
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
File: LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft (raw, json)
Hash identifier: EUs8KAasb7isPTgIK3Ic15cXT8hghsrSlFmvnge5AcQ=
Subject key identifier: 2D:8A:6C:09:EB:7B:31:92:C5:C1:1F:95:FD:78:A5:13:A3:C1:6D:7A
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 019FAB640D1D0F7DC43235690F6797EBF067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
Manifest number: 030B
Signing time: Wed 29 Jul 2026 01:01:28 +0000
Manifest this update: Wed 29 Jul 2026 01:01:28 +0000
Manifest next update: Thu 30 Jul 2026 01:01:28 +0000
Files and hashes: 1: Bf-kgPolKWlpqLCjiXuRyWUMvOg.roa (hash: MYsif03ryw6vdmDjCofd2KTIbWmT1q0FEmKDj3mHFcA=)
2: LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl (hash: F9CABfDNxmu9qWhPwSdox/MyYJ4Spt3wl34mMhhtn/I=)
3: c4PWOTsWtb2BHJ2drzbMurS1uj4.roa (hash: GfaIz/k9kQAzF2LqeZrCe55euhWttcaoPzS2hsKifpc=)
4: p38nf1_J-hf5pJoRzzg0ttvCGMc.roa (hash: VNYm4Y42SOlQ9dXOHkzUE+m/pzdyaj+7nbqcjEjzt8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:64:0d:1d:0f:7d:c4:32:35:69:0f:67:97:eb:f0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Jul 29 01:01:28 2026 GMT
Not After : Jul 30 01:01:28 2026 GMT
Subject: CN=2d8a6c09eb7b3192c5c11f95fd78a513a3c16d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:15:4b:c5:db:04:38:5c:10:b6:9b:56:c4:
dc:14:be:9b:87:fa:99:83:51:f7:be:6f:1b:21:bb:
00:4e:84:82:4b:18:b1:92:97:9f:ee:ae:51:a8:bb:
28:d7:4b:13:7e:f7:d8:fa:5b:25:c8:13:f2:1d:f6:
16:e6:68:1d:5e:02:4d:8b:f6:7e:ca:e8:ed:6f:c8:
0f:ed:1a:97:8d:8b:34:0a:94:35:c6:75:11:dd:63:
8a:8e:0c:c3:7d:82:4a:41:24:b0:f9:e7:c6:81:9b:
75:1a:21:6e:4e:c8:be:db:5e:78:f5:fa:c3:27:b3:
6a:25:21:a8:12:77:dd:1e:73:6a:f4:ab:38:97:30:
3f:7e:b3:29:01:45:2d:00:7c:1f:fa:d2:af:0a:01:
43:e9:e8:81:7c:02:e3:3f:03:14:01:9b:7d:41:53:
98:73:ab:e9:5b:68:65:b6:16:6b:bc:36:11:b4:f0:
e8:62:26:fd:8f:fc:41:f9:80:aa:31:db:f2:2f:40:
d3:e5:9a:d8:53:9b:1e:6e:5a:13:ef:7e:83:3f:8f:
0f:bf:70:20:cb:36:ec:74:12:c0:d8:b6:90:87:f7:
34:dc:81:82:d2:4e:2c:a5:ab:03:c5:5c:8e:9b:3e:
07:ff:30:58:99:0b:6d:46:5b:9c:be:63:7c:16:0f:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8A:6C:09:EB:7B:31:92:C5:C1:1F:95:FD:78:A5:13:A3:C1:6D:7A
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ed:54:fb:1b:11:7f:3c:40:3b:ee:10:1b:8f:d5:cf:7a:7a:
3c:de:3c:09:df:5c:b0:c2:35:7b:b2:bc:8c:e2:9b:a2:95:50:
f1:4b:30:9a:85:57:8e:e1:b3:b0:16:1b:6f:9e:f9:d2:03:92:
63:ef:39:a2:84:84:a8:7c:2b:11:6e:e7:4f:29:67:4e:4e:47:
bd:21:7f:13:46:59:ef:74:9d:40:4a:f6:8b:16:49:71:92:2b:
d7:6a:2f:b2:54:de:cc:72:37:f7:2f:2e:52:a1:94:84:cb:7b:
20:17:d6:56:c8:2c:f5:41:bc:e3:41:f7:23:1b:0e:e3:04:67:
ba:27:ea:31:0b:4f:68:be:85:59:84:83:6b:5b:b1:c9:cc:7c:
13:c8:88:c2:db:20:99:74:96:cd:fa:79:a3:99:a9:dc:09:cb:
b8:6c:d8:be:75:8d:ac:77:6d:74:8d:ae:c1:b7:83:26:3b:a9:
65:3e:ea:ac:e2:d9:b8:85:cb:93:59:5c:61:a5:b8:21:92:c9:
2b:90:99:c8:11:e2:f8:4d:15:41:65:d4:60:f8:ff:8f:11:3e:
f9:75:70:89:2e:4a:07:ea:48:9f:60:6b:f8:6c:1e:80:a3:e2:
1d:17:20:0d:23:01:64:28:b9:e1:ba:0d:88:ae:ba:72:26:f0:
3d:d6:7d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:47:51 2026 by rpki-client