Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
File: ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json)
Hash identifier: h6Djner5MuUS5NOISnfo3eiQCb0Y3ppsOosh3z0STsk=
Subject key identifier: 76:09:9B:FB:23:7C:23:B6:63:06:E7:26:A3:76:89:CC:30:C9:71:9B
Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
Certificate issuer: /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Certificate serial: 019D98509C0CAE5D7DD2A37668A585F27283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 22:01:52 +0000
Manifest this update: Thu 16 Apr 2026 22:01:52 +0000
Manifest next update: Fri 17 Apr 2026 22:01:52 +0000
Files and hashes: 1: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: o7pFKMTJ/5DmfoK7bgLbcU0Q6lNHr+IVnSodzG7Dz8A=)
2: rMVZ8VNrAbOr1spmw2IgJ5BytdA.roa (hash: tTo1sNFXQgwbOz3Qzxrcjf5177mm498Fb+OqdLzuw6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:9c:0c:ae:5d:7d:d2:a3:76:68:a5:85:f2:72:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Validity
Not Before: Apr 16 22:01:52 2026 GMT
Not After : Apr 17 22:01:52 2026 GMT
Subject: CN=76099bfb237c23b66306e726a37689cc30c9719b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:58:aa:f1:60:92:fa:86:0e:af:81:40:9f:
76:bf:58:e2:78:5f:fd:c1:97:37:f9:95:d9:cf:ed:
22:a1:46:5f:d3:19:cd:2a:0e:00:f0:f3:a0:0c:02:
a6:88:7c:3d:d4:9f:b6:69:34:0d:56:5c:f6:36:b0:
86:83:e3:df:e2:a0:aa:e1:8e:7b:2d:d0:a5:e6:61:
b5:57:a1:9a:e4:78:23:96:52:42:fa:51:06:ae:96:
8a:9c:52:61:11:16:74:4b:e6:4d:03:fa:99:f7:bc:
27:6e:e8:5b:11:c2:d6:d7:04:22:21:de:04:de:fc:
82:f0:8e:69:c3:e3:50:9f:50:85:76:24:61:52:93:
88:f4:0e:7f:5e:f5:56:8f:ce:0f:78:08:48:4e:d6:
d4:9a:d8:f5:97:20:70:41:e0:de:79:3a:78:83:c6:
8e:f6:b0:9b:39:1b:0e:7d:78:43:49:d6:aa:52:5c:
af:12:6c:39:bb:0f:e8:88:31:84:4d:46:16:49:6f:
a2:bf:32:4b:47:60:89:19:98:03:5a:8b:04:f2:29:
cb:a0:f2:f8:72:be:47:43:bf:e5:28:89:f8:60:b6:
a8:2c:3a:4e:35:1c:ea:8f:e5:60:b6:d8:b9:b2:a2:
19:9a:fa:5e:dc:03:7b:66:6a:0b:82:54:5c:43:e4:
14:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:09:9B:FB:23:7C:23:B6:63:06:E7:26:A3:76:89:CC:30:C9:71:9B
X509v3 Authority Key Identifier:
keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:72:60:fe:06:9d:19:cf:b0:44:cc:91:b5:ce:d3:62:74:cc:
10:17:f2:23:3a:66:7f:98:c0:23:ff:0d:4a:80:30:86:ae:d4:
f5:b8:4e:57:32:56:b7:e0:87:26:b0:3f:0a:c4:0c:64:96:fe:
20:33:21:ff:fa:86:4b:98:bf:8c:7c:2d:5a:93:b2:34:17:40:
3e:55:25:83:56:1e:bc:f5:f6:5d:3d:9a:bc:f6:ec:0f:43:cf:
f1:f9:84:c6:75:f1:84:a3:03:e6:1a:97:bc:40:a9:62:83:da:
ff:23:6c:0f:b4:d3:13:c3:f3:85:58:8a:db:3d:0c:7b:f1:a7:
f6:20:0a:29:6d:45:84:f3:a1:fa:ab:63:83:97:f8:7b:93:ad:
82:55:59:11:14:e6:aa:0f:fa:74:77:82:77:b2:e0:26:5d:b1:
22:36:75:0f:05:a4:93:78:12:c3:fc:08:4d:9c:7f:11:f0:41:
76:f2:73:90:70:62:e0:76:e7:00:d5:4a:06:c9:95:d7:61:5b:
9e:db:7e:d6:9f:3a:e8:93:12:d9:a7:df:67:cc:22:ba:48:0c:
1d:6b:60:c8:c8:9b:5b:45:e4:d9:39:d5:12:9c:9e:44:59:20:
a6:ce:b0:97:9b:91:c3:6b:eb:5c:42:f8:42:d2:7c:c6:11:64:
6e:b2:1e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:44:55 2026 by rpki-client