Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: q0m1JCJ9qH/q3msudEBt+Ox9onhhoVzrFIuz18szEx8=
Subject key identifier: 67:2F:BB:E0:91:1B:10:BE:A1:61:C5:CE:D6:E1:95:E8:0B:9B:D2:DE
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 01A10CCB90F1F18562AC43267E9F28156A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0DF4
Signing time: Mon 05 Oct 2026 16:00:29 +0000
Manifest this update: Mon 05 Oct 2026 16:00:29 +0000
Manifest next update: Tue 06 Oct 2026 16:00:29 +0000
Files and hashes: 1: MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa (hash: Ef0KimqUfcjmjAh99qPeo3PT6AwZiNEjh0UvdcbEniQ=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: bDaToCLG/Yd5t/FBpbmQb1dSGHP1RBowZLyJDUuPrXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:cb:90:f1:f1:85:62:ac:43:26:7e:9f:28:15:6a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Oct 5 16:00:29 2026 GMT
Not After : Oct 6 16:00:29 2026 GMT
Subject: CN=672fbbe0911b10bea161c5ced6e195e80b9bd2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:e3:a5:bd:e9:e2:c3:97:eb:f9:ce:59:7c:
a5:6b:5e:dd:ed:a0:46:43:f2:d2:42:8e:96:0f:3f:
b0:c3:be:b9:df:b7:ed:b8:5a:10:f3:50:03:81:0a:
30:d5:e8:f8:5d:a3:8a:23:b9:5b:5f:37:21:f0:e7:
1d:35:21:5b:6c:c5:24:b0:b8:13:19:45:80:8a:93:
d9:af:9f:15:a8:db:a3:cd:80:41:ff:97:42:51:ce:
cd:f0:a8:16:2b:3e:89:90:bc:8c:30:37:f2:07:db:
02:7b:8b:eb:f0:3f:af:57:81:06:a1:08:67:14:f2:
15:1d:ae:1f:76:20:c8:7d:db:bb:49:a7:ea:73:90:
6b:f7:a9:c8:8c:1d:f4:0a:50:64:41:a2:42:d7:3c:
20:99:e8:b3:0c:e0:f2:66:9f:04:33:f9:ea:31:6e:
57:aa:3a:b0:27:be:17:6e:28:c6:d3:2f:59:7b:2f:
ac:c7:32:42:ae:fc:96:63:2e:0e:c0:d3:96:72:b6:
fb:ba:c4:bc:d5:17:01:19:39:54:18:43:6b:c4:78:
2f:e0:76:e2:3f:17:64:06:24:84:b6:76:b9:fc:a0:
7b:1e:ec:b0:b3:ad:32:6e:8f:be:22:ab:55:05:27:
04:5c:f2:f5:f0:f8:4b:7f:aa:2c:fa:eb:3a:4a:17:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2F:BB:E0:91:1B:10:BE:A1:61:C5:CE:D6:E1:95:E8:0B:9B:D2:DE
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:60:2d:30:23:67:8d:bb:1b:12:b0:95:52:a4:d2:c2:27:81:
97:41:32:d0:db:23:ee:1b:d0:eb:f8:f6:f9:8e:05:92:cc:b1:
4a:ef:2a:1c:ff:2a:bd:fe:8c:92:fc:79:db:c0:a0:50:2f:e6:
b2:30:37:a5:1b:d3:89:04:11:03:18:75:3a:fc:ba:e5:85:86:
22:e1:28:32:0b:fa:08:ab:63:57:90:e1:83:c0:b9:68:ca:01:
dc:af:4c:56:ba:bd:f3:d2:21:1a:14:a0:47:ae:44:45:8e:2c:
85:ab:a0:58:1b:54:cb:69:d0:bc:35:99:fe:9c:26:ad:f4:82:
77:f1:8a:b4:26:72:e4:d0:f0:27:86:99:a3:10:40:9e:99:2e:
74:e9:23:7d:31:ea:05:29:cb:52:1d:4f:1e:98:f5:8f:5d:f4:
fa:15:11:cf:45:e0:d9:66:26:f2:e2:64:01:93:4e:6a:e3:35:
bb:3e:3b:51:12:4e:19:ce:bb:48:5e:d6:5f:a3:12:cc:3a:eb:
02:38:f9:eb:08:dc:ca:40:50:c2:34:e5:4f:44:49:68:f5:c6:
23:90:34:25:1d:93:45:b2:9f:24:b8:bf:e0:8f:ab:5d:57:ae:
a0:3a:55:75:dd:5f:1e:96:4c:47:6e:2e:ea:a4:f0:67:82:c7:
c8:5b:84:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 21:04:48 2026 by rpki-client