Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
File: Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft (raw, json)
Hash identifier: +BQ3zPy6lfTtEY28EWNj4gaflr91I44LRZdaWtOimqY=
Subject key identifier: D8:CD:9A:C6:93:96:B7:21:0B:E1:34:21:9F:15:D4:45:2A:D5:DC:CE
Authority key identifier: 2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
Certificate issuer: /CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Certificate serial: 019CAB33EDCA02205B0B86997C72A29AF93D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
Manifest number: 0873
Signing time: Sun 01 Mar 2026 21:00:33 +0000
Manifest this update: Sun 01 Mar 2026 21:00:33 +0000
Manifest next update: Mon 02 Mar 2026 21:00:33 +0000
Files and hashes: 1: Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl (hash: cpS74H3kikiwSnKeNizAMm7/SfMY9sjmQB1dic8GbAc=)
2: RCbtWtfNbNugIvs-Dmql2deK4Ko.roa (hash: Rgh4Ci+jMhlRgR9C2JdR2931yRKR2EjS9oS9ki8UOrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:ed:ca:02:20:5b:0b:86:99:7c:72:a2:9a:f9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Validity
Not Before: Mar 1 21:00:33 2026 GMT
Not After : Mar 2 21:00:33 2026 GMT
Subject: CN=d8cd9ac69396b7210be134219f15d4452ad5dcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:17:ea:cb:84:2e:33:83:95:f6:2c:b5:78:76:
03:46:56:8f:89:bd:34:cc:63:0c:9c:ee:59:e9:55:
e4:e7:4b:3d:f2:3b:da:e2:e0:b4:5c:20:37:ce:c2:
65:0c:6b:12:65:b8:8e:3e:47:0b:90:86:52:27:10:
5f:a8:81:5b:9d:a7:34:0a:6d:69:09:53:65:47:77:
ab:9d:eb:87:a9:ad:74:7e:d6:91:aa:a5:50:b7:f9:
1f:da:b9:e1:c6:64:79:df:f2:17:24:5c:41:4b:85:
19:90:85:8d:8e:d4:bc:c9:8c:b8:e2:c2:61:23:57:
22:ae:af:f7:e5:88:b3:bb:4c:c7:56:2f:04:31:70:
3f:ab:39:bb:50:d1:82:8c:48:4d:54:32:19:80:52:
12:9b:c5:23:05:91:a5:54:99:bb:df:47:57:12:b7:
26:cb:91:f7:e1:99:20:95:c5:c9:6c:02:8d:3e:db:
e3:e7:0f:bc:6d:01:ab:b7:2a:79:7b:8e:50:e5:6c:
d4:91:42:99:b0:17:c5:3c:40:df:82:9d:0d:4d:60:
88:eb:45:85:b2:cd:23:92:3c:99:40:f7:4f:e7:40:
9c:46:84:51:0a:4c:15:4b:ce:27:12:15:9a:db:9d:
c1:63:6d:6e:7f:07:93:82:22:13:f6:9c:a7:c3:9a:
52:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CD:9A:C6:93:96:B7:21:0B:E1:34:21:9F:15:D4:45:2A:D5:DC:CE
X509v3 Authority Key Identifier:
keyid:2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:94:d9:f9:dc:68:3e:bc:57:a7:ad:b8:0f:16:aa:9e:aa:d2:
e0:03:a8:d8:df:77:95:4a:48:89:cf:bc:a5:34:99:38:ca:89:
f0:37:7a:6d:e4:16:69:5f:ba:22:15:aa:49:d9:63:98:fd:bd:
a4:99:fd:36:79:41:ba:60:d4:f0:f6:ef:97:de:b9:31:ed:b9:
92:99:3e:23:ea:2f:ed:8b:d0:ac:88:84:40:0c:8e:06:4c:5e:
e0:09:a4:4d:28:87:96:f9:94:db:1b:0c:12:8b:2d:9a:33:9b:
53:e7:4a:8e:65:b3:0e:18:a9:ef:9f:9d:13:3d:53:84:f1:7c:
14:92:f0:db:7a:c3:76:61:8b:a4:1d:78:e2:66:a2:ee:b7:97:
b1:01:d7:89:d3:23:d6:21:92:9b:3d:a6:da:fc:d8:68:3a:f1:
de:7f:8f:58:2d:d0:52:04:b5:eb:a1:3c:1b:cb:14:3a:fd:79:
32:b5:a5:98:e7:49:f7:58:05:1a:2d:29:88:47:b9:9b:9d:2e:
c3:58:48:c5:43:c1:52:a8:cd:10:40:50:3c:d0:07:91:47:8e:
16:ea:59:78:d1:7e:42:87:80:5b:62:5a:42:85:0f:11:17:bd:
1a:6b:f1:f9:05:3e:2b:72:86:c1:78:a2:dd:a8:ad:18:22:a6:
7d:a4:5c:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrM+3KAiBbC4aZfHKimvk9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZDdmYmMxZGYwMDcwYWNmNWIzYTY3Y2U0ZTIxMmRiZDAz
YWZhZDcwHhcNMjYwMzAxMjEwMDMzWhcNMjYwMzAyMjEwMDMzWjAzMTEwLwYDVQQD
EyhkOGNkOWFjNjkzOTZiNzIxMGJlMTM0MjE5ZjE1ZDQ0NTJhZDVkY2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Bfqy4QuM4OV9iy1eHYDRlaPib00
zGMMnO5Z6VXk50s98jva4uC0XCA3zsJlDGsSZbiOPkcLkIZSJxBfqIFbnac0Cm1p
CVNlR3erneuHqa10ftaRqqVQt/kf2rnhxmR53/IXJFxBS4UZkIWNjtS8yYy44sJh
I1cirq/35Yizu0zHVi8EMXA/qzm7UNGCjEhNVDIZgFISm8UjBZGlVJm730dXErcm
y5H34ZkglcXJbAKNPtvj5w+8bQGrtyp5e45Q5WzUkUKZsBfFPEDfgp0NTWCI60WF
ss0jkjyZQPdP50CcRoRRCkwVS84nEhWa253BY21ufweTgiIT9pynw5pSpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjNmsaTlrchC+E0IZ8V1EUq1dzOMB8GA1UdIwQY
MBaAFC7X+8HfAHCs9bOmfOTiEtvQOvrXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHRmN3dkOEFjS3oxczZaODVPSVMyOUE2LXRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NTJlNjgtNjExZC00YWQ4LWE3ZTEt
NDhiZmFjMmNkYzcyLzEvTHRmN3dkOEFjS3oxczZaODVPSVMyOUE2LXRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81NTJlNjgtNjExZC00YWQ4LWE3ZTEtNDhiZmFjMmNkYzcy
LzEvTHRmN3dkOEFjS3oxczZaODVPSVMyOUE2LXRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs5TZ+dxo
PrxXp624DxaqnqrS4AOo2N93lUpIic+8pTSZOMqJ8Dd6beQWaV+6IhWqSdljmP29
pJn9NnlBumDU8Pbvl965Me25kpk+I+ov7YvQrIiEQAyOBkxe4AmkTSiHlvmU2xsM
EostmjObU+dKjmWzDhip75+dEz1ThPF8FJLw23rDdmGLpB144mai7reXsQHXidMj
1iGSmz2m2vzYaDrx3n+PWC3QUgS166E8G8sUOv15MrWlmOdJ91gFGi0piEe5m50u
w1hIxUPBUqjNEEBQPNAHkUeOFupZeNF+QoeAW2JaQoUPERe9Gmvx+QU+K3KGwXii
3aitGCKmfaRcBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:35 2026 by rpki-client