Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: 9mqDxaUKNsIPgje0tbZsAKqUikBxW3MU1WOQEg+5+4E=
Subject key identifier: 41:70:AA:17:2D:B0:C7:2B:BD:51:77:3E:AF:83:F3:A1:77:CE:D0:E7
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 019D985052194DD32490F6BE1F574F8264C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0C2A
Signing time: Thu 16 Apr 2026 22:01:33 +0000
Manifest this update: Thu 16 Apr 2026 22:01:33 +0000
Manifest next update: Fri 17 Apr 2026 22:01:33 +0000
Files and hashes: 1: MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa (hash: Ef0KimqUfcjmjAh99qPeo3PT6AwZiNEjh0UvdcbEniQ=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: QioOqtrBj4HQ1f57ycT1b1l3Fhvs/awLwsJTwKPbUpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:52:19:4d:d3:24:90:f6:be:1f:57:4f:82:64:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Apr 16 22:01:33 2026 GMT
Not After : Apr 17 22:01:33 2026 GMT
Subject: CN=4170aa172db0c72bbd51773eaf83f3a177ced0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:93:3b:6d:ff:16:5f:1e:de:8d:31:4b:fd:
35:98:cf:99:d4:f5:93:06:28:1e:be:64:09:25:7f:
11:5f:44:cd:c1:b3:61:ee:b0:ca:96:43:65:cb:b7:
f8:47:12:c4:3f:1a:b8:31:6e:33:ba:b2:0c:51:56:
4e:24:5e:36:35:61:05:cf:b1:c0:24:c2:5b:30:03:
57:da:0c:b2:fa:40:6c:02:35:2d:04:0b:54:df:74:
d4:02:f8:4f:3b:3b:22:b1:a8:fb:a5:45:6c:03:a0:
a2:e7:78:18:2b:46:d8:49:74:ae:06:f1:fa:97:fd:
5f:a1:13:1c:ad:a3:57:e3:46:f2:37:67:0e:fc:c0:
81:19:a2:66:fd:17:4b:c6:85:d5:18:6e:02:b0:51:
2c:69:22:5c:47:a7:07:cd:64:87:80:e2:d8:e6:fe:
74:7d:00:12:bb:23:6d:65:60:99:1c:5f:10:de:d5:
2d:06:42:77:40:c9:2d:9c:9c:ab:88:6d:69:1b:38:
40:93:1c:33:c5:87:5a:04:fd:bc:00:e9:c9:fb:fc:
1f:1c:47:5d:dc:91:79:f2:cf:d5:4e:22:b4:39:a6:
bd:be:cf:4e:34:85:5b:62:ff:88:09:b5:e9:29:1a:
1b:87:99:db:38:cc:9e:21:e4:59:2d:59:5d:b9:5a:
b6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:70:AA:17:2D:B0:C7:2B:BD:51:77:3E:AF:83:F3:A1:77:CE:D0:E7
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:06:2a:91:bc:84:a6:06:5e:f8:a6:3d:d3:59:b5:79:a4:a4:
35:ed:bf:2e:d6:46:df:2f:28:ac:df:bc:4e:94:3f:b6:9a:d3:
8a:8e:86:ec:71:ad:21:68:aa:da:ca:ac:32:c3:8c:e5:1d:e9:
6d:3c:92:a2:de:3e:26:8f:3d:30:a7:85:2d:6c:24:1a:c4:f0:
24:85:29:68:79:f0:2e:a2:3d:20:a8:75:ed:b9:e1:2d:f4:09:
84:8f:5e:20:b2:d3:1a:19:1b:eb:d6:7d:df:66:ed:7d:91:de:
2e:0f:3b:62:0d:b5:17:c5:49:75:9d:0c:17:af:31:cc:b8:5b:
4a:2c:d0:e5:2e:05:52:42:f7:0f:1c:87:fa:11:a6:3c:1b:fb:
5f:64:78:b6:b4:72:b6:1c:b6:1a:09:55:ea:14:b9:19:b0:57:
87:45:c5:24:5f:44:1e:98:df:e3:91:c3:ae:23:1b:98:07:3a:
7a:d8:62:81:b8:a8:f1:bc:48:6c:1c:41:18:59:e5:ef:00:14:
1b:0e:64:c7:69:87:8c:c0:8e:3f:a8:ef:06:7b:af:14:4c:35:
5a:10:c5:84:65:00:8e:b6:e3:1b:8d:90:b0:97:dd:5b:8d:6f:
93:7e:9d:11:20:db:18:fd:13:a3:e8:0a:8b:e1:05:d9:cb:ff:
34:95:ce:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUFIZTdMkkPa+H1dPgmTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZDk1ZmUyZDkwOTQzYzkyZjZjMjhmM2IzMjlmODIwMTVj
ZDkyYWUwHhcNMjYwNDE2MjIwMTMzWhcNMjYwNDE3MjIwMTMzWjAzMTEwLwYDVQQD
Eyg0MTcwYWExNzJkYjBjNzJiYmQ1MTc3M2VhZjgzZjNhMTc3Y2VkMGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJeTO23/Fl8e3o0xS/01mM+Z1PWT
BigevmQJJX8RX0TNwbNh7rDKlkNly7f4RxLEPxq4MW4zurIMUVZOJF42NWEFz7HA
JMJbMANX2gyy+kBsAjUtBAtU33TUAvhPOzsisaj7pUVsA6Ci53gYK0bYSXSuBvH6
l/1foRMcraNX40byN2cO/MCBGaJm/RdLxoXVGG4CsFEsaSJcR6cHzWSHgOLY5v50
fQASuyNtZWCZHF8Q3tUtBkJ3QMktnJyriG1pGzhAkxwzxYdaBP28AOnJ+/wfHEdd
3JF58s/VTiK0Oaa9vs9ONIVbYv+ICbXpKRobh5nbOMyeIeRZLVlduVq2wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFwqhctsMcrvVF3Pq+D86F3ztDnMB8GA1UdIwQY
MBaAFJbZX+LZCUPJL2wo87Mp+CAVzZKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMmNjMjctOTQ0OC00MzdiLTk3MjIt
ZGM5YjljNjAxM2Y2LzEvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zMmNjMjctOTQ0OC00MzdiLTk3MjItZGM5YjljNjAxM2Y2
LzEvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqAYqkbyE
pgZe+KY901m1eaSkNe2/LtZG3y8orN+8TpQ/tprTio6G7HGtIWiq2sqsMsOM5R3p
bTySot4+Jo89MKeFLWwkGsTwJIUpaHnwLqI9IKh17bnhLfQJhI9eILLTGhkb69Z9
32btfZHeLg87Yg21F8VJdZ0MF68xzLhbSizQ5S4FUkL3DxyH+hGmPBv7X2R4trRy
thy2GglV6hS5GbBXh0XFJF9EHpjf45HDriMbmAc6ethigbio8bxIbBxBGFnl7wAU
Gw5kx2mHjMCOP6jvBnuvFEw1WhDFhGUAjrbjG42QsJfdW41vk36dESDbGP0To+gK
i+EF2cv/NJXOMA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:42 2026 by rpki-client