Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
File: lt2IX_TTiauqvQOlF10JdBrLpg0.mft (raw, json)
Hash identifier: EpaoHvW1Tllgx3A6NLk8a39kiV3AqCRPS0TrFU3YXsE=
Subject key identifier: 70:16:29:36:80:27:13:86:E7:43:AD:10:C8:5E:05:E9:11:67:65:1C
Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
Certificate issuer: /CN=96dd885ff4d389abaabd03a5175d09741acba60d
Certificate serial: 019CAD22B8754189B495CBF83FD92F9D1890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
Manifest number: 029F
Signing time: Mon 02 Mar 2026 06:00:59 +0000
Manifest this update: Mon 02 Mar 2026 06:00:59 +0000
Manifest next update: Tue 03 Mar 2026 06:00:59 +0000
Files and hashes: 1: 6kMdvrwU2pCwvdQx9e2jtc6HHm0.roa (hash: qE4aJsmYODQ0nzOFNhlgM1kvgijeIJ6BoQLe8YycTn8=)
2: lt2IX_TTiauqvQOlF10JdBrLpg0.crl (hash: lA8Dk+vk883VEggv8VFpCUE7d2yocoJh8vj4TDf5XZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:b8:75:41:89:b4:95:cb:f8:3f:d9:2f:9d:18:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d
Validity
Not Before: Mar 2 06:00:59 2026 GMT
Not After : Mar 3 06:00:59 2026 GMT
Subject: CN=7016293680271386e743ad10c85e05e91167651c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:44:75:17:e1:91:19:82:1d:16:62:40:b9:
18:f3:2d:b2:05:d6:ca:74:9e:23:bf:10:5b:8d:7c:
17:74:5b:e0:c7:53:82:01:90:21:99:34:2f:a2:e1:
0a:76:51:2a:dc:4a:f2:37:66:95:1e:eb:99:cc:9c:
e3:b4:e9:90:b4:12:a5:2f:b4:83:6e:97:33:76:01:
84:60:ac:d6:f4:61:4f:99:85:34:f1:c9:54:83:3a:
0f:ea:1e:32:a1:c2:28:d6:89:9e:b3:57:1e:89:e0:
91:08:57:4b:ff:17:08:c5:2e:70:f2:bd:99:11:cd:
bf:c9:da:76:c5:fe:f3:ca:d2:59:4f:58:8c:3a:87:
8d:d3:0a:5a:f4:e2:47:47:e2:07:42:73:6b:4e:17:
a9:4e:0e:23:a8:dc:3e:aa:c1:98:43:63:3f:36:9d:
75:3b:c3:d8:12:e5:a5:1b:af:63:4b:d3:99:7a:f6:
f7:17:92:4b:48:7e:4b:2e:9b:fe:3a:a4:93:f2:aa:
26:4b:98:5d:cd:f6:95:50:d7:cb:b8:44:92:8b:b3:
86:6d:82:93:ab:df:61:d1:92:22:5f:a6:40:86:05:
cd:a5:93:ab:5b:7c:20:d8:5d:d1:78:1a:9e:b2:05:
b0:16:0d:1f:ff:e1:6d:61:4b:40:a3:c6:fc:f3:a0:
c0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:16:29:36:80:27:13:86:E7:43:AD:10:C8:5E:05:E9:11:67:65:1C
X509v3 Authority Key Identifier:
keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:45:4e:fb:83:83:09:dc:b8:e9:bf:f1:df:1f:66:c2:ce:20:
be:6a:9c:7b:20:da:e3:25:c8:50:8b:5f:5a:9e:a7:23:2a:fc:
60:27:55:36:10:52:97:91:01:88:76:e0:9b:7e:6e:4a:8f:40:
2d:67:87:05:f8:42:5c:49:06:53:57:df:f3:2a:65:bf:cf:a4:
1f:cf:ec:1b:37:4e:8a:ad:c2:06:a5:90:29:74:8d:8a:98:13:
dc:1e:c0:b9:e6:4b:44:cf:d3:57:93:bc:f0:a5:e7:2d:bb:f4:
8d:a6:e7:3a:f1:5c:31:70:08:c6:c2:5f:7f:17:2b:a9:54:27:
a7:e1:cc:14:62:86:96:60:a8:ca:0d:1f:bc:0e:c9:24:6d:8a:
ad:c7:14:42:f5:2b:8e:ff:de:49:de:67:14:ac:40:be:75:35:
ea:7b:2d:92:e7:4e:93:1d:9d:0e:26:4b:f9:8b:eb:6b:1a:47:
e7:a6:d6:8d:f1:e8:10:17:86:d4:da:ff:e8:19:17:5f:66:ec:
fe:a8:82:f0:f8:06:37:60:24:d6:04:9c:dd:6a:0d:a5:26:8b:
11:bb:28:b9:0b:5a:0d:db:46:81:43:13:8a:31:c0:37:b0:e7:
fd:41:13:fd:d0:3c:ad:88:4c:5d:77:97:c6:16:83:fb:22:6c:
e1:d2:7a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:57 2026 by rpki-client