Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
File: LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft (raw, json)
Hash identifier: 1Kz2xZ1pauw7wL6/FWRLsvjGnH7Fm7H/5r8mcTNGRhs=
Subject key identifier: 67:B5:0B:0B:9A:22:80:E1:A9:B2:45:7A:C2:03:6D:D2:1F:E6:FE:07
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 019D9C9A926704A5BF6BEDC05CF4B4F3E1EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
Manifest number: 01F9
Signing time: Fri 17 Apr 2026 18:01:08 +0000
Manifest this update: Fri 17 Apr 2026 18:01:08 +0000
Manifest next update: Sat 18 Apr 2026 18:01:08 +0000
Files and hashes: 1: DQVqjzC5rdONHq62ZKGqNPJyrRw.roa (hash: dDYajOCYrao79EK9Kj5vMqOndXhk7A3V1BOKDwNdvCc=)
2: LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl (hash: YlW05TOv/dv5s6rIfYFbGb5qzi74z/7d3ThjtQZljK4=)
3: NE7mP6LXofTtetMrz0bZ4gVjQZQ.roa (hash: OKq/sE5vI4Tp87JPYnyleJOP67qF4AH8+fsvJkq27uQ=)
4: c4PWOTsWtb2BHJ2drzbMurS1uj4.roa (hash: GfaIz/k9kQAzF2LqeZrCe55euhWttcaoPzS2hsKifpc=)
5: p38nf1_J-hf5pJoRzzg0ttvCGMc.roa (hash: VNYm4Y42SOlQ9dXOHkzUE+m/pzdyaj+7nbqcjEjzt8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:92:67:04:a5:bf:6b:ed:c0:5c:f4:b4:f3:e1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Apr 17 18:01:08 2026 GMT
Not After : Apr 18 18:01:08 2026 GMT
Subject: CN=67b50b0b9a2280e1a9b2457ac2036dd21fe6fe07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:31:38:df:b9:fe:4c:df:cf:3d:8e:55:5e:
50:ca:ef:bb:41:d2:9c:df:14:94:1b:fb:2e:96:35:
97:74:5e:da:37:0d:c7:78:65:cc:cc:dc:06:e2:2f:
b7:fc:b4:5e:3e:71:62:b7:1c:f9:73:a1:c4:7e:c9:
50:6a:b9:f6:c7:05:21:4b:3a:2f:82:f6:9d:50:59:
8e:44:ac:89:14:1e:1f:6d:6a:ad:27:bf:22:b5:55:
80:4f:a8:31:71:1f:9a:ba:14:cf:20:aa:22:8c:d7:
e5:6f:38:bb:1a:16:8b:d5:73:c6:52:8e:3d:85:c7:
44:ed:07:d2:2a:9e:50:c4:83:50:ad:98:ac:de:60:
1f:46:19:a1:5b:ae:05:76:04:77:ae:a6:79:87:af:
7f:53:95:ad:0b:fc:35:95:7c:c2:3e:4e:33:4a:b8:
c4:6f:fc:19:60:16:bd:7c:27:09:3b:63:7d:ee:aa:
70:9f:83:ab:2e:57:3d:40:cd:bd:ff:13:74:52:97:
21:41:73:92:ea:3f:dd:2b:66:e7:00:22:b3:ec:41:
0d:07:3b:76:bd:f9:70:2d:99:ee:8b:43:a8:28:9f:
e2:a0:e8:92:7d:7b:ed:71:8a:64:6a:35:14:b1:8e:
21:5b:d6:5f:9b:30:be:9b:df:0a:92:eb:2e:7c:8c:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B5:0B:0B:9A:22:80:E1:A9:B2:45:7A:C2:03:6D:D2:1F:E6:FE:07
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:da:7b:7e:bd:0a:e2:93:ce:65:53:d2:aa:cb:fe:51:24:ad:
1b:09:05:24:b7:e8:8a:1c:5d:9b:a7:6c:28:91:88:72:90:7b:
44:76:dd:70:b3:67:52:a1:eb:81:3e:8c:48:da:83:d0:8b:0a:
82:eb:67:8a:bb:e3:24:92:7c:41:4e:ff:2b:9b:bb:b3:9f:2a:
2a:2b:b8:b9:44:e0:2b:63:69:d9:4c:e3:2c:64:c6:27:1d:b7:
ed:0b:52:b6:f3:0f:9b:bb:d7:d6:74:11:56:d3:2d:02:0a:e1:
2b:5c:fd:63:48:65:cc:33:c5:ab:60:ff:e3:0e:08:78:02:17:
ce:94:ce:3d:99:68:f1:57:5a:c9:4f:44:44:a0:c6:aa:dc:78:
6a:27:82:25:9a:72:67:be:6e:41:0b:96:8e:95:26:a5:d2:49:
cb:e0:77:3d:f0:88:8f:b8:4c:52:dd:73:57:24:79:07:a4:bd:
d5:98:c5:b3:d4:52:2b:04:11:aa:78:2b:42:cd:26:c5:e9:58:
94:53:2f:94:e7:b8:09:64:e7:9c:b3:6a:56:77:6d:c4:b2:a1:
01:ef:25:17:83:53:38:d8:23:a4:57:33:fb:1f:46:3b:74:e9:
8b:2b:ad:8b:53:fa:70:eb:37:c3:a5:01:03:75:f5:a5:71:00:
fb:d5:51:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:56 2026 by rpki-client