Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: jL8zfApbnHWFftmLx/zl2SCpKC/QpEbqzkw6lcwEwKk=
Subject key identifier: AD:4A:5B:9B:19:4A:BB:41:95:3B:69:FA:96:C6:DE:67:86:0E:6F:E2
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 01A10700C19851DCAC7AE992AB88AB6667D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0DF1
Signing time: Sun 04 Oct 2026 13:00:52 +0000
Manifest this update: Sun 04 Oct 2026 13:00:52 +0000
Manifest next update: Mon 05 Oct 2026 13:00:52 +0000
Files and hashes: 1: MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa (hash: Ef0KimqUfcjmjAh99qPeo3PT6AwZiNEjh0UvdcbEniQ=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: 2kskZXxPUkrieTEcMDSUQV70QsxIIX9bc4eycjtUbnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:00:c1:98:51:dc:ac:7a:e9:92:ab:88:ab:66:67:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Oct 4 13:00:52 2026 GMT
Not After : Oct 5 13:00:52 2026 GMT
Subject: CN=ad4a5b9b194abb41953b69fa96c6de67860e6fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:be:20:ef:a7:33:40:dd:12:90:66:a9:70:04:
5c:2b:c1:51:75:01:c0:0d:55:37:c5:e9:fc:45:d8:
3e:d5:1e:18:e3:73:b9:39:00:f0:99:4d:a3:0c:f7:
9c:19:6e:67:a5:9f:de:97:e5:03:57:50:ba:0b:d5:
12:ed:be:60:c3:6f:fa:93:cb:44:e9:06:ec:ad:47:
09:e1:e3:35:dd:88:34:92:30:63:25:10:b0:85:f8:
95:b7:44:fb:72:28:a2:bc:59:58:c3:23:2f:29:ae:
86:74:d5:82:af:84:bb:a5:c4:62:2a:c8:3e:17:6c:
ce:42:6b:d7:7f:cf:f5:76:9d:83:79:96:b8:15:d1:
0a:eb:02:a5:d9:59:57:69:58:95:71:41:01:fa:8d:
28:20:35:b8:08:a5:2b:35:10:e7:fe:96:32:5d:a3:
94:7d:e9:63:54:b5:f0:27:f1:40:aa:ae:4f:85:e7:
f0:fc:d8:4d:04:ad:07:3e:d0:3a:a9:4f:4b:16:a8:
f5:e5:eb:ba:72:0b:d1:0f:09:2b:ae:1a:8f:ab:04:
1f:13:ad:3f:ac:eb:4d:37:d1:76:b3:9e:e4:3e:5f:
2a:2c:a4:3c:fb:a2:f4:51:bb:75:75:21:31:a1:09:
d4:5c:3a:6d:15:b4:79:02:c4:5f:2a:57:4e:77:19:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4A:5B:9B:19:4A:BB:41:95:3B:69:FA:96:C6:DE:67:86:0E:6F:E2
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a0:11:a4:3a:d4:a5:32:9e:41:15:45:29:49:82:74:4e:6a:
0b:cd:82:c9:f8:37:11:04:4b:10:26:8f:66:ac:5d:0f:87:73:
4a:99:a4:f6:ca:22:2f:e1:5e:df:8c:74:9c:75:8e:f0:dd:7c:
35:1e:39:65:b6:c4:63:e7:fc:41:c6:53:a5:62:68:ef:54:bd:
0a:0d:a1:ff:e6:81:95:17:96:a4:81:d3:9f:e0:4c:aa:b8:9f:
65:4c:ba:d9:7d:ac:63:f5:ec:68:3f:70:3a:7c:7c:2a:d1:d8:
4e:88:a2:0a:aa:9d:92:eb:64:8a:30:0d:06:ae:f0:3f:55:bb:
1d:dd:0c:39:cf:e1:7d:90:c5:23:89:62:54:e7:ae:82:cd:35:
cb:08:ee:63:d9:1c:89:88:d7:ba:1b:41:37:44:df:6c:a6:6f:
91:3a:f4:13:65:bb:59:ce:bf:0d:e7:a2:c7:56:17:4f:b7:dd:
5c:5e:83:92:78:45:1e:66:6b:8c:aa:0e:3b:da:69:f8:57:18:
1d:45:aa:9b:73:70:1e:c4:d0:22:73:df:f1:05:85:22:50:4e:
f5:d7:5e:0c:b3:5f:25:0c:73:91:ce:56:3f:6a:0d:7d:12:28:
f4:98:74:6c:1d:0f:a1:f5:f6:35:10:ee:d1:61:8b:e6:b4:48:
35:28:c7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:07:58 2026 by rpki-client