Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
File: _ltNUIvcIUFbR1LuvESNSqrGNdk.mft (raw, json)
Hash identifier: 96waw3I5iJLdwFEVrpCjmfI05p3G/tXBJPvxVusU3EA=
Subject key identifier: D1:C6:92:2A:0B:42:17:C5:90:62:3E:BA:83:5B:92:E8:5E:AE:12:73
Authority key identifier: FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
Certificate issuer: /CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Certificate serial: 019CAAC67ADB8AF708550E048B39E38A9C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
Manifest number: 02C2
Signing time: Sun 01 Mar 2026 19:01:00 +0000
Manifest this update: Sun 01 Mar 2026 19:01:00 +0000
Manifest next update: Mon 02 Mar 2026 19:01:00 +0000
Files and hashes: 1: 9J2k_v-AhLXeWsx0gyZ7MSycihA.roa (hash: KdEABeI7OUulamOMnpjJAOHhCOTUaC4bju9UuYK4BXI=)
2: _ltNUIvcIUFbR1LuvESNSqrGNdk.crl (hash: J+iIINOpOdibAukcBDUQK9ytVa1AQb5ub3QCcs0D9Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:7a:db:8a:f7:08:55:0e:04:8b:39:e3:8a:9c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Validity
Not Before: Mar 1 19:01:00 2026 GMT
Not After : Mar 2 19:01:00 2026 GMT
Subject: CN=d1c6922a0b4217c590623eba835b92e85eae1273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:61:41:66:96:13:fa:b3:81:08:e0:54:68:
ef:ba:f2:4a:8e:75:41:7a:e6:85:9b:f6:2c:05:1d:
00:93:48:a8:85:33:b8:b3:29:f9:bc:75:5b:6d:22:
6c:46:65:ab:2e:58:10:93:39:58:7e:d1:02:8e:f9:
d9:f6:2f:25:79:f4:be:48:cf:dd:d0:32:9e:f0:91:
bb:68:09:0b:20:8d:7d:06:ff:ee:ba:fb:d0:ba:34:
57:b7:2f:f3:58:02:3a:96:12:fa:59:dc:3a:8d:cf:
83:59:45:3e:d9:17:0b:29:76:a4:ed:b8:f5:4e:4a:
e5:b4:41:7e:cf:0c:51:c9:12:46:33:6d:f3:ca:83:
79:91:d8:f6:c9:a2:e5:2e:63:ea:92:19:4b:27:f3:
b2:55:a2:fb:51:b7:e6:e9:94:b0:3a:72:74:f7:dd:
b1:2d:32:17:8c:84:58:60:e1:71:08:4b:4f:41:59:
2f:ad:8e:25:ce:59:d7:14:bd:cd:fd:b6:62:c9:e3:
01:62:25:74:95:ab:02:3f:7f:db:da:93:33:b5:f3:
86:07:c3:83:9a:08:81:44:6c:b6:a3:3c:c2:0f:b2:
ce:b0:a6:d2:64:a6:c6:e6:c5:15:3e:14:23:8f:cb:
43:4c:10:cb:4c:1e:56:60:84:1c:7a:ad:e7:d0:7e:
fd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C6:92:2A:0B:42:17:C5:90:62:3E:BA:83:5B:92:E8:5E:AE:12:73
X509v3 Authority Key Identifier:
keyid:FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1d:49:96:ee:bc:1e:f7:6d:5a:59:ff:8b:e2:0d:6c:8d:db:
84:f5:f5:55:f8:1c:1d:63:c8:15:22:2a:96:28:cd:1f:87:58:
9a:b5:9e:73:ef:e2:0d:9e:a2:e4:1e:1c:08:ba:ba:02:07:c9:
7d:29:9a:a4:44:03:4a:74:c4:b8:cc:32:f0:67:df:20:30:8f:
77:b0:58:6b:cf:d9:ff:5e:eb:a9:0d:60:09:bc:a5:8a:ae:9a:
d0:0f:1d:85:f3:2d:46:94:af:b7:94:fa:d8:7f:53:31:48:ca:
39:7b:f4:6f:d9:c9:87:f4:67:81:1f:9f:91:8b:fe:c8:ca:1d:
db:ab:10:e1:4a:87:21:d6:9e:7e:3b:c0:e6:40:39:99:83:c8:
75:09:11:f4:2f:6a:cd:90:34:19:02:ac:7b:48:9e:26:c7:5c:
61:6f:ce:f0:6f:d7:6b:57:ce:39:d4:c2:04:ee:4f:59:f9:e5:
9c:55:30:bd:cc:14:ec:c2:62:69:be:6a:5f:84:4e:7f:29:99:
35:8e:ac:e4:5f:71:53:ca:de:5a:7c:14:41:71:c6:7a:de:c8:
a1:64:90:b7:40:a7:44:82:95:35:96:71:35:36:db:99:7a:3e:
68:a1:71:4e:b1:63:76:e1:bb:2a:eb:47:64:58:42:ee:a0:44:
8f:3d:b3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:56 2026 by rpki-client