Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
File: Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft (raw, json)
Hash identifier: VUwr7dPMxIxXDhPoZoCh419SpRXooYLRzpeWAxQntNM=
Subject key identifier: 31:73:A1:EF:2E:79:B3:8C:91:E7:AB:D9:0A:BF:B4:22:89:27:52:8D
Authority key identifier: 2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
Certificate issuer: /CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Certificate serial: 019D98BD3B45BE1EE144859F975B2D050E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
Manifest number: 08EE
Signing time: Fri 17 Apr 2026 00:00:31 +0000
Manifest this update: Fri 17 Apr 2026 00:00:31 +0000
Manifest next update: Sat 18 Apr 2026 00:00:31 +0000
Files and hashes: 1: Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl (hash: arPcMonA/uOQDJj7oa5lmdGQuMScRlrDtGyTmvZ+9z4=)
2: RCbtWtfNbNugIvs-Dmql2deK4Ko.roa (hash: Rgh4Ci+jMhlRgR9C2JdR2931yRKR2EjS9oS9ki8UOrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:3b:45:be:1e:e1:44:85:9f:97:5b:2d:05:0e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Validity
Not Before: Apr 17 00:00:31 2026 GMT
Not After : Apr 18 00:00:31 2026 GMT
Subject: CN=3173a1ef2e79b38c91e7abd90abfb4228927528d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b8:6e:b8:4e:a4:c8:d8:3b:6b:08:a7:79:ab:
a0:e0:17:ad:57:59:7f:a0:42:93:32:e9:d0:a4:c1:
89:27:74:63:b4:26:6d:a2:29:b1:4b:4b:91:d8:43:
d5:f4:25:19:b9:b3:93:eb:d5:dd:f3:36:4e:49:14:
08:12:ea:7e:e0:4c:5a:74:c8:4d:67:84:e2:fe:d2:
49:84:b0:31:94:b0:8e:b0:7d:84:fb:13:81:dd:d5:
e3:ae:9c:21:db:a0:b2:52:28:86:13:44:e9:e6:55:
1e:ab:45:df:64:e4:72:1b:49:00:e9:bb:0b:46:ec:
68:89:73:46:c4:a4:1d:df:ea:b2:5e:8f:47:82:b1:
9f:81:96:d5:bc:2c:3c:5d:8f:54:a3:55:49:fa:ce:
34:ae:b6:11:68:fe:c7:1d:70:0c:e9:74:f2:65:d6:
47:c5:7d:ca:71:30:cb:93:94:9f:c7:9a:8f:26:03:
1d:82:3d:0d:3c:44:96:02:02:e5:b8:ad:73:45:45:
c6:52:d4:35:18:34:76:4a:d3:ed:76:8e:22:1a:04:
6f:ec:ca:af:73:54:33:7c:13:3b:b1:ab:11:a2:41:
ff:68:d8:37:d3:87:5c:86:b6:1b:8c:f8:1e:75:60:
8a:18:cb:2a:10:fb:61:fc:f8:b8:3f:ba:a1:e8:2b:
c7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:73:A1:EF:2E:79:B3:8C:91:E7:AB:D9:0A:BF:B4:22:89:27:52:8D
X509v3 Authority Key Identifier:
keyid:2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:48:52:6e:9d:2f:5b:d8:df:36:63:00:f1:b2:e1:86:60:6b:
43:6f:23:2b:63:a2:bf:c4:6e:5f:da:c6:5e:8d:b7:21:33:2d:
