Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
File: LtxXg3JdWVAZYqostbWQxCtX314.mft (raw, json)
Hash identifier: 7chZBZzDc9KCGVW/822DP5Qi2Y7iz9py+kXoOAqK8cA=
Subject key identifier: 7A:27:7F:2B:93:7C:F4:BC:8E:EF:DB:16:6C:C0:B6:C3:E9:27:D1:82
Authority key identifier: 2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
Certificate issuer: /CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Certificate serial: 019CAC475AE3291359C8EE1D13B77F5B4EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
Manifest number: 1591
Signing time: Mon 02 Mar 2026 02:01:23 +0000
Manifest this update: Mon 02 Mar 2026 02:01:23 +0000
Manifest next update: Tue 03 Mar 2026 02:01:23 +0000
Files and hashes: 1: LtxXg3JdWVAZYqostbWQxCtX314.crl (hash: 76JU27tk/w/s+Qlbe0a6ExN8klPvMoULkDvLcXlFm8I=)
2: P0OUzf8dSvmExJwUtJ0n2x9_5To.roa (hash: TK5fbLc52j4bkHB/r8jxGRizxLaHRCRki8SR0RyXg1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:5a:e3:29:13:59:c8:ee:1d:13:b7:7f:5b:4e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Validity
Not Before: Mar 2 02:01:23 2026 GMT
Not After : Mar 3 02:01:23 2026 GMT
Subject: CN=7a277f2b937cf4bc8eefdb166cc0b6c3e927d182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:86:ff:a9:1a:d2:3e:67:88:16:ec:40:86:
44:13:2c:57:53:65:49:21:15:f7:bf:47:af:73:a0:
df:7c:14:24:2c:78:0a:a4:27:e8:c7:a5:09:8a:36:
64:f9:f8:71:c3:8a:88:66:93:ee:0d:6b:79:55:4a:
91:aa:0e:c4:d4:24:73:9d:94:dc:3f:49:84:6b:d3:
4e:79:6d:82:e4:46:72:9e:29:73:0b:9e:67:50:b8:
fa:f0:27:6b:91:54:18:4b:f2:84:39:22:52:44:29:
b7:3e:3b:b7:d5:8e:5e:4d:89:c7:22:19:dc:4f:21:
f5:30:82:c7:26:56:ae:80:80:00:53:7f:95:83:58:
c1:94:cc:be:2a:64:8d:f9:99:8b:62:52:6c:a5:87:
e3:56:1f:9f:8d:24:7f:2a:48:21:32:b7:d6:5d:00:
a7:19:6b:54:63:c0:9b:ea:a5:85:c6:c3:7e:3b:f2:
be:19:b9:c0:79:21:8a:29:b9:36:98:03:ad:21:7d:
9f:67:ee:e5:8a:ba:29:8f:95:90:04:f4:f7:85:4b:
03:e3:3a:6a:79:ba:4c:d7:0b:13:6a:15:f6:e5:d5:
9e:4d:ec:5d:ab:6e:22:c8:c1:00:98:d3:4e:ac:14:
e5:9d:1a:4c:9d:b3:c3:af:d8:14:dd:eb:90:a0:3b:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:27:7F:2B:93:7C:F4:BC:8E:EF:DB:16:6C:C0:B6:C3:E9:27:D1:82
X509v3 Authority Key Identifier:
keyid:2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6c:d5:79:9f:42:f7:bc:91:93:8d:14:00:a2:e3:59:40:e2:
c0:5f:35:a2:a2:0f:74:eb:9d:37:8b:82:b6:07:ae:4b:5e:fa:
ff:ee:dc:a9:eb:1b:47:3c:63:8d:b7:73:15:3d:00:5b:38:ee:
51:fd:ec:3d:f8:69:47:cc:93:07:84:0e:26:e8:5a:a6:51:2a:
6a:7b:4b:46:f7:f0:bf:4b:00:6f:0b:f9:18:f5:0b:29:02:55:
e8:10:56:7c:99:7d:98:f4:3e:7f:f0:da:a9:5f:4d:53:81:bd:
5b:04:0b:13:40:56:04:7e:9f:8e:c0:4a:9e:51:d7:64:d6:2f:
69:ab:0b:94:f8:b1:43:3e:1f:06:65:8b:33:ce:a8:33:fe:ad:
f5:86:5f:00:38:7e:e6:1c:c0:c3:6f:ae:f0:b0:fb:33:44:89:
4c:ac:2d:fa:ac:21:57:2c:c7:2e:65:df:8f:bb:73:b2:bd:52:
f4:6a:0e:82:54:ac:e2:04:ee:e5:ba:e7:7d:34:45:65:2d:c8:
f0:da:b1:a4:d3:17:8b:07:5c:21:09:e0:e3:c1:24:92:e9:74:
ad:b1:72:23:3e:16:80:e0:58:a7:f0:a8:af:48:2b:79:98:e1:
7c:37:a0:fd:cb:3d:6b:e6:5c:42:a3:de:cd:28:c5:b8:50:31:
18:7a:e8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:24 2026 by rpki-client