
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
File: LTDDBwxuYe3FimTzIz-pf8X1c5s.mft (raw, json)
Hash identifier: vyfzWAIETjpLHI0b+ojiN5z4x68eEbC30k05NSqjQ08=
Subject key identifier: E0:F1:6C:78:C4:EC:A2:8F:EF:7E:78:E4:81:01:8E:4D:E6:ED:9A:E2
Authority key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
Certificate issuer: /CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Certificate serial: 01A0E5F5559FB562F03B6BAEE2F7B1B1EA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
Manifest number: 1A7A
Signing time: Mon 28 Sep 2026 03:00:55 +0000
Manifest this update: Mon 28 Sep 2026 03:00:55 +0000
Manifest next update: Tue 29 Sep 2026 03:00:55 +0000
Files and hashes: 1: LTDDBwxuYe3FimTzIz-pf8X1c5s.crl (hash: LUwPecvJJGe9i4fnlABdnoOavIlNI0Vv9pg9rTC7t0I=)
2: Rd5ogL0rZH0GwJinSJKEBpZALRE.roa (hash: nV1zKTqNKFR84ggPUZVLKnPWuVDibn1TXYU/+rnDjXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:f5:55:9f:b5:62:f0:3b:6b:ae:e2:f7:b1:b1:ea:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Validity
Not Before: Sep 28 03:00:55 2026 GMT
Not After : Sep 29 03:00:55 2026 GMT
Subject: CN=e0f16c78c4eca28fef7e78e481018e4de6ed9ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:46:be:29:ae:44:9a:3e:79:8f:22:54:60:
9c:19:55:78:29:7e:0e:c3:62:4e:0a:0e:c9:b6:b9:
ec:53:fe:80:cb:11:43:15:32:a5:ce:5e:d8:32:43:
1a:00:01:7a:ba:2d:3e:ff:18:f2:42:90:c6:e7:99:
b6:4f:63:45:d1:be:dd:01:11:5b:15:c1:66:8a:50:
65:d0:be:d2:57:72:13:e0:d4:9c:29:48:5a:b8:d2:
8d:61:22:19:ac:03:bf:82:2e:3a:4e:d5:dd:bc:2a:
ff:e0:95:26:d0:60:98:fb:54:ce:f7:c0:1c:15:ee:
22:42:82:8c:e7:79:40:6d:33:38:04:0a:56:85:9f:
11:c0:97:12:bc:3a:2f:e0:e9:80:c3:1e:a6:5c:63:
42:72:74:a5:6a:89:07:b4:58:11:50:ac:ef:c1:cf:
98:5a:aa:c4:fb:f5:d1:97:31:6b:d5:3b:47:ac:aa:
bd:20:25:6c:26:31:ac:54:89:8b:77:5a:a8:89:28:
fc:73:69:0b:5c:c1:33:fe:a8:54:50:22:e2:fe:9c:
ab:5a:e2:90:1f:1b:cb:61:c9:47:f2:bc:89:9d:aa:
40:6d:58:b9:42:84:66:02:9d:5c:2c:38:df:1d:ff:
47:c2:1f:5b:37:5a:c4:65:73:c9:bd:f1:3d:c2:09:
a0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F1:6C:78:C4:EC:A2:8F:EF:7E:78:E4:81:01:8E:4D:E6:ED:9A:E2
X509v3 Authority Key Identifier:
keyid:2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:cb:e6:ee:49:9a:cf:a7:3b:aa:75:a1:d1:4e:23:fe:a0:b4:
08:6d:8f:2d:7c:e9:29:11:65:72:04:4f:58:a7:9c:cd:82:98:
