Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
File: LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft (raw, json)
Hash identifier: gBnnrfj3PZEt5A7rRxWNlDJ4CbqLZJw1aLy3+h0SVcQ=
Subject key identifier: 2F:4B:47:65:F2:C4:DE:38:61:97:10:5B:BD:7D:F8:C3:25:15:0E:F7
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 01A0C0311F637F520AB9C17DF28BD389A7E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
Manifest number: 039B
Signing time: Sun 20 Sep 2026 19:00:39 +0000
Manifest this update: Sun 20 Sep 2026 19:00:39 +0000
Manifest next update: Mon 21 Sep 2026 19:00:39 +0000
Files and hashes: 1: LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl (hash: Z92CySk3q0wvnAsFzxfmvEMEYfbF/Z3Ym7R9tQ7Aat0=)
2: c4PWOTsWtb2BHJ2drzbMurS1uj4.roa (hash: GfaIz/k9kQAzF2LqeZrCe55euhWttcaoPzS2hsKifpc=)
3: x6jgvumw8oDL54hN0MXCYKM2_Z0.roa (hash: 0+zNXAF4ybCppHxdpcgBL9DpQoeamBo0aEiuJ2e3+Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:31:1f:63:7f:52:0a:b9:c1:7d:f2:8b:d3:89:a7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Sep 20 19:00:39 2026 GMT
Not After : Sep 21 19:00:39 2026 GMT
Subject: CN=2f4b4765f2c4de386197105bbd7df8c325150ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:67:97:a8:d1:ea:f8:2d:4c:a9:67:4d:e8:
22:90:96:ff:85:5d:fa:87:de:23:77:90:0e:74:84:
86:f2:b6:72:21:30:5c:75:3a:50:1f:92:54:b5:a8:
07:98:dc:3e:cb:be:e4:4c:0f:19:77:d2:49:6a:3e:
92:9d:36:9e:04:5f:eb:9f:25:0f:7a:d6:68:6e:07:
86:39:71:24:11:da:af:df:c9:1e:51:02:8c:1c:0d:
91:6a:b3:42:be:14:aa:da:e3:41:f5:55:93:18:cc:
99:cb:2a:17:1e:66:45:90:c9:31:4e:17:c4:db:78:
f5:56:fc:ae:f3:b6:e1:56:48:4a:3f:3e:47:3c:40:
00:da:27:0d:c0:c0:cb:f5:af:d0:ec:97:fb:c0:2c:
bf:87:f1:14:4c:a4:59:72:de:1d:69:7c:85:30:75:
64:28:b6:44:00:a1:7f:3d:0e:8c:73:7e:12:5a:e2:
43:f4:9e:45:d4:03:0a:74:8d:4a:a4:00:9c:0c:8e:
a9:61:b8:0a:3b:24:f8:85:55:c4:d1:d0:cb:c4:90:
71:e1:45:e4:a9:d6:b3:71:5d:4b:d4:7f:dc:7a:ea:
a0:bd:ab:bd:b8:56:0d:fc:8e:9b:a4:79:cf:63:86:
1c:91:49:04:10:17:78:26:f4:0e:fa:c9:19:3d:2c:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4B:47:65:F2:C4:DE:38:61:97:10:5B:BD:7D:F8:C3:25:15:0E:F7
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9e:fd:51:90:51:a0:53:c2:60:5e:b6:c4:07:42:ef:fd:db:
ff:4d:d3:44:67:5e:b5:e5:73:65:5d:e5:72:3f:b3:89:ea:26:
df:7d:7f:ff:3c:1e:07:e9:ac:d1:f9:ce:23:22:a3:10:f2:7c:
38:df:da:c9:90:44:8e:c7:0e:0a:24:83:43:56:50:ce:b2:1a:
2d:a1:af:a1:93:95:47:a5:44:3e:13:4a:67:52:78:c8:c5:8a:
79:68:bf:83:90:4c:49:e9:28:f9:b2:92:a7:d0:cb:6c:af:52:
66:d8:5e:d4:02:43:3d:4f:fc:7c:b1:97:59:65:3c:69:27:43:
24:99:02:b7:cb:80:23:8c:fe:36:7f:29:bd:dd:94:02:b0:0e:
dd:b8:43:87:a4:04:d2:d5:2a:3f:50:ee:23:0a:13:d9:2e:38:
aa:79:31:8f:5c:23:41:63:ca:85:39:5d:e6:fd:52:31:f0:35:
69:05:64:53:d5:74:d6:9a:7d:f3:f2:f3:9b:86:d0:de:29:73:
8a:5b:d5:d5:25:b9:95:5a:83:97:ea:da:20:b7:da:02:5a:60:
33:08:50:99:39:24:f7:5b:f5:a6:2e:51:9d:e0:55:5d:4c:bf:
e6:a5:2e:67:f0:6e:72:0d:5f:f1:c6:05:75:ec:ad:a2:9d:e5:
bb:07:08:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:22:34 2026 by rpki-client