Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
File: LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json)
Hash identifier: abQzqviUAVHW+y0osjHemxiBSxJlA297G/y31E+IJ3U=
Subject key identifier: 33:04:F5:AB:0E:84:68:C6:87:71:FB:55:3F:37:8F:06:57:EF:3E:4E
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial: 019EC0DBAEB28C4DE16D6C80722F3243A4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
Manifest number: 02F8
Signing time: Sat 13 Jun 2026 12:01:22 +0000
Manifest this update: Sat 13 Jun 2026 12:01:22 +0000
Manifest next update: Sun 14 Jun 2026 12:01:22 +0000
Files and hashes: 1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: LOGQ862s9hvRkh5X3SQlc18eGMSpB4TNzaMrEjxD/1Q=)
2: YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa (hash: r+jOonrhaqNcXtHMcC3c05txxmDgPgiD9LqnOUDboTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:ae:b2:8c:4d:e1:6d:6c:80:72:2f:32:43:a4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Validity
Not Before: Jun 13 12:01:22 2026 GMT
Not After : Jun 14 12:01:22 2026 GMT
Subject: CN=3304f5ab0e8468c68771fb553f378f0657ef3e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:47:c5:3c:07:12:e8:dd:eb:6b:23:40:06:
5e:fa:32:55:a5:5d:71:3b:22:c8:24:d8:80:0a:48:
3d:5f:15:9d:30:89:99:02:fe:2d:7e:e8:e1:71:98:
01:75:7e:58:eb:9e:5d:8e:91:6b:17:8d:6d:4e:ec:
a3:0a:aa:e5:e7:da:79:bd:61:fa:7b:e1:a4:03:20:
4f:0a:5e:54:1a:e0:cc:5e:ae:eb:63:a9:7d:6e:15:
50:64:b6:66:fb:55:37:c5:d4:ca:7d:27:d9:af:2d:
1e:c0:3a:65:7f:68:6d:7e:35:b4:dd:fe:e3:8d:da:
c4:88:57:95:32:36:5f:25:d9:05:d1:23:51:89:8e:
4d:6e:e7:76:f3:02:6c:69:b1:2b:ba:dc:b8:78:4d:
ea:14:8d:86:dd:75:09:43:11:42:7b:d8:56:14:04:
8b:32:0e:f2:57:43:68:33:61:a2:e9:99:33:f2:80:
a1:34:a1:31:96:3c:13:9b:2d:f7:9d:8b:09:06:b8:
9d:6e:73:0f:8f:6b:4a:ae:6e:e2:97:df:41:71:df:
bb:e6:2e:66:11:71:e0:0d:db:e5:86:b7:2d:a1:72:
92:75:fb:be:e9:9c:a1:5a:20:6d:c4:2c:82:f9:62:
cf:55:fb:d8:f0:ea:13:93:07:8a:cb:a6:2b:6b:f6:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:04:F5:AB:0E:84:68:C6:87:71:FB:55:3F:37:8F:06:57:EF:3E:4E
X509v3 Authority Key Identifier:
keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:38:f6:4d:aa:d9:01:66:04:5d:10:0f:62:e1:44:c3:e7:6e:
55:03:22:97:ae:2a:e1:ed:06:90:26:14:54:d4:17:f5:fa:08:
3f:b4:5a:db:ff:66:c6:18:08:55:d2:98:db:38:18:5d:48:42:
58:fb:44:0a:37:f3:42:05:1d:15:68:83:61:3c:2e:2b:2c:8e:
9d:58:a7:dd:2e:e9:f8:cc:00:34:1f:37:77:39:26:d8:93:ff:
8f:cb:92:c5:2e:30:db:23:39:05:11:68:16:d7:c4:7b:6d:9c:
ed:40:f5:ec:17:c8:74:db:3e:8b:18:16:33:68:80:aa:6b:0c:
6b:29:89:ce:43:49:2d:6c:3a:88:1e:0d:b3:47:ee:41:71:4f:
f0:58:89:5b:d5:d0:ea:17:15:78:be:ab:d1:80:c4:3e:06:8d:
ae:6f:32:4d:01:8a:dc:08:00:5e:ed:01:0e:dc:e6:4b:14:52:
32:06:cc:fc:2b:c5:ae:2f:93:d1:44:9e:64:27:34:fa:e4:81:
af:2e:0b:f6:de:b1:2e:50:e6:1f:58:c2:82:67:58:f0:bf:e4:
2a:1c:43:dc:2e:98:88:c6:2d:65:c3:dc:df:38:52:2c:89:a0:
6e:c9:ed:c5:96:ff:39:88:f8:f3:20:ac:67:fa:0d:25:ab:0e:
89:5f:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:20:49 2026 by rpki-client