Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: +0gGWpD4sOcnBwOYiezUGAC58kOeUpnFG7sH1gBTY/o=
Subject key identifier: 64:05:4A:0F:09:79:93:C9:20:A3:6E:DD:11:0B:2C:1B:19:F1:BC:6F
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 019ECB5EF97B113DD295601FAAB1309A16D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0CC9
Signing time: Mon 15 Jun 2026 13:00:59 +0000
Manifest this update: Mon 15 Jun 2026 13:00:59 +0000
Manifest next update: Tue 16 Jun 2026 13:00:59 +0000
Files and hashes: 1: MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa (hash: Ef0KimqUfcjmjAh99qPeo3PT6AwZiNEjh0UvdcbEniQ=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: fRKZGU+jOsylu96rWuoevguVfzX3bIvPfZJflBDcDXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Jun 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:5e:f9:7b:11:3d:d2:95:60:1f:aa:b1:30:9a:16:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Jun 15 13:00:59 2026 GMT
Not After : Jun 16 13:00:59 2026 GMT
Subject: CN=64054a0f097993c920a36edd110b2c1b19f1bc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:18:f5:e5:ac:a0:72:c4:45:6d:2a:e2:17:
23:ca:a9:ab:aa:df:bf:b7:c7:94:42:e4:28:4e:eb:
e1:c1:25:cc:e1:f8:c9:3c:fb:c6:9c:0a:44:c4:a8:
4b:2b:10:d3:b1:3c:39:8f:87:5d:e1:05:85:4a:8d:
9a:0e:0c:2c:46:46:d4:f2:31:35:e8:6c:75:b1:4f:
dd:a3:35:89:e9:08:47:1f:ad:cf:2b:25:bb:7d:31:
38:a7:ba:ef:cb:96:2b:96:6e:25:91:bb:f6:ba:48:
d2:d6:63:74:b3:c3:35:12:ac:e1:98:e5:bd:d3:ad:
dc:64:dc:38:8b:05:1e:15:3a:ec:a9:d1:08:51:76:
7a:96:82:06:9f:e8:6c:73:a1:e9:ad:4f:79:20:4f:
68:4a:16:eb:e5:d3:d9:dc:b6:83:12:a0:89:77:ad:
20:27:ae:d1:f8:c1:19:0b:6d:5e:09:c9:49:b5:d0:
63:ec:e6:bc:db:a3:51:3e:e4:4f:a8:12:bf:2c:92:
90:27:d2:57:bb:83:66:45:4a:47:e6:af:90:51:dd:
3d:b1:b9:a9:60:8f:a9:f4:ef:73:df:84:cb:e7:22:
29:7c:86:b3:9f:43:91:1c:3c:49:a9:90:b2:ac:8b:
e0:ce:f1:4e:5d:c8:bd:d2:5b:bb:ec:b0:0d:ae:67:
90:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:05:4A:0F:09:79:93:C9:20:A3:6E:DD:11:0B:2C:1B:19:F1:BC:6F
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:0d:42:b2:bf:f2:c0:1c:f3:13:f9:a1:2c:47:8d:1a:c6:23:
d7:de:5f:27:55:00:03:f3:d8:6b:8c:ff:6c:64:94:4a:59:fa:
a3:90:cb:fb:58:df:0d:b4:e1:db:c8:3a:04:1f:06:d4:91:c9:
99:30:ed:22:dd:31:5e:9c:d5:c8:8d:c2:69:92:b1:14:31:26:
27:6e:00:7b:6e:5b:f5:c9:4d:0a:33:6b:3d:8b:c1:5d:16:fd:
ae:89:0b:77:70:dd:42:de:73:c0:fb:04:94:2f:cd:76:d5:b8:
d7:ef:f2:33:bf:fa:af:44:d9:ce:78:96:d6:9c:f8:b0:de:a5:
12:ca:ae:ff:b1:42:13:72:34:ae:ee:67:84:c7:01:db:eb:b0:
8a:2c:30:ba:10:a3:0c:18:25:c5:15:77:eb:15:ae:a3:06:00:
4f:8c:cb:98:52:14:6f:d8:65:37:ab:75:32:c5:76:14:52:c0:
06:1b:c1:a3:83:5b:51:55:ea:53:d2:02:87:d5:f3:a7:72:e8:
fc:3e:3e:09:d3:64:0f:82:4a:43:82:d2:69:f2:69:d0:64:6e:
97:12:92:4f:d9:93:20:6c:8f:8b:f3:10:5c:ea:87:4b:33:b9:
33:3b:c4:48:29:8a:50:9c:43:52:99:9b:ff:24:da:e3:1b:ee:
f6:72:65:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 16:52:43 2026 by rpki-client