83:C5:BD:E1:AB
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d2:e2:71:41:10:13:22:8a:d7:a8:44:8d:cf:63:c1:3e:06:
a2:62:7e:43:57:8a:42:be:99:de:bb:89:92:c5:63:57:bb:85:
d9:da:6c:2a:b2:bd:87:b5:cb:6b:29:db:b3:39:16:91:1c:42:
d1:66:38:2b:71:a7:51:5e:c5:d5:f7:ec:83:b3:ec:43:1b:91:
a9:f8:6d:54:1d:cb:b8:9c:57:ba:7b:62:af:2b:ec:85:4a:6a:
3c:34:3d:62:97:f4:5a:5e:d5:33:d7:a7:99:b4:16:c1:9e:93:
c0:de:5f:df:c3:57:46:a0:52:ec:62:4a:9a:2d:73:7e:9a:b0:
78:4f:ab:46:8a:57:90:c6:1f:23:bf:4a:57:31:bb:89:ff:a2:
5c:d4:09:ab:fc:cb:41:b4:8c:02:7f:bd:78:36:fd:a5:d0:ec:
bd:2b:06:67:aa:b5:f6:c7:b4:32:e8:8e:5e:f4:02:85:09:b4:
27:3b:bb:6a:93:04:61:ac:4f:c3:fc:11:11:ec:7a:d2:d9:c1:
ed:2f:b2:59:98:b6:e5:5d:1a:ae:87:cf:2d:2e:de:d0:64:62:
8a:d2:1f:52:22:3e:53:2c:ea:6e:7e:e7:91:37:59:ee:ef:78:
ec:2d:c1:3b:b7:4b:2d:a9:93:56:72:b8:6e:c9:cc:5f:5a:c9:
1e:45:52:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:30:58 2026 by rpki-client