0f:08:17:29:84:18:22:f7:dc:bb:4c:fd:15:d4:56:c5:82:00:
b1:e3:6c:26:f7:e6:eb:d1:d8:db:b9:31:f7:8e:46:be:13:e3:
bb:fb:82:28:39:19:f8:9a:e0:5b:3a:25:4f:60:2d:d5:b1:28:
33:a3:7a:62:a6:4c:1b:af:85:5e:d4:c0:9b:df:54:e0:88:a8:
69:2e:d9:72:fc:d9:93:63:f4:83:cf:90:99:65:12:7f:00:cc:
64:28:17:05:01:7d:67:0d:51:ba:ad:bd:aa:37:ba:73:59:ae:
a9:0a:95:b4:f5:3e:03:d0:7f:a1:42:a6:de:01:79:65:5b:c2:
16:9f:dd:fd:c8:f0:40:10:f9:e7:4c:fe:ac:28:bf:99:f2:15:
f8:e7:a7:6c:d2:33:49:8c:00:f9:d3:55:f2:0d:50:1d:4c:42:
b2:5a:53:d9:d9:a9:1f:79:cd:3f:e5:10:c7:ef:fb:14:24:90:
a0:ea:2f:cb:e0:41:75:50:18:13:33:fc:57:09:10:01:98:60:
4f:24:79:b8:d5:06:91:34:b9:39:a5:9f:92:4e:ab:de:2f:10:
3c:8d:a1:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDl9VWftWLwO2uu4vexsep2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMzBjMzA3MGM2ZTYxZWRjNThhNjRmMzIzM2ZhOTdmYzVm
NTczOWIwHhcNMjYwOTI4MDMwMDU1WhcNMjYwOTI5MDMwMDU1WjAzMTEwLwYDVQQD
EyhlMGYxNmM3OGM0ZWNhMjhmZWY3ZTc4ZTQ4MTAxOGU0ZGU2ZWQ5YWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV9GvimuRJo+eY8iVGCcGVV4KX4O
w2JOCg7JtrnsU/6AyxFDFTKlzl7YMkMaAAF6ui0+/xjyQpDG55m2T2NF0b7dARFb
FcFmilBl0L7SV3IT4NScKUhauNKNYSIZrAO/gi46TtXdvCr/4JUm0GCY+1TO98Ac
Fe4iQoKM53lAbTM4BApWhZ8RwJcSvDov4OmAwx6mXGNCcnSlaokHtFgRUKzvwc+Y
WqrE+/XRlzFr1TtHrKq9ICVsJjGsVImLd1qoiSj8c2kLXMEz/qhUUCLi/pyrWuKQ
HxvLYclH8ryJnapAbVi5QoRmAp1cLDjfHf9Hwh9bN1rEZXPJvfE9wgmgfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODxbHjE7KKP73545IEBjk3m7ZriMB8GA1UdIwQY
MBaAFC0wwwcMbmHtxYpk8yM/qX/F9XObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFREREJ3eHVZZTNGaW1Uekl6LXBmOFgxYzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80NmExYjAtMTBjMC00Y2Y5LTk1MDIt
MTBkMTczNGQ3YjgzLzEvTFREREJ3eHVZZTNGaW1Uekl6LXBmOFgxYzVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80NmExYjAtMTBjMC00Y2Y5LTk1MDItMTBkMTczNGQ3Yjgz
LzEvTFREREJ3eHVZZTNGaW1Uekl6LXBmOFgxYzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArsvm7kma
z6c7qnWh0U4j/qC0CG2PLXzpKRFlcgRPWKeczYKYDwgXKYQYIvfcu0z9FdRWxYIA
seNsJvfm69HY27kx945GvhPju/uCKDkZ+JrgWzolT2At1bEoM6N6YqZMG6+FXtTA
m99U4IioaS7ZcvzZk2P0g8+QmWUSfwDMZCgXBQF9Zw1Ruq29qje6c1muqQqVtPU+
A9B/oUKm3gF5ZVvCFp/d/cjwQBD550z+rCi/mfIV+OenbNIzSYwA+dNV8g1QHUxC
slpT2dmpH3nNP+UQx+/7FCSQoOovy+BBdVAYEzP8VwkQAZhgTyR5uNUGkTS5OaWf
kk6r3i8QPI2h4A==
-----END CERTIFICATE-----
Generated at Mon Sep 28 13:34:23 2026 by rpki-client