Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
File: lTXl04RZIbnV_fI2N8WYEbg4Y08.mft (raw, json)
Hash identifier: JM/ynvsIa1efRCWfkk85GZRvTc9ojBCQsBYJrFExaF0=
Subject key identifier: 70:13:66:21:E1:14:E5:6A:78:58:C7:79:92:1F:00:7A:1A:3A:77:B4
Authority key identifier: 95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
Certificate issuer: /CN=9535e5d3845921b9d5fdf23637c59811b838634f
Certificate serial: 019D9AE2FE9DB04D1E5B5B994FABD176D77F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
Manifest number: 02AD
Signing time: Fri 17 Apr 2026 10:01:00 +0000
Manifest this update: Fri 17 Apr 2026 10:01:00 +0000
Manifest next update: Sat 18 Apr 2026 10:01:00 +0000
Files and hashes: 1: S0T2kL_9PWLHXGxcH-DefO6iYPU.roa (hash: Pu+0PGdxODxmEsVaBVFzUtH5CFGWNyj6dWAHyNzOXw4=)
2: lTXl04RZIbnV_fI2N8WYEbg4Y08.crl (hash: aadTJlRa2vBhM/I+GPOnyuA+Km1gmsUyR1b9vOEieAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:fe:9d:b0:4d:1e:5b:5b:99:4f:ab:d1:76:d7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535e5d3845921b9d5fdf23637c59811b838634f
Validity
Not Before: Apr 17 10:01:00 2026 GMT
Not After : Apr 18 10:01:00 2026 GMT
Subject: CN=70136621e114e56a7858c779921f007a1a3a77b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:31:96:d9:79:13:dd:08:79:7c:4d:93:cf:
1c:04:d5:81:b6:4b:f4:f7:ff:5c:1a:22:ae:11:58:
5f:0d:83:27:a9:de:19:ef:97:14:0a:62:25:98:b6:
e5:16:af:11:b7:91:10:62:90:4a:90:98:f0:7c:6b:
c0:97:25:4c:4d:9b:5c:2c:a0:b9:0b:fa:40:95:13:
84:65:62:f1:0c:76:d9:d1:8e:78:bd:c9:5d:43:c2:
b8:31:b4:5a:e1:86:d7:ed:6e:5a:2c:3f:44:47:d3:
e6:d1:77:1b:f0:87:cb:d2:7a:f6:7b:a2:cc:7a:1c:
34:fd:e0:45:58:4b:c5:00:a8:c6:45:aa:52:d9:56:
da:e3:48:ff:dc:24:a9:6e:62:a9:a4:83:d6:0a:4b:
0b:e6:10:2f:2a:b9:3a:f7:51:bd:d5:9d:38:0f:58:
15:ea:24:c3:b2:a3:da:72:bc:be:49:b4:2d:01:49:
8a:18:c8:f7:c7:c5:ff:94:37:00:7a:37:69:4b:d4:
a2:da:d1:37:58:ac:43:bf:6d:00:27:6a:59:06:a0:
28:f3:49:dd:41:0b:b3:ab:51:02:5b:12:72:7e:2c:
ba:0f:2d:75:60:63:1d:b9:44:34:6d:b7:bc:a6:eb:
31:04:37:e4:17:fc:b7:ac:70:f1:f4:28:8d:34:60:
81:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:13:66:21:E1:14:E5:6A:78:58:C7:79:92:1F:00:7A:1A:3A:77:B4
X509v3 Authority Key Identifier:
keyid:95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:86:f3:68:db:d1:e5:17:6e:f3:bf:90:d0:d5:83:7e:60:c4:
cc:3e:9a:23:e2:da:e6:84:72:cb:30:e9:1b:44:a2:da:5b:8e:
91:df:a0:03:d2:b7:ee:0c:9f:7f:50:7c:5d:64:f3:4c:30:81:
af:af:50:ab:5b:59:45:f4:26:20:fc:84:1b:77:58:55:34:11:
b1:7b:0c:4d:01:72:b4:79:b9:1b:0b:b4:a3:5b:2e:7c:6a:a7:
2c:2d:c7:f6:80:53:e9:ef:c8:09:2f:47:43:8b:50:42:7a:27:
a2:36:dd:8f:14:ef:c0:9f:72:e1:62:1a:be:d6:73:27:d8:a5:
76:90:0e:c4:76:78:c9:52:a7:cf:e5:04:a3:f5:ad:8a:11:a8:
83:d3:0f:18:aa:37:7b:0c:fe:74:09:ee:e1:27:4b:d3:15:da:
fd:ee:93:72:02:60:a8:1f:28:5c:1c:dc:14:51:13:33:e8:d4:
ba:d7:b4:4f:ef:56:9c:fe:e3:9a:2b:71:e7:71:d7:91:cd:16:
2c:9a:9e:0a:6b:03:ba:52:e3:af:1c:60:ca:50:69:ac:5e:ae:
ef:ba:8e:ce:9d:1a:d3:d3:22:d6:2b:5c:41:f7:20:11:92:a6:
00:65:b8:3c:81:6f:a7:57:11:14:47:91:62:2c:1a:2a:34:61:
a7:17:ff:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:26:56 2026 by rpki-client