Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
File: LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json)
Hash identifier: fneYuNzmdGCQUbGdDCzoD8V5TkZdjCGflnOEoJVT24w=
Subject key identifier: 26:E8:A6:78:64:5A:C1:79:15:29:31:A8:FA:82:01:A1:62:D4:28:1D
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial: 01A0CA46A48004ABF7DDED864B0FEC81F412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
Manifest number: 0406
Signing time: Tue 22 Sep 2026 18:00:22 +0000
Manifest this update: Tue 22 Sep 2026 18:00:22 +0000
Manifest next update: Wed 23 Sep 2026 18:00:22 +0000
Files and hashes: 1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: nKxpTctY41kBdNk0CSsjkoerSFTWBnxs/UkC/O2jhRc=)
2: YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa (hash: r+jOonrhaqNcXtHMcC3c05txxmDgPgiD9LqnOUDboTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:a4:80:04:ab:f7:dd:ed:86:4b:0f:ec:81:f4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Validity
Not Before: Sep 22 18:00:22 2026 GMT
Not After : Sep 23 18:00:22 2026 GMT
Subject: CN=26e8a678645ac179152931a8fa8201a162d4281d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:cb:28:07:ac:a1:ca:34:98:68:08:6f:46:
aa:6d:4b:3f:ed:7e:a5:31:14:3b:49:20:13:d7:24:
35:72:20:3d:a8:dc:22:69:ed:5e:62:28:8f:00:9f:
dc:0f:55:7f:b1:06:3c:e5:61:ae:10:b8:2a:5e:ef:
5f:a6:ea:ba:fc:10:73:7b:3f:1e:13:18:7d:c9:24:
ab:4c:1e:b4:23:9f:b2:58:5d:fb:00:47:9f:eb:94:
8e:32:7a:ab:35:3c:3c:aa:d4:61:c9:c4:1b:ab:ff:
3f:57:5d:15:5c:bb:33:5d:43:61:7c:dd:77:5b:77:
58:ed:dc:d1:f9:9c:4e:9d:1e:41:af:00:8b:77:62:
a9:b8:fb:3f:6f:f1:f8:39:ee:40:c7:d8:07:30:18:
44:81:1d:b9:6b:17:27:58:35:9a:a7:f0:8d:96:2a:
e4:37:18:cb:12:18:58:98:cb:32:c5:86:95:d6:77:
6e:bf:77:ab:86:f9:95:f0:1a:ed:cd:59:70:6d:14:
e7:dc:2e:50:ed:f5:d0:31:5d:d9:c3:fc:5c:7b:b1:
9d:8f:5b:89:dd:b0:9d:1a:fd:a2:91:4b:90:2a:f3:
93:27:2d:2b:cc:45:d1:b5:76:2c:57:c7:84:15:ea:
0b:fc:e9:3c:4c:22:3a:b2:61:18:31:32:3a:d5:0a:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E8:A6:78:64:5A:C1:79:15:29:31:A8:FA:82:01:A1:62:D4:28:1D
X509v3 Authority Key Identifier:
keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f5:83:80:7d:44:51:af:b3:89:14:d2:d3:dd:43:41:b2:59:
7c:5b:44:5f:e3:6f:f3:9e:33:02:b6:0d:d9:6d:d6:97:23:29:
50:77:b1:d8:ff:88:07:69:1e:2c:cf:08:04:a0:67:df:e8:7e:
4c:4b:c0:6a:12:e8:95:2c:b8:c1:a5:25:95:77:05:66:21:19:
86:b7:b8:32:00:8a:97:6c:c1:6b:ac:97:ae:91:6e:6c:0a:40:
8a:ec:fb:c1:19:b4:fb:45:1c:5a:16:8d:b6:5d:f2:3e:bb:9c:
7b:96:d6:5e:f9:ff:da:87:f2:b1:34:00:68:26:90:7c:af:67:
58:99:28:db:8e:2f:04:56:31:a5:74:1a:72:7a:58:bd:4f:39:
9a:52:e2:b4:ce:31:4c:54:9a:3e:e1:d2:9f:99:44:b7:a6:be:
cb:e1:da:68:2c:22:8c:c1:67:4a:72:8a:50:82:56:1f:34:66:
2c:0e:47:3d:87:60:b6:01:58:72:48:5f:ad:0e:1e:10:c3:cd:
3a:3d:9e:10:98:3e:fa:37:cf:a2:ec:b0:79:69:32:0a:af:21:
90:4e:23:6a:fe:26:5f:f6:32:e4:6c:43:0e:92:71:d8:c3:12:
ec:29:fc:e3:1b:12:3c:3d:20:30:fa:d8:e5:99:ac:7e:41:bd:
4d:50:a0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:28:12 2026 by rpki-client