Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
File: LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json)
Hash identifier: lmHP5m0hnSMFUsy3nXfXZP3MmtNGMRT1fYrxY8lfdD0=
Subject key identifier: BC:C9:DD:F3:AB:FA:CD:F6:A9:2E:CF:77:3B:F5:72:0D:09:75:80:1A
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial: 019CAFB5672A10EF60B1EA76C97D49544DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
Manifest number: 01E6
Signing time: Mon 02 Mar 2026 18:00:27 +0000
Manifest this update: Mon 02 Mar 2026 18:00:27 +0000
Manifest next update: Tue 03 Mar 2026 18:00:27 +0000
Files and hashes: 1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: G2Xkr+hDK76jEDSlJQFqMw5yQGqEUDGomh28lYdpv5A=)
2: YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa (hash: r+jOonrhaqNcXtHMcC3c05txxmDgPgiD9LqnOUDboTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:67:2a:10:ef:60:b1:ea:76:c9:7d:49:54:4d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Validity
Not Before: Mar 2 18:00:27 2026 GMT
Not After : Mar 3 18:00:27 2026 GMT
Subject: CN=bcc9ddf3abfacdf6a92ecf773bf5720d0975801a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:27:a0:a7:33:90:0b:db:e6:62:90:5b:64:bf:
aa:73:11:23:41:0c:c4:ce:71:52:15:26:08:14:7d:
23:40:b8:73:7f:7c:a2:dc:7f:ac:18:45:fb:0c:1f:
68:28:ae:e9:19:29:40:ad:c1:49:a3:e1:2b:e0:b9:
44:22:39:8f:d8:90:52:4b:3f:55:b1:ca:ad:1b:b0:
2a:2a:2e:a1:12:07:0b:be:58:2a:9b:27:4f:b9:ae:
07:99:e7:27:a3:18:31:b0:f8:4a:e3:9a:2c:c9:0b:
2a:0a:7b:a9:dc:e3:aa:d4:6f:e3:21:3c:e1:c9:3c:
65:b0:5e:5e:a7:48:a2:11:53:ef:c9:33:37:e1:2d:
27:c1:95:85:54:7a:b0:b2:e9:9e:c9:e7:f6:be:a1:
55:65:be:a5:20:01:9d:77:b0:f8:ee:7c:a0:8f:ce:
88:29:ab:cb:b7:10:d5:26:a6:40:62:f3:8d:7b:d0:
92:9c:78:ab:6e:1e:0e:ad:23:2f:e3:bb:20:7c:d5:
52:10:b1:af:5c:d0:a7:80:8e:b2:da:f2:c8:24:40:
8e:6c:69:85:cd:63:25:bd:65:f8:27:b5:f6:7b:e9:
3e:f6:60:e4:b5:42:9e:c6:6d:3b:95:5f:9b:12:ea:
cf:19:45:85:ff:b0:18:e1:51:a4:24:7f:7a:74:56:
b8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C9:DD:F3:AB:FA:CD:F6:A9:2E:CF:77:3B:F5:72:0D:09:75:80:1A
X509v3 Authority Key Identifier:
keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a3:5c:18:cf:e3:57:de:4d:56:52:6b:93:e6:67:92:f3:43:
df:fe:2c:a4:00:84:c0:46:b2:22:87:f0:b1:74:30:9b:af:86:
e2:15:3e:f9:14:8f:4b:b5:73:15:10:cb:a7:99:ad:b2:d7:18:
92:45:d1:d0:47:60:fd:4b:a6:be:b7:80:2e:9d:06:82:34:21:
91:80:13:b6:39:ea:f7:25:39:99:85:7c:a4:58:26:74:0e:10:
0d:fa:5f:91:3b:c9:5d:8e:d0:f2:fc:62:dc:a3:25:48:f3:cd:
fc:57:1f:44:6b:c0:e2:ae:1d:0a:56:b1:ac:10:4c:a7:c2:33:
74:a3:24:e4:50:8a:06:11:e2:01:0e:15:bf:10:d8:f5:7e:ad:
9e:bd:63:8f:e5:40:13:13:1b:3c:38:f1:06:8d:37:4e:3f:fb:
31:78:3f:1e:5c:91:f0:6a:d4:06:aa:d8:5b:20:2f:6e:4b:59:
49:4f:73:a8:94:15:6a:c3:9e:99:08:4c:8e:7b:95:43:37:f6:
3f:2f:44:03:42:75:64:99:c7:3f:a2:7b:c7:2f:39:3d:ec:5a:
a1:7e:83:31:b3:af:5a:ba:e0:2d:2f:09:ff:80:a4:59:f3:cc:
52:fc:bd:00:a5:75:76:ef:93:94:e8:95:10:04:7a:f9:2e:58:
fe:9c:8d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:06:14 2026 by rpki-client