Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
File: LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft (raw, json)
Hash identifier: w4C7EAfwOTenLHKffXYBWVqYXpFP9Y8imS0U7xxw3gc=
Subject key identifier: B6:4D:16:42:67:84:97:23:A1:30:0B:0D:3E:91:EF:88:B8:52:88:67
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 019CAA2200C034B1C3011BE61CAD0D71FD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
Manifest number: 017B
Signing time: Sun 01 Mar 2026 16:01:21 +0000
Manifest this update: Sun 01 Mar 2026 16:01:21 +0000
Manifest next update: Mon 02 Mar 2026 16:01:21 +0000
Files and hashes: 1: DQVqjzC5rdONHq62ZKGqNPJyrRw.roa (hash: dDYajOCYrao79EK9Kj5vMqOndXhk7A3V1BOKDwNdvCc=)
2: LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl (hash: CksSdhLH0Mv+e2OFCdYGpLH4zJ1wZaKfuWi039j+Yrc=)
3: NE7mP6LXofTtetMrz0bZ4gVjQZQ.roa (hash: OKq/sE5vI4Tp87JPYnyleJOP67qF4AH8+fsvJkq27uQ=)
4: fE9cNRDKHoumM1hRkT3ZAa2rwPs.roa (hash: Zy3HM17iHdXxNk/UVoAmsPQwfcZdi0N5Gh6yWp44W4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:22:00:c0:34:b1:c3:01:1b:e6:1c:ad:0d:71:fd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Mar 1 16:01:21 2026 GMT
Not After : Mar 2 16:01:21 2026 GMT
Subject: CN=b64d164267849723a1300b0d3e91ef88b8528867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4a:95:93:9e:df:3b:05:70:35:81:cb:f3:27:
74:b8:e7:8a:c4:3e:59:91:1d:6b:60:15:98:71:cf:
86:7b:f1:36:7a:8f:cf:c2:9d:fe:d6:9e:06:c1:2f:
7d:ac:68:72:89:08:1c:8e:8b:6d:0b:11:ba:95:8f:
ed:6d:52:a1:78:1e:61:de:b1:fa:9b:6b:3b:65:18:
10:dc:a8:36:c9:b1:de:08:a0:df:37:b9:98:86:32:
f0:0f:c0:f2:4f:a4:a4:fe:3c:fe:eb:27:8a:13:97:
50:d1:cf:79:1c:bb:3d:55:81:ed:13:02:e0:16:85:
fe:c6:bc:59:36:b2:34:1f:4b:3d:b9:1a:48:de:5a:
b4:f4:d7:dd:e7:53:34:a1:8b:af:05:f8:bd:9c:cc:
8a:67:38:20:2d:a8:94:d8:aa:4b:a6:c9:0a:5e:b1:
71:5d:41:8d:fd:71:02:4c:ff:a6:9c:28:00:69:bf:
04:df:b9:fb:95:83:b6:91:61:a4:f8:2a:0e:32:d8:
c5:5e:c4:11:e5:7b:19:d0:9c:2e:1e:7a:46:a3:d6:
ea:47:65:d7:ff:f8:68:e3:7a:90:61:7d:9e:a0:49:
a4:2d:54:c1:68:ff:83:e4:07:18:6a:19:31:75:5b:
e7:be:56:24:ed:5a:80:fa:b0:4b:d2:c4:25:af:75:
3b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4D:16:42:67:84:97:23:A1:30:0B:0D:3E:91:EF:88:B8:52:88:67
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c7:f8:af:d3:7c:3b:eb:24:a8:2e:ee:0a:28:6d:d7:17:57:
5e:28:80:27:34:dd:23:4c:35:f4:71:77:ab:e8:fb:e6:25:a4:
31:d5:94:bf:a2:24:40:74:f1:ec:54:19:cf:fc:22:34:00:85:
be:4f:c3:0d:01:14:84:46:8f:38:90:c1:9f:4c:e7:65:3e:03:
87:9f:4a:77:da:98:43:41:5d:e7:c0:77:95:56:12:49:cf:06:
c9:76:f2:fe:5f:b2:94:9d:74:9f:77:b6:7e:16:45:70:60:d7:
25:1f:c7:a1:a9:4b:e1:2c:0c:a3:90:d3:10:93:83:3b:50:a4:
f9:fc:42:a0:76:b1:f1:5b:ca:e2:07:4d:69:fa:ed:96:4e:7a:
6b:10:be:76:40:6c:27:c3:21:32:28:c4:1c:11:1c:13:92:cb:
d3:97:55:9a:38:7c:27:1f:40:02:ed:c9:5d:01:24:6d:d9:79:
5d:11:7e:1a:24:75:35:7c:68:e8:3f:d9:91:6d:99:47:fc:8c:
7c:81:7a:bc:4b:58:04:85:0f:cc:2e:d7:16:97:4c:80:e9:67:
3b:75:aa:4f:d1:cf:ad:0e:b4:3e:04:1c:84:6e:30:0c:15:95:
74:5b:69:ac:6f:90:3f:12:f7:54:d5:91:dc:af:ce:5a:6d:e0:
24:f3:5f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:40 2026 by rpki-client