Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
File: LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json)
Hash identifier: afJ6gUHb+19SpbIhnVFp2ii44PCyREwyIdoGPAMqQ2s=
Subject key identifier: 2C:DD:5F:FE:B1:90:E0:71:DB:E8:96:2D:2C:2C:F4:55:99:8A:30:E2
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial: 019D9D3F51520CDDCD714017538B6F04F7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
Manifest number: 0261
Signing time: Fri 17 Apr 2026 21:01:05 +0000
Manifest this update: Fri 17 Apr 2026 21:01:05 +0000
Manifest next update: Sat 18 Apr 2026 21:01:05 +0000
Files and hashes: 1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: Qwv2uRj5Le/ANS+aIoIfQglXJW5UaoBDl0HWo+MigoQ=)
2: YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa (hash: r+jOonrhaqNcXtHMcC3c05txxmDgPgiD9LqnOUDboTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:51:52:0c:dd:cd:71:40:17:53:8b:6f:04:f7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Validity
Not Before: Apr 17 21:01:05 2026 GMT
Not After : Apr 18 21:01:05 2026 GMT
Subject: CN=2cdd5ffeb190e071dbe8962d2c2cf455998a30e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2c:0f:bd:86:ff:fb:d9:95:5b:0b:39:d1:f8:
05:9a:00:5c:90:1b:9a:a8:eb:c9:fc:b3:0a:1f:96:
78:0e:08:3e:fb:84:6e:fe:f5:8d:39:30:8f:1b:cf:
be:7c:03:2c:58:c2:51:5d:ef:6b:5a:45:e5:27:a9:
d6:33:33:39:9e:44:ac:27:19:9b:cc:af:99:7d:9c:
2a:88:03:49:ad:c7:81:5c:66:2c:b5:90:81:fc:9b:
ae:9e:1e:47:68:f8:8a:73:27:4b:3a:dc:5b:40:fd:
b5:f5:d6:ba:18:ff:37:bd:9f:84:84:43:da:4c:59:
34:8f:ef:20:2c:ae:51:88:66:86:ca:3c:5f:0a:11:
a7:e5:58:f7:55:fb:b1:87:1a:e2:af:ee:23:6b:c5:
6e:68:db:27:be:6e:16:06:2b:e1:27:4e:99:92:66:
dd:09:76:55:60:3a:a0:b4:7e:db:d7:71:9a:b2:e7:
6d:23:c0:f1:82:20:67:1f:c9:cd:d7:dd:8c:db:e6:
51:75:dc:78:fd:7b:a2:eb:4a:24:20:97:21:79:76:
9c:14:89:e6:52:a4:9b:1f:db:0d:71:74:cd:bc:e3:
15:43:a9:b0:c4:80:15:22:d5:f7:2c:d3:d1:2b:ca:
01:b3:15:b8:0e:d5:3a:36:49:c9:d2:67:3b:bf:d9:
e3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DD:5F:FE:B1:90:E0:71:DB:E8:96:2D:2C:2C:F4:55:99:8A:30:E2
X509v3 Authority Key Identifier:
keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:19:05:0c:82:8f:02:fb:14:d8:54:9c:f4:d3:88:36:e6:a1:
73:fd:7a:c9:eb:bf:c2:c8:30:2e:b1:eb:9d:78:ea:74:97:cb:
4f:71:de:42:34:da:41:e1:2e:2e:92:d5:19:f0:6b:df:59:f6:
ca:b3:fc:de:54:74:a2:98:1a:63:6f:45:bc:56:fc:04:66:c8:
de:7b:68:6e:1e:a0:73:da:9b:72:af:4c:1f:7f:7d:c0:03:65:
f9:65:4d:f8:06:78:84:36:47:6f:3d:6a:5c:67:b4:36:a5:c6:
b0:4e:5c:4f:3a:64:3e:71:f8:22:a0:ad:5d:a7:ee:7e:e0:79:
7a:dd:96:58:1c:96:4f:fb:11:46:f8:72:5a:99:8e:5f:6d:63:
77:4a:47:52:18:59:8a:00:26:11:7a:83:9a:17:44:0a:5f:a3:
41:c4:64:6c:24:f7:e2:34:6f:26:60:8b:53:8b:3c:3b:70:75:
a7:24:b8:84:33:fe:a0:d7:fb:95:db:43:c4:1b:4b:23:f6:08:
07:33:f9:1a:ec:2f:60:09:fd:00:67:a4:a3:c8:47:a4:7e:52:
0f:44:19:c8:1f:4e:f4:61:4a:37:fd:73:e6:31:20:35:08:2b:
56:34:4d:f2:64:2f:60:3d:8f:fc:b4:47:92:1b:c5:e4:14:ea:
5c:cd:a8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:39:08 2026 by rpki-client