10:10:93:22:cf:cf:3a:0f:de:8f:82:90:99:2f:88:2a:87:87:
f5:c2:02:8e:a8:a0:f3:c9:4d:e7:6d:4a:8e:44:be:b5:f9:5e:
64:9d:ff:8a:bd:ca:4b:ef:b6:6e:2b:22:38:68:51:27:de:a7:
92:77:a2:31:16:24:ff:65:c6:60:47:ea:0b:8f:91:ab:48:c2:
95:06:1f:71:8d:eb:10:d9:57:4d:59:77:25:69:2b:61:e4:6c:
14:f0:a5:e9:5f:e9:2e:cc:3f:05:0c:c8:3d:ce:82:fd:85:96:
19:8e:00:2e:23:0b:a6:99:f6:e0:d7:bc:f2:d6:9d:88:38:8b:
f0:94:fe:63:31:15:30:eb:57:a5:73:af:3f:ce:d2:02:43:ea:
dd:89:05:d5:5b:56:03:83:d1:eb:ec:d7:42:a9:b7:b2:cd:50:
78:da:d6:96:3b:45:c5:af:00:a8:5d:c0:f9:26:4c:44:59:94:
1c:55:0d:78:97:b0:62:bd:12:92:63:36:4e:02:3c:ea:9f:f6:
c5:4e:dc:61:a6:43:27:e2:62:b2:67:70:b0:3b:2a:38:4e:a5:
94:12:80:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvTtFvh7hRIWfl1stBQ4zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZDdmYmMxZGYwMDcwYWNmNWIzYTY3Y2U0ZTIxMmRiZDAz
YWZhZDcwHhcNMjYwNDE3MDAwMDMxWhcNMjYwNDE4MDAwMDMxWjAzMTEwLwYDVQQD
EygzMTczYTFlZjJlNzliMzhjOTFlN2FiZDkwYWJmYjQyMjg5Mjc1MjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rhuuE6kyNg7awineaug4BetV1l/
oEKTMunQpMGJJ3RjtCZtoimxS0uR2EPV9CUZubOT69Xd8zZOSRQIEup+4ExadMhN
Z4Ti/tJJhLAxlLCOsH2E+xOB3dXjrpwh26CyUiiGE0Tp5lUeq0XfZORyG0kA6bsL
RuxoiXNGxKQd3+qyXo9HgrGfgZbVvCw8XY9Uo1VJ+s40rrYRaP7HHXAM6XTyZdZH
xX3KcTDLk5Sfx5qPJgMdgj0NPESWAgLluK1zRUXGUtQ1GDR2StPtdo4iGgRv7Mqv
c1QzfBM7sasRokH/aNg304dchrYbjPgedWCKGMsqEPth/Pi4P7qh6CvHIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFzoe8uebOMkeer2Qq/tCKJJ1KNMB8GA1UdIwQY
MBaAFC7X+8HfAHCs9bOmfOTiEtvQOvrXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHRmN3dkOEFjS3oxczZaODVPSVMyOUE2LXRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NTJlNjgtNjExZC00YWQ4LWE3ZTEt
NDhiZmFjMmNkYzcyLzEvTHRmN3dkOEFjS3oxczZaODVPSVMyOUE2LXRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81NTJlNjgtNjExZC00YWQ4LWE3ZTEtNDhiZmFjMmNkYzcy
LzEvTHRmN3dkOEFjS3oxczZaODVPSVMyOUE2LXRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUhSbp0v
W9jfNmMA8bLhhmBrQ28jK2Oiv8RuX9rGXo23ITMtEBCTIs/POg/ej4KQmS+IKoeH
9cICjqig88lN521KjkS+tfleZJ3/ir3KS++2bisiOGhRJ96nkneiMRYk/2XGYEfq
C4+Rq0jClQYfcY3rENlXTVl3JWkrYeRsFPCl6V/pLsw/BQzIPc6C/YWWGY4ALiML
ppn24Ne88tadiDiL8JT+YzEVMOtXpXOvP87SAkPq3YkF1VtWA4PR6+zXQqm3ss1Q
eNrWljtFxa8AqF3A+SZMRFmUHFUNeJewYr0SkmM2TgI86p/2xU7cYaZDJ+Jismdw
sDsqOE6llBKALA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:03 2026 by rpki-client