Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier: WtT3pniCoblisAtlaCMQSg3ou96vBQcBr8nZnTHqFt0=
Subject key identifier: E5:5B:20:1B:7A:53:ED:41:2D:BF:34:E2:20:4D:3E:CE:CC:52:EF:14
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial: 01A0C88F582A6968B60B9BECB3E6E2AA7B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number: 19F9
Signing time: Tue 22 Sep 2026 10:00:32 +0000
Manifest this update: Tue 22 Sep 2026 10:00:32 +0000
Manifest next update: Wed 23 Sep 2026 10:00:32 +0000
Files and hashes: 1: Ma4-s3p8OYdm49PN9wCv4RVM25E.roa (hash: yb+AmQCW6F3wk6Dw7rJ8p1d4IUrMtPkPRMTUiBpQr9Q=)
2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: FX3028X8tznrtiEuH8KKXBuiRG0ZZt8URYTBwTp8VlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:58:2a:69:68:b6:0b:9b:ec:b3:e6:e2:aa:7b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Validity
Not Before: Sep 22 10:00:32 2026 GMT
Not After : Sep 23 10:00:32 2026 GMT
Subject: CN=e55b201b7a53ed412dbf34e2204d3ececc52ef14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:ad:a6:f3:51:b1:8f:bb:69:9d:6e:3c:cb:
26:5e:82:e2:90:52:f3:e8:99:24:66:48:4a:0d:47:
05:5e:02:df:f7:10:2b:91:70:a6:df:94:1a:13:81:
e3:ed:29:66:22:34:0d:b6:ee:44:16:25:65:bb:84:
14:af:be:7b:5b:6e:5b:f8:1c:0e:a7:0c:ac:60:69:
af:70:2f:93:5f:89:99:88:01:10:d8:17:69:a2:59:
a1:0f:1b:ff:83:df:46:6f:e0:2c:7e:74:10:39:1e:
d4:ca:3d:31:c3:17:a8:ab:79:4f:24:f6:eb:08:8f:
4b:f6:cb:5c:03:b7:fb:0d:b4:de:62:68:e8:0b:67:
f4:9c:73:fe:9c:e7:90:d2:63:b1:60:9e:29:f6:8e:
2e:03:d1:49:23:8b:00:5c:76:34:7e:41:b1:e4:e1:
0f:c7:87:b8:70:c8:0a:ce:aa:b1:b0:5f:55:e8:34:
10:0c:ff:3d:6a:35:88:51:12:f5:01:f2:46:fa:d0:
a9:96:4f:6e:e5:e1:1d:ca:47:97:e3:b5:1e:1a:58:
4f:ee:24:e3:52:04:cf:e4:6e:39:32:39:03:e8:3d:
8f:23:07:6e:f0:a8:06:79:d2:7d:b3:38:04:9d:f1:
a4:9e:60:dc:b0:57:5b:27:87:b5:ed:f4:85:8d:dd:
d4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5B:20:1B:7A:53:ED:41:2D:BF:34:E2:20:4D:3E:CE:CC:52:EF:14
X509v3 Authority Key Identifier:
keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d0:ef:cf:5f:58:63:01:56:1d:d3:39:00:67:ab:c5:8e:d5:
2e:c7:d7:e2:85:b9:b1:9c:af:b1:ef:d4:8a:f4:d8:60:77:47:
44:10:fa:26:76:1f:28:07:c5:e7:27:57:31:19:49:10:43:41:
0f:02:d9:0c:c4:76:86:6b:d3:c2:1c:82:aa:98:0d:a2:e2:ac:
67:eb:d7:0d:13:ed:80:b0:49:4f:68:52:fb:cc:5b:f5:62:8c:
ef:f1:b1:34:e5:a7:23:aa:ab:77:40:19:56:6b:26:87:13:4a:
b1:72:8d:bc:34:17:4c:ed:49:86:b3:fa:4d:fe:50:d4:c8:fa:
b6:97:9f:bc:db:3b:ef:9c:3f:66:e3:a9:4b:a0:f2:e7:7f:8f:
4c:74:2b:50:31:41:4e:6d:63:d7:dd:51:bd:fb:28:a0:d6:21:
24:cc:b8:14:f7:84:44:76:9c:4e:39:52:7b:23:dc:c1:50:47:
82:29:ae:f6:63:8a:0d:e3:ab:b5:57:71:bb:42:a3:05:00:ec:
5a:e2:23:5d:1a:bb:53:dd:a5:32:3b:8d:d0:85:63:a0:a8:f2:
4f:68:11:a8:59:e2:28:5d:ef:12:1b:38:58:14:b2:56:8b:6d:
1f:e1:16:d7:4f:ad:f5:81:ba:dd:97:06:5c:46:22:3e:60:1e:
e9:46:13:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:32:15 2026 by rpki-client