Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: e7UY8POXowvOK9Fddt+cszribC89h/CVKcB6DNj8j4k=
Subject key identifier: C6:88:D3:62:74:F3:48:38:56:37:DC:D9:72:1F:45:B9:8B:82:10:90
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 01A10ADDE852B08ACF0FE7F7C5FB61BC9EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0DF3
Signing time: Mon 05 Oct 2026 07:01:17 +0000
Manifest this update: Mon 05 Oct 2026 07:01:17 +0000
Manifest next update: Tue 06 Oct 2026 07:01:17 +0000
Files and hashes: 1: MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa (hash: Ef0KimqUfcjmjAh99qPeo3PT6AwZiNEjh0UvdcbEniQ=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: QTqq3b3UmUwShYoJA2U5BDByjGjrW4sTBZ6q6iAEL0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:dd:e8:52:b0:8a:cf:0f:e7:f7:c5:fb:61:bc:9e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Oct 5 07:01:17 2026 GMT
Not After : Oct 6 07:01:17 2026 GMT
Subject: CN=c688d36274f348385637dcd9721f45b98b821090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:e6:52:b2:ee:1d:9a:48:17:2b:27:e7:6e:
fe:26:ca:ac:07:18:1b:b3:1d:7b:6d:59:be:67:37:
29:7f:b1:17:97:9f:5c:d3:e2:dc:a8:18:cd:1e:4e:
f7:04:e7:73:66:84:5e:18:7a:1d:65:3b:b7:09:de:
26:57:0a:37:23:b5:49:2d:42:f0:b8:95:b7:32:8e:
07:23:9f:d7:17:c5:ff:f9:89:12:b4:a8:f6:66:da:
0b:12:99:2e:c5:ca:ce:32:1f:29:db:e8:54:ed:a8:
e0:25:92:f2:bc:fa:71:30:cd:39:e1:72:83:e9:cd:
09:17:b3:d6:71:09:90:f8:7a:24:55:ff:5c:77:91:
36:35:98:c8:cb:c9:66:6e:66:59:c0:1d:00:d7:8d:
bc:b6:f6:a9:83:17:35:6f:b0:f7:75:f3:77:a7:8b:
ae:e7:e8:f1:c6:e0:37:dc:3d:06:71:38:8e:f3:44:
9c:dc:6a:22:95:d1:64:93:2b:7e:dd:65:77:0c:44:
1b:ab:24:a2:65:0a:ba:ca:60:a0:a4:6d:49:c7:8d:
04:7c:09:20:e2:78:41:13:d4:e3:15:59:7d:93:90:
8d:8f:70:9f:e4:4f:2c:b3:50:70:e4:4e:a0:62:6c:
17:f4:61:45:56:1a:1c:ce:48:b5:cc:f2:f0:ad:ff:
35:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:88:D3:62:74:F3:48:38:56:37:DC:D9:72:1F:45:B9:8B:82:10:90
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d5:a1:f4:7f:a5:57:c8:2d:41:2f:54:8b:c0:8a:c5:14:a7:
f9:93:de:8a:5a:51:58:03:fe:e5:45:c6:4f:24:b5:a4:1d:75:
2f:a8:2c:54:69:de:92:22:4e:10:87:6b:6f:22:e6:f4:03:3b:
58:bc:83:12:e8:38:fb:3f:7a:6c:f3:c1:42:b4:ad:8e:4f:07:
6c:e0:82:a1:1b:ec:da:b1:eb:b4:49:4c:6a:3a:b9:7f:87:92:
95:76:60:50:f6:96:88:61:16:fb:2b:b6:eb:fc:d8:3f:71:ff:
7e:90:98:5b:ab:71:13:3a:89:1b:df:ab:0b:83:6f:d8:4b:e0:
d4:0b:5a:1c:92:f0:09:c1:0d:ec:7b:86:86:18:a7:e7:94:32:
bd:2e:af:f4:2d:c6:55:6b:ee:65:5f:e3:a9:42:9f:6a:50:b1:
0a:f0:6d:f5:16:30:4d:60:d8:0b:9a:40:32:a4:e9:77:f7:07:
1e:44:9f:fd:2e:81:76:29:65:d1:60:2e:72:cb:d3:ad:c0:e6:
c3:fb:f1:82:ee:7a:84:77:18:40:c9:e5:22:f0:f4:30:a5:8a:
1d:ae:5d:44:5c:c1:b2:d3:5e:5f:12:17:d4:b9:8c:31:ec:3f:
be:02:ef:ab:08:35:7e:d7:71:b2:a9:d3:34:bf:f8:d0:26:38:
47:e3:24:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:06:12 2026 by rpki-client