Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
File: ltl3-HCvlNbcEWribZDw5mWOMqg.mft (raw, json)
Hash identifier: ETKP/ySRtdlgGL+/BINUPNjtZ3Nta8mUAXOphGNv/EQ=
Subject key identifier: ED:9B:E6:9C:CF:98:BC:4A:64:68:BC:E3:AB:43:25:26:DC:3F:40:21
Authority key identifier: 96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8
Certificate issuer: /CN=96d977f870af94d6dc116ae26d90f0e6658e32a8
Certificate serial: 019D98F5460A5C27CEB31AA163176F837173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
Manifest number: 0CCD
Signing time: Fri 17 Apr 2026 01:01:44 +0000
Manifest this update: Fri 17 Apr 2026 01:01:44 +0000
Manifest next update: Sat 18 Apr 2026 01:01:44 +0000
Files and hashes: 1: ltl3-HCvlNbcEWribZDw5mWOMqg.crl (hash: XTjz4xqIk5ics74Iq+mTKj7Ny6ChzmZo88GgunGEQDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:46:0a:5c:27:ce:b3:1a:a1:63:17:6f:83:71:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d977f870af94d6dc116ae26d90f0e6658e32a8
Validity
Not Before: Apr 17 01:01:44 2026 GMT
Not After : Apr 18 01:01:44 2026 GMT
Subject: CN=ed9be69ccf98bc4a6468bce3ab432526dc3f4021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:3b:b4:bb:92:e1:38:7c:b5:ef:56:93:8a:
67:64:a7:28:63:b1:35:71:36:55:0a:ea:98:b0:2e:
78:64:06:b1:40:2b:9d:ce:7e:5b:6a:d1:f5:53:2f:
57:d5:e1:f8:4e:af:20:d8:1b:fd:19:8c:18:e5:0b:
6c:28:1f:bb:2d:63:63:49:75:03:6d:29:ae:9e:29:
15:9b:78:7e:63:64:77:e8:aa:12:ec:09:f1:8a:e3:
89:1c:f3:e4:c7:d9:30:64:1f:38:e4:51:86:de:7c:
a7:74:ae:d3:9f:bb:df:68:f7:fe:09:41:30:5a:1b:
9a:59:fb:ff:ce:d9:5a:74:33:24:ac:be:6d:f5:b0:
bb:a4:3d:0a:b7:53:99:e2:99:ce:4f:27:70:c5:57:
be:1d:77:bb:2d:c4:1f:ad:3f:1d:ef:70:db:66:54:
14:64:2c:12:0e:29:8a:fc:32:2c:2a:fd:b7:63:b2:
f5:07:fd:ff:e1:51:c9:72:13:e0:1d:fb:26:af:dc:
0c:6b:3a:36:21:8a:ad:cb:66:19:fe:ce:66:57:62:
bf:b6:a6:21:0f:2b:db:8c:2f:0d:84:72:6b:3d:62:
85:e0:40:a1:4b:a9:54:b2:7b:7d:a2:d7:e7:f9:92:
90:97:cb:ac:55:91:1c:51:2f:76:a2:b5:aa:0b:b2:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9B:E6:9C:CF:98:BC:4A:64:68:BC:E3:AB:43:25:26:DC:3F:40:21
X509v3 Authority Key Identifier:
keyid:96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bf:4b:54:97:ba:3e:62:c6:d5:f7:65:a9:46:1c:e1:4f:25:
2e:6c:7a:93:94:eb:69:e9:8b:eb:ba:03:f7:b2:e8:88:7a:94:
35:89:47:c6:44:17:db:9a:40:59:fc:5a:1e:bb:56:76:7c:81:
8d:25:84:da:fe:47:44:08:4d:dc:69:05:de:6f:ca:57:99:0b:
09:5a:60:ac:40:33:6e:e7:ed:9d:d1:28:1d:e0:d3:31:af:a0:
15:a6:8a:3d:eb:01:be:fd:fb:79:4c:42:6a:9a:d8:cf:f6:f0:
86:ad:fa:5a:c6:11:18:91:ab:3c:83:8a:00:6f:2c:b0:26:32:
9b:a2:e0:50:9b:2c:7b:ed:b9:75:25:e8:f3:14:70:98:2f:6d:
ce:c9:52:02:ab:f7:3b:e3:51:c2:04:55:2d:f3:ef:54:c3:0d:
1f:8f:1c:4e:11:73:dd:70:9e:8e:9a:e0:8c:8f:07:db:1b:ee:
4b:8d:15:7e:af:8d:0d:51:c5:f1:d6:0d:4d:3b:18:a9:cd:23:
83:48:9c:86:02:b8:1d:74:2a:22:6c:b1:a8:a4:89:d2:b0:84:
c0:ed:b7:58:53:5e:d1:fa:66:43:07:ed:59:24:78:0a:55:ac:
3f:2c:2a:02:59:a0:02:16:8f:8e:08:f6:b2:b4:83:65:70:9a:
49:61:2d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:47 2026 by rpki-client