Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
File: LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft (raw, json)
Hash identifier: EbFl80QUuLNIIQ3jYyWozxYZQJPO1IQb0avazsfp3nM=
Subject key identifier: B3:59:18:11:F7:32:0E:2E:70:20:4D:1E:83:B9:56:F4:FF:FE:FE:1F
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 019D9AABF1BCA7E98E972E60C4782F5DC865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
Manifest number: 01F8
Signing time: Fri 17 Apr 2026 09:00:52 +0000
Manifest this update: Fri 17 Apr 2026 09:00:52 +0000
Manifest next update: Sat 18 Apr 2026 09:00:52 +0000
Files and hashes: 1: DQVqjzC5rdONHq62ZKGqNPJyrRw.roa (hash: dDYajOCYrao79EK9Kj5vMqOndXhk7A3V1BOKDwNdvCc=)
2: LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl (hash: vDN0mmbH6u6Hq3jjzoXQ9/j3qn4aQXpTL/A4qmehyp8=)
3: NE7mP6LXofTtetMrz0bZ4gVjQZQ.roa (hash: OKq/sE5vI4Tp87JPYnyleJOP67qF4AH8+fsvJkq27uQ=)
4: c4PWOTsWtb2BHJ2drzbMurS1uj4.roa (hash: GfaIz/k9kQAzF2LqeZrCe55euhWttcaoPzS2hsKifpc=)
5: p38nf1_J-hf5pJoRzzg0ttvCGMc.roa (hash: VNYm4Y42SOlQ9dXOHkzUE+m/pzdyaj+7nbqcjEjzt8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:f1:bc:a7:e9:8e:97:2e:60:c4:78:2f:5d:c8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Apr 17 09:00:52 2026 GMT
Not After : Apr 18 09:00:52 2026 GMT
Subject: CN=b3591811f7320e2e70204d1e83b956f4fffefe1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:ba:46:93:b4:73:9b:22:23:1f:51:42:32:
88:47:1d:0d:a7:54:9a:09:48:45:19:93:00:0d:b9:
dc:f6:82:f6:8e:ac:6f:35:63:d6:b1:c4:79:89:da:
4f:97:3c:af:d4:f6:a0:ee:df:5c:c7:3a:05:70:b0:
f0:9f:7f:bf:1a:bd:f4:56:d0:2c:d0:b4:05:fc:ab:
93:e3:a4:32:61:b6:af:76:fb:4f:b9:60:17:4a:16:
1d:d1:96:9e:0f:e9:7c:ed:da:6b:2d:e2:0a:08:5c:
f5:08:32:6d:f7:ba:ac:2e:98:aa:2e:f7:1b:05:96:
b1:95:09:30:78:95:ad:fe:d1:17:da:e8:4d:95:af:
79:8c:c9:0d:e0:11:a6:93:a5:f6:32:69:6b:7d:e3:
93:9e:ad:76:fc:4d:48:e6:6a:fc:68:4d:88:f3:90:
59:b7:44:84:da:e8:f9:dd:04:5d:b2:6b:30:0b:fe:
1b:3a:51:c7:83:81:5a:48:f6:de:2f:43:e5:47:c8:
a7:d6:85:5c:e5:0c:c2:7b:28:b6:20:e2:3e:26:be:
4f:9b:56:b2:67:56:c7:8f:dd:65:f6:88:a9:bc:8b:
67:8c:15:22:40:37:a7:a2:92:9f:6d:67:01:b9:8a:
ed:e7:0c:30:83:10:d1:a9:38:f1:a5:e8:06:28:5a:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:59:18:11:F7:32:0E:2E:70:20:4D:1E:83:B9:56:F4:FF:FE:FE:1F
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:82:f1:74:91:67:8e:03:e8:27:8d:fb:0e:02:7c:e7:6d:52:
ac:2c:75:cc:f2:b7:b8:0c:fa:84:e9:1e:38:7a:ea:b7:94:57:
7b:45:35:e5:46:1b:a0:cc:6b:35:c4:f9:6f:d2:50:0e:d0:ca:
47:d9:f2:09:89:05:79:1b:d2:9f:37:b8:1f:bb:d4:c6:12:bd:
bb:65:1f:8c:3b:bf:55:38:99:49:84:45:11:fc:c4:f5:7e:9d:
bc:e8:35:08:13:bd:06:1a:9e:45:80:27:d0:11:7a:2d:99:9e:
3a:43:30:73:8e:12:0a:b6:a1:68:3f:46:e1:64:7c:61:c7:62:
e0:e1:5e:17:66:a0:98:dc:e2:57:9d:eb:4a:8b:ca:80:9d:39:
12:0b:7d:d3:ec:1b:75:d9:09:ca:1a:fd:26:c7:15:51:cf:6b:
6e:04:11:6a:4a:3b:87:31:fd:c0:44:3a:1b:54:14:2e:15:bf:
70:ab:9d:2b:79:23:06:d0:e0:50:e9:ab:45:ee:05:d9:b1:aa:
5c:ee:f1:0d:0e:b0:dc:27:30:f3:36:fb:b2:b6:7a:e6:6f:24:
fd:96:19:33:e0:44:18:1f:60:fc:61:f0:71:7a:b5:da:c2:42:
8b:6f:92:9b:93:44:68:a8:0e:6a:47:db:df:81:92:b1:e3:a7:
ad:fa:e6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:48:12 2026 by rpki-client