Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
File: LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json)
Hash identifier: Zt5k8SeLtwa4OsmhkB8uGmL5mD2K8DOKvWfJ3JeavJ0=
Subject key identifier: 31:6F:AC:9B:6C:9C:9F:41:A0:97:20:10:03:A7:A5:59:1B:57:88:24
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial: 019FAA87F502C5CEEC8DF7B9AE332812327B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
Manifest number: 0371
Signing time: Tue 28 Jul 2026 21:01:04 +0000
Manifest this update: Tue 28 Jul 2026 21:01:04 +0000
Manifest next update: Wed 29 Jul 2026 21:01:04 +0000
Files and hashes: 1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: 2WJkxpAFOjG4ItpwlKAtuGjIBfiJCVxnXP0XtLxN5WU=)
2: YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa (hash: r+jOonrhaqNcXtHMcC3c05txxmDgPgiD9LqnOUDboTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:f5:02:c5:ce:ec:8d:f7:b9:ae:33:28:12:32:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Validity
Not Before: Jul 28 21:01:04 2026 GMT
Not After : Jul 29 21:01:04 2026 GMT
Subject: CN=316fac9b6c9c9f41a097201003a7a5591b578824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c7:7a:d7:90:e1:bb:5f:ea:f7:54:3b:cb:50:
62:50:4b:51:8f:49:f6:4f:80:63:e2:de:5b:60:3f:
6e:f7:f0:9a:c6:30:72:12:72:1b:89:2c:1d:f4:5b:
c8:f3:cc:70:d5:69:50:be:3f:e8:d9:f7:1a:80:55:
f9:f3:b8:dc:d0:39:6c:50:72:0f:d3:68:98:90:35:
92:cf:b8:93:1e:aa:cf:96:eb:a8:12:0d:d3:90:ba:
6e:e9:c6:db:bf:b2:a0:cd:ed:78:d6:c1:49:6b:03:
1c:61:bb:82:83:1b:f3:e8:06:90:b5:47:52:a2:84:
24:cd:ae:37:fb:98:13:88:33:7e:ce:8e:b8:8b:80:
f7:ad:00:21:b6:f9:6f:ce:dc:02:f9:f8:4a:e0:e1:
fa:c4:d2:9b:6d:0d:c6:03:02:4e:3c:7a:2a:e6:e5:
6a:39:84:2d:2c:e2:a4:35:a7:3b:4c:5c:01:60:3e:
fc:07:fb:da:1d:a2:fd:6f:7b:24:36:b9:7e:15:02:
b9:cd:7f:7a:24:80:97:3c:e6:63:0e:40:19:50:e9:
58:b0:13:b2:f3:4f:26:e5:c1:f2:c9:b8:a3:bc:f0:
0f:c6:86:24:21:24:f4:2a:a3:bb:ce:c8:b0:5c:11:
02:9a:81:55:39:09:34:6b:83:cd:01:7b:7c:ef:5a:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6F:AC:9B:6C:9C:9F:41:A0:97:20:10:03:A7:A5:59:1B:57:88:24
X509v3 Authority Key Identifier:
keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3d:12:76:5f:30:80:4a:6f:9a:77:e2:34:83:93:28:7d:26:
42:db:d6:79:1f:76:1e:73:4c:1b:f4:c4:04:d7:dd:92:94:27:
c2:da:ed:d1:4d:7b:77:b1:13:92:55:f3:27:b8:ff:9f:40:50:
a2:33:b9:9b:ef:44:05:0f:62:1f:c9:ff:c0:01:87:64:14:99:
9a:72:5f:f9:fe:90:38:db:86:4a:4a:50:e9:b1:53:5a:e9:3e:
5f:61:69:a4:fb:9b:69:c3:67:87:f5:03:08:5d:6a:15:b6:25:
a5:15:33:14:29:cb:6d:6d:29:13:d7:1d:c3:aa:b5:ab:82:7f:
65:7c:b7:73:28:54:98:f0:89:e5:ff:3c:e6:e3:2c:29:48:f0:
f6:08:fd:ec:3f:69:56:e0:e8:7e:20:39:79:60:e5:49:d8:bd:
57:7f:e6:ce:7a:26:15:a9:c6:f0:67:9c:47:dd:91:05:c5:dc:
06:17:97:e8:b6:67:8c:48:35:1e:08:1a:03:c5:c4:9d:36:23:
6a:61:cf:3c:8b:1f:56:1f:72:f0:3e:e7:ee:f5:3f:ce:bc:b7:
43:55:58:ff:26:85:e3:03:24:f3:db:62:04:7f:64:fd:4c:35:
13:c5:ff:cb:56:f1:2c:69:87:0f:94:dd:6b:fc:f5:83:fb:54:
88:85:61:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:41:01 2026 by rpki-client