
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
File: ltl3-HCvlNbcEWribZDw5mWOMqg.mft (raw, json)
Hash identifier: 9W10GlWfQ+HwumfBgW83nAAI5OK/2bH16Xcd3DAq3HA=
Subject key identifier: F3:CE:AD:73:8F:4B:28:BF:7A:CD:34:2E:83:AC:A8:64:55:62:44:53
Authority key identifier: 96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8
Certificate issuer: /CN=96d977f870af94d6dc116ae26d90f0e6658e32a8
Certificate serial: 019CAD5A135305620AD6DDF4093671490E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
Manifest number: 0C53
Signing time: Mon 02 Mar 2026 07:01:27 +0000
Manifest this update: Mon 02 Mar 2026 07:01:27 +0000
Manifest next update: Tue 03 Mar 2026 07:01:27 +0000
Files and hashes: 1: ltl3-HCvlNbcEWribZDw5mWOMqg.crl (hash: rnO4YYvycUdgt/JxawZYTJCPFwwtv4A8hqxp6reJzYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:13:53:05:62:0a:d6:dd:f4:09:36:71:49:0e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d977f870af94d6dc116ae26d90f0e6658e32a8
Validity
Not Before: Mar 2 07:01:27 2026 GMT
Not After : Mar 3 07:01:27 2026 GMT
Subject: CN=f3cead738f4b28bf7acd342e83aca86455624453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:f0:92:81:6a:ed:d0:77:2e:28:4b:58:4a:
89:7b:22:9f:5a:75:a1:24:15:81:92:bd:94:fd:03:
51:2d:99:e4:7b:d9:0a:5c:f0:98:4c:15:b9:7d:ef:
04:c9:21:89:53:24:69:fe:a6:73:95:a0:84:7a:cf:
09:29:eb:3d:4d:c2:a9:99:8f:57:5e:a9:d2:c0:37:
6d:d2:d4:6a:bc:7e:b0:33:2e:82:54:ee:01:7b:4b:
32:be:cc:59:54:11:0c:a8:6c:30:d2:bc:21:b4:cb:
c4:53:a8:22:84:7f:82:8a:ca:f0:6a:95:12:15:2b:
0a:a2:84:aa:76:0a:88:e6:8e:1e:2e:ed:94:2e:ba:
e7:b7:71:5c:02:79:71:a0:1b:a1:c9:c8:3f:8b:38:
21:71:5b:b0:f7:90:30:04:f2:2a:f5:92:91:c9:f9:
7e:01:67:f2:63:4f:cc:6d:03:d0:3f:de:78:3b:36:
e7:85:c3:35:b1:e8:28:b2:b9:91:7d:6c:39:18:32:
69:fe:7f:8f:f1:22:55:9a:78:cf:b9:f0:4e:3c:80:
38:4e:0a:24:96:d4:63:ce:f0:45:27:bd:41:ed:46:
ac:91:5b:1b:93:c0:b8:26:ff:e8:50:f7:68:b3:97:
2d:5c:49:da:ab:18:5e:28:bf:91:1d:14:ab:e3:9b:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CE:AD:73:8F:4B:28:BF:7A:CD:34:2E:83:AC:A8:64:55:62:44:53
X509v3 Authority Key Identifier:
keyid:96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:23:1d:d8:c6:b5:77:e8:73:c1:95:80:bc:ab:bb:5f:50:fd:
d7:a8:11:19:4a:e3:db:cb:93:3c:b8:b5:7e:9b:55:2f:dd:cf:
a1:16:f7:b5:2b:23:8d:5e:50:c8:fa:06:ad:28:89:9a:77:6e:
30:4a:b9:95:b6:e8:87:1a:0a:33:4b:a5:88:3f:f3:bc:37:bf:
2a:01:f1:59:c9:dc:7e:51:f6:d9:24:bd:08:0f:2e:68:68:a9:
99:4e:d1:9b:63:e7:1a:d5:48:04:dc:a9:a2:28:1e:a6:a2:4f:
ae:2c:4a:be:c9:3d:13:0f:62:cc:71:56:e4:54:66:98:12:c3:
f4:64:28:5a:82:d8:c7:4b:b3:09:f5:db:9f:44:ea:08:ec:76:
29:68:05:a9:4c:90:7b:89:04:47:f0:bd:56:57:a2:ee:55:57:
14:b6:05:58:c2:26:8a:ed:41:98:02:44:c6:47:36:45:0d:25:
4d:f2:67:13:41:bd:b4:89:b9:69:03:e9:e6:a7:28:d3:89:46:
d4:fd:22:32:62:9b:22:91:3d:0e:3d:6f:18:9c:a7:01:93:0e:
72:bb:4d:a6:a8:77:c9:fc:81:3b:17:20:1d:3e:61:f1:7e:de:
3b:b0:fe:27:f3:49:f0:c9:e5:70:8c:35:0f:97:a7:47:6b:1b:
60:1c:db:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:56 2026 by rpki-client