Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
File: _ltNUIvcIUFbR1LuvESNSqrGNdk.mft (raw, json)
Hash identifier: YGbhEZSxEKwSout0ZBGNbmSHyYrXj2/7JnHkTSxDEiE=
Subject key identifier: 0B:1C:BD:C6:1F:43:BD:7C:61:22:A6:9E:75:A8:2A:32:3A:67:C2:9F
Authority key identifier: FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
Certificate issuer: /CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Certificate serial: 019EBFC8FA17EA1954197F1FA6E2E23C17CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
Manifest number: 03D6
Signing time: Sat 13 Jun 2026 07:01:19 +0000
Manifest this update: Sat 13 Jun 2026 07:01:19 +0000
Manifest next update: Sun 14 Jun 2026 07:01:19 +0000
Files and hashes: 1: 9J2k_v-AhLXeWsx0gyZ7MSycihA.roa (hash: KdEABeI7OUulamOMnpjJAOHhCOTUaC4bju9UuYK4BXI=)
2: _ltNUIvcIUFbR1LuvESNSqrGNdk.crl (hash: 5kU6EcOFkOFqb6HxmDQPebw10SOQ2ImZ4Ak4iV/LcdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:fa:17:ea:19:54:19:7f:1f:a6:e2:e2:3c:17:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Validity
Not Before: Jun 13 07:01:19 2026 GMT
Not After : Jun 14 07:01:19 2026 GMT
Subject: CN=0b1cbdc61f43bd7c6122a69e75a82a323a67c29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:18:cd:56:93:d5:7a:f6:99:26:c5:01:c3:b1:
3c:84:e6:e7:09:db:50:6f:6e:1e:e1:22:6a:1f:6a:
41:77:2d:17:05:8d:04:4e:b1:6b:2f:2d:05:94:b5:
14:19:b4:ad:ed:1a:90:9d:c0:19:7b:7d:b8:a8:fb:
3e:cd:64:0f:67:2f:83:33:1f:7e:8a:1e:73:df:17:
e4:3a:e5:36:fd:a7:36:ae:36:b1:7c:d3:9d:9c:a3:
a2:fe:51:3c:29:05:32:84:5b:38:81:e3:59:63:f0:
0d:ce:e5:e2:76:7f:44:b2:fc:2c:40:d4:81:f3:ce:
c6:9e:6b:7c:17:21:f4:7b:d6:9c:c2:4e:f9:4e:2f:
55:13:5d:26:4c:7b:d3:d8:5e:bd:ee:8a:7c:23:4b:
72:34:21:21:bf:8a:b4:d9:29:ee:cf:fc:db:d4:0a:
fe:d0:31:fc:3a:89:6e:46:a0:37:98:86:c5:b5:2c:
3c:71:ee:5f:97:ce:c9:80:1e:46:e3:2a:50:e1:64:
d1:e3:00:9e:b2:6a:f7:2b:94:d1:a1:5a:11:0b:9a:
5f:fc:0b:0a:a9:3c:95:5c:cb:f5:5e:63:e7:41:83:
6b:0e:05:b1:24:c1:88:c1:ad:8f:31:77:9f:c8:c0:
de:63:9b:91:15:aa:a4:ad:c9:6f:5b:91:e1:ce:a2:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1C:BD:C6:1F:43:BD:7C:61:22:A6:9E:75:A8:2A:32:3A:67:C2:9F
X509v3 Authority Key Identifier:
keyid:FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:13:95:7c:c3:f2:a9:9b:99:d4:5d:5b:dc:4b:06:4b:23:17:
3c:bd:c2:f0:e0:d9:fe:11:da:1a:ec:a8:df:d3:59:60:ee:37:
62:8e:b4:73:9b:f6:20:3a:e2:8f:e6:13:88:c6:e4:b5:dc:8c:
95:b8:ac:e1:e0:0d:67:4a:4d:ab:fc:65:e2:b3:bf:41:28:21:
03:8f:1a:c1:d8:51:fa:84:19:b6:a6:ea:7d:f6:47:5a:8f:5e:
3a:45:2d:90:5b:89:d5:a0:27:3a:eb:42:9c:09:21:b6:26:7a:
f7:c4:17:ab:20:dc:de:57:29:7b:9a:bd:9f:c2:c0:a3:39:53:
26:44:cd:b5:da:f7:40:9e:35:2f:1b:d1:92:c7:b4:a5:8e:ff:
c5:e4:b1:bb:29:c6:03:3e:1f:b8:58:77:94:51:a4:15:ed:99:
0c:d6:ed:ed:cf:85:41:a2:88:97:53:0d:c5:52:0c:14:24:62:
8a:be:d8:16:93:09:fb:62:25:da:ca:e5:17:43:fc:02:31:2f:
d8:43:c4:64:2f:9d:60:b9:d3:48:1e:38:43:bb:25:fc:d4:44:
5f:19:9c:80:69:aa:66:62:6c:36:25:cf:96:81:53:9e:08:0b:
00:b1:55:01:a9:b7:de:18:98:80:a9:09:5a:17:b3:92:3c:00:
29:ca:41:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:58:44 2026 by rpki-client