Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
File: Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft (raw, json)
Hash identifier: LzCr+sWLF05JXDIEmH6BLUKYha+gqpDJFbUIQu8MPm8=
Subject key identifier: 18:18:1C:B1:20:DF:5E:FE:7E:9D:1D:CF:2E:63:72:7B:80:25:33:1E
Authority key identifier: 2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
Certificate issuer: /CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Certificate serial: 019FABD1A4F461D74E257CED16082F27A342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
Manifest number: 0A01
Signing time: Wed 29 Jul 2026 03:01:10 +0000
Manifest this update: Wed 29 Jul 2026 03:01:10 +0000
Manifest next update: Thu 30 Jul 2026 03:01:10 +0000
Files and hashes: 1: Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl (hash: YUQoQaGv89HXZ8Jn0uIbbi1eMQgAaG8s8ACtxgcwRpg=)
2: RCbtWtfNbNugIvs-Dmql2deK4Ko.roa (hash: Rgh4Ci+jMhlRgR9C2JdR2931yRKR2EjS9oS9ki8UOrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:a4:f4:61:d7:4e:25:7c:ed:16:08:2f:27:a3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Validity
Not Before: Jul 29 03:01:10 2026 GMT
Not After : Jul 30 03:01:10 2026 GMT
Subject: CN=18181cb120df5efe7e9d1dcf2e63727b8025331e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:32:7c:6b:b1:50:60:b9:4f:0f:4e:a6:8a:
21:ef:3c:58:0e:41:5e:9b:0c:73:f8:b7:a2:3d:23:
38:d0:56:9e:f3:fc:22:df:3d:f2:3f:3a:b8:4f:fc:
f9:8c:d5:2a:3b:11:0f:23:35:46:69:23:f7:1c:fa:
48:a7:2a:80:99:24:80:37:e7:20:c5:80:de:8b:07:
bc:8f:32:5d:4c:93:07:54:93:f8:c4:20:b8:f1:9a:
5d:54:79:6a:38:cf:10:bc:72:2d:d5:fe:35:d4:cd:
fb:a2:fb:cc:81:dc:a6:8c:d1:99:68:8d:a4:ee:3c:
ee:b5:1a:10:0b:bf:3d:2c:03:de:e6:24:1b:99:ff:
16:23:51:e2:7f:03:c5:21:8f:0d:c2:6c:ba:c5:d1:
4b:db:48:61:1a:fe:63:3e:a5:2d:52:37:f4:f6:f1:
e8:d0:e8:f8:fe:5f:ac:7f:57:1d:e0:00:54:30:85:
5c:50:3f:e5:20:a9:5c:ea:3b:83:fd:aa:30:4a:bc:
d6:3b:0e:b8:bc:fd:05:82:2f:53:03:c0:9c:a5:21:
e2:c0:ad:82:fd:7d:94:22:77:5d:44:d7:2b:82:38:
70:d0:7d:d5:c1:31:c1:44:e0:b2:fe:79:32:75:73:
e7:5a:8b:89:58:06:f4:7c:ef:80:56:3b:53:cd:d5:
10:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:18:1C:B1:20:DF:5E:FE:7E:9D:1D:CF:2E:63:72:7B:80:25:33:1E
X509v3 Authority Key Identifier:
keyid:2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b5:26:ed:98:36:9a:26:00:7e:1e:bf:a7:25:d8:6a:9c:30:
17:92:50:70:8f:20:29:29:36:d2:6a:dc:4e:4e:05:03:9b:af:
