Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
File: lt2IX_TTiauqvQOlF10JdBrLpg0.mft (raw, json)
Hash identifier: tysYx7zDNKTMUKU9k5Z6m/eZmq8ZiTGQF2bbVJR3mwE=
Subject key identifier: 45:7D:4F:F3:C6:47:FA:91:A9:67:D0:96:8A:F6:3F:4F:55:13:65:BE
Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
Certificate issuer: /CN=96dd885ff4d389abaabd03a5175d09741acba60d
Certificate serial: 01A0D7279578C02B4922E31C3D0AB62FEF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
Manifest number: 04C7
Signing time: Fri 25 Sep 2026 06:01:30 +0000
Manifest this update: Fri 25 Sep 2026 06:01:30 +0000
Manifest next update: Sat 26 Sep 2026 06:01:30 +0000
Files and hashes: 1: 6kMdvrwU2pCwvdQx9e2jtc6HHm0.roa (hash: qE4aJsmYODQ0nzOFNhlgM1kvgijeIJ6BoQLe8YycTn8=)
2: lt2IX_TTiauqvQOlF10JdBrLpg0.crl (hash: qhhC+F5H+kihB5YQZtNstTavfis/5wMxhkU9V0xAF9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:95:78:c0:2b:49:22:e3:1c:3d:0a:b6:2f:ef:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d
Validity
Not Before: Sep 25 06:01:30 2026 GMT
Not After : Sep 26 06:01:30 2026 GMT
Subject: CN=457d4ff3c647fa91a967d0968af63f4f551365be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:0c:a3:58:33:1c:4b:6c:eb:e3:66:26:60:
86:75:9c:4d:c4:a6:95:fc:23:a2:cb:65:f2:f3:9f:
98:5f:d5:cd:c7:29:3e:e9:ef:35:a8:13:4b:c3:59:
94:96:78:5b:27:e2:14:f4:8a:97:66:f4:fe:aa:a9:
bc:96:a4:7a:ee:3b:4b:1c:05:31:cd:28:a0:8c:78:
bd:87:7b:08:f7:0f:ed:96:9e:2b:82:d1:c1:22:a1:
02:4b:8c:a0:b7:21:26:af:b7:eb:b2:1a:51:50:27:
09:c6:f5:dc:c4:8a:b2:e3:6d:1e:33:71:55:db:44:
10:d7:8f:59:58:42:dc:6c:94:d7:4a:3a:66:27:77:
08:e2:a5:81:5e:73:ab:38:39:91:3b:07:bd:ca:6b:
3a:db:f1:34:c4:33:1d:e4:5b:c2:a5:81:58:55:62:
40:9f:7d:44:3e:8a:8b:f1:fe:c6:b4:7b:e8:dd:29:
87:85:c7:84:0e:2a:84:9e:64:3c:1c:e3:92:a7:87:
77:02:17:b9:6c:f2:92:b8:b1:08:63:6f:37:9b:e8:
36:62:17:e1:85:92:73:01:34:53:56:ea:e1:d1:5b:
9b:f9:82:5c:4c:5d:ea:7b:ce:ef:1b:22:ff:26:c0:
d2:0c:9a:40:ad:ba:58:f3:63:7b:1c:9a:ec:df:d1:
2d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7D:4F:F3:C6:47:FA:91:A9:67:D0:96:8A:F6:3F:4F:55:13:65:BE
X509v3 Authority Key Identifier:
keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ba:fe:89:85:6b:e2:27:e1:48:d0:b8:6a:71:d6:cc:93:23:
af:8f:4a:1d:fa:31:7c:a5:73:4e:1f:8c:72:5a:e5:f1:e7:8c:
62:55:fb:e0:6c:e8:9d:a9:4b:6e:0a:5b:5a:64:ba:61:5b:06:
28:e3:86:43:58:e7:c8:5a:29:a3:f1:cc:55:97:c0:85:29:43:
18:54:e4:77:5b:f4:ac:50:96:bc:43:c7:c6:0a:0a:8e:be:2a:
0b:c2:bc:c4:6b:b3:ef:a7:dd:64:17:34:cf:85:b4:2f:f8:0a:
68:69:a5:e2:2c:58:d8:6a:58:98:46:18:6d:b6:95:c7:b0:36:
94:06:62:5f:07:5a:d2:c0:0f:88:7a:55:29:c6:09:f7:8f:e7:
be:a9:ff:b5:f3:22:63:2c:97:c7:b9:6a:5b:13:38:98:02:b3:
fe:84:eb:d3:ac:46:3d:49:d0:d8:9d:61:92:89:22:cd:6d:29:
a3:d9:e4:9d:73:55:d4:2c:8d:d7:02:c2:14:82:d8:57:67:5f:
23:3a:68:d0:bc:6e:96:bc:47:f7:b5:0c:0e:43:5a:58:fb:df:
c0:a9:e0:05:3c:29:46:ac:e9:ba:ad:c8:5e:7e:59:3e:6d:11:
e0:c1:19:fe:a7:ef:d7:17:ea:d8:14:71:ed:0f:90:99:a2:20:
fd:ad:77:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:12:26 2026 by rpki-client