Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
File: lt2IX_TTiauqvQOlF10JdBrLpg0.mft (raw, json)
Hash identifier: gQl/hXl3q/drOjhkzCWOjFSU6+pGrXxM7eXjpTnJ0yY=
Subject key identifier: EE:36:1E:A1:B2:3F:ED:5D:25:2C:1E:6A:C0:04:70:B9:50:D8:27:D0
Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
Certificate issuer: /CN=96dd885ff4d389abaabd03a5175d09741acba60d
Certificate serial: 019D9C9A86F8DDB6C880ABACA2BFBC9DFA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
Manifest number: 031B
Signing time: Fri 17 Apr 2026 18:01:05 +0000
Manifest this update: Fri 17 Apr 2026 18:01:05 +0000
Manifest next update: Sat 18 Apr 2026 18:01:05 +0000
Files and hashes: 1: 6kMdvrwU2pCwvdQx9e2jtc6HHm0.roa (hash: qE4aJsmYODQ0nzOFNhlgM1kvgijeIJ6BoQLe8YycTn8=)
2: lt2IX_TTiauqvQOlF10JdBrLpg0.crl (hash: QpZJ4tzWJw52jydvjlWzhnJ3D4nF6QGxIzXrEznD2tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:86:f8:dd:b6:c8:80:ab:ac:a2:bf:bc:9d:fa:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d
Validity
Not Before: Apr 17 18:01:05 2026 GMT
Not After : Apr 18 18:01:05 2026 GMT
Subject: CN=ee361ea1b23fed5d252c1e6ac00470b950d827d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:e9:a3:8a:9a:81:c5:2f:e9:06:0b:8a:ad:
9e:27:fd:96:bd:49:53:5d:64:bd:af:33:ab:f4:8a:
48:43:57:f3:45:67:13:c0:49:7e:b5:eb:a4:27:9d:
78:26:3f:31:d0:b5:ca:96:70:b3:49:b7:26:e5:75:
cb:c1:15:ba:a1:f2:26:bf:e9:a0:40:b7:d2:5a:39:
b3:aa:ad:5d:49:04:a0:4b:eb:95:fa:71:47:c3:bd:
2b:c0:c2:65:9d:1f:1f:a6:62:08:cc:9d:08:ec:a3:
1e:a0:24:53:46:1d:15:8c:09:3d:62:08:f5:53:5a:
40:57:77:89:80:6b:6b:9f:05:de:3b:69:5e:05:f1:
13:35:f8:6d:c1:0b:10:35:be:d1:48:72:df:f5:e0:
4e:4e:b3:e7:b2:bb:22:6e:62:bc:50:4b:e2:22:c7:
c7:e2:53:3a:90:f4:e8:6e:79:1e:e0:fb:8d:b1:82:
8d:0b:10:17:33:fe:a6:2e:52:a4:09:23:16:f0:72:
a3:23:d9:79:30:f6:bc:76:ac:46:1c:b9:50:67:07:
7e:89:44:ed:cc:c3:db:96:e5:b6:b6:eb:69:7f:f9:
15:e8:5c:ef:8e:4d:2b:8d:82:2c:51:e1:91:d2:bd:
b8:c1:b2:8a:53:1c:9a:ed:bf:52:97:a1:71:5b:8c:
4b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:36:1E:A1:B2:3F:ED:5D:25:2C:1E:6A:C0:04:70:B9:50:D8:27:D0
X509v3 Authority Key Identifier:
keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:55:34:86:a7:24:eb:ae:85:93:de:e9:b5:25:1f:07:2d:b6:
7a:68:59:c3:ff:10:d6:7f:24:34:ed:e1:49:a1:8f:60:7a:82:
2d:d7:fc:d0:be:fe:84:eb:16:24:2c:15:88:64:60:37:97:e6:
42:ee:51:a6:c3:35:25:d0:8a:63:f2:f9:f2:04:86:46:fe:8b:
8d:b8:5b:6b:6d:e5:05:cf:5f:42:80:63:a9:0b:c4:80:77:72:
fc:18:f2:f0:a3:97:9e:64:09:09:9a:de:3b:36:ac:b0:27:2b:
dd:e9:be:e1:3a:c5:fb:5d:86:07:49:46:81:ff:b1:15:aa:2e:
79:9b:b6:d2:fc:89:68:73:89:24:0b:2e:e3:3b:8f:12:0b:1e:
a4:c3:60:a0:76:da:72:2f:3b:b8:64:12:a5:d5:82:39:d3:ef:
05:76:f3:83:c8:4d:ee:23:6c:50:11:a0:03:2c:33:27:07:00:
05:88:6e:7d:6d:9e:5d:19:60:67:8e:4a:39:31:59:49:ad:73:
bf:1c:eb:f9:97:63:a8:d7:68:fc:6c:d8:7a:42:fc:1e:10:38:
da:3e:94:f9:05:2c:21:b1:69:fb:ed:66:ae:72:58:88:e7:6e:
59:19:8e:6d:b2:a2:bf:f2:af:e7:ac:4c:59:20:e8:46:a8:53:
f9:f6:c0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:14:56 2026 by rpki-client