1c:a3:91:bd:d1:a1:9c:f2:d6:af:e8:f6:e1:be:0f:5b:6e:db:
bf:13:21:b3:ca:bb:b5:c4:f9:54:9a:ca:50:18:d4:f3:f8:d5:
c5:e4:3b:78:e3:e8:8d:b4:d9:bc:89:e5:42:7a:21:da:5e:be:
61:2e:7b:c4:f9:17:bd:87:23:48:f7:76:f5:b9:cb:07:c4:29:
5e:6a:b9:4a:0f:1e:71:60:29:5f:8f:e7:26:9c:a0:8a:e1:63:
e2:d5:a0:4c:60:3e:88:35:90:a2:ce:8c:e2:f1:68:ca:ee:18:
10:e9:c0:07:44:09:d5:5a:5a:55:0c:6f:ac:88:50:e1:e8:59:
b7:1e:41:44:b6:27:50:c6:75:d5:7b:e5:c1:75:68:6f:2a:07:
2f:37:1e:68:d5:b0:e9:27:fe:d2:1f:d7:57:9b:10:c2:07:bf:
ab:25:62:60:c9:a7:10:1b:a0:08:d0:b6:5e:e0:23:18:ff:91:
a8:d0:17:43:67:98:b4:af:ac:ca:1f:01:27:f0:be:d8:31:97:
ee:67:23:2c:6e:6b:5f:24:f8:85:b5:89:98:c6:48:5d:d2:3d:
77:57:81:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0aT0YddOJXztFggvJ6NCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZDdmYmMxZGYwMDcwYWNmNWIzYTY3Y2U0ZTIxMmRiZDAz
YWZhZDcwHhcNMjYwNzI5MDMwMTEwWhcNMjYwNzMwMDMwMTEwWjAzMTEwLwYDVQQD
EygxODE4MWNiMTIwZGY1ZWZlN2U5ZDFkY2YyZTYzNzI3YjgwMjUzMzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3okyfGuxUGC5Tw9Opooh7zxYDkFe
mwxz+LeiPSM40Fae8/wi3z3yPzq4T/z5jNUqOxEPIzVGaSP3HPpIpyqAmSSAN+cg
xYDeiwe8jzJdTJMHVJP4xCC48ZpdVHlqOM8QvHIt1f411M37ovvMgdymjNGZaI2k
7jzutRoQC789LAPe5iQbmf8WI1HifwPFIY8Nwmy6xdFL20hhGv5jPqUtUjf09vHo
0Oj4/l+sf1cd4ABUMIVcUD/lIKlc6juD/aowSrzWOw64vP0Fgi9TA8CcpSHiwK2C
/X2UInddRNcrgjhw0H3VwTHBROCy/nkydXPnWouJWAb0fO+AVjtTzdUQEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgYHLEg317+fp0dzy5jcnuAJTMeMB8GA1UdIwQY
MBaAFC7X+8HfAHCs9bOmfOTiEtvQOvrXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHRmN3dkOEFjS3oxczZaODVPSVMyOUE2LXRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NTJlNjgtNjExZC00YWQ4LWE3ZTEt
NDhiZmFjMmNkYzcyLzEvTHRmN3dkOEFjS3oxczZaODVPSVMyOUE2LXRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81NTJlNjgtNjExZC00YWQ4LWE3ZTEtNDhiZmFjMmNkYzcy
LzEvTHRmN3dkOEFjS3oxczZaODVPSVMyOUE2LXRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrUm7Zg2
miYAfh6/pyXYapwwF5JQcI8gKSk20mrcTk4FA5uvHKORvdGhnPLWr+j24b4PW27b
vxMhs8q7tcT5VJrKUBjU8/jVxeQ7eOPojbTZvInlQnoh2l6+YS57xPkXvYcjSPd2
9bnLB8QpXmq5Sg8ecWApX4/nJpygiuFj4tWgTGA+iDWQos6M4vFoyu4YEOnAB0QJ
1VpaVQxvrIhQ4ehZtx5BRLYnUMZ11XvlwXVobyoHLzceaNWw6Sf+0h/XV5sQwge/
qyViYMmnEBugCNC2XuAjGP+RqNAXQ2eYtK+syh8BJ/C+2DGX7mcjLG5rXyT4hbWJ
mMZIXdI9d1eBbQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:42:53 2026 by rpki-client