Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
File: ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json)
Hash identifier: /NufDlbsaP60jpkERkv/SW8Z8vDoqCwdCtK7T3PdI8k=
Subject key identifier: C5:BC:55:10:AB:9C:19:FB:2D:6B:84:64:DB:65:95:D6:21:42:84:1C
Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
Certificate issuer: /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Certificate serial: 019CAAC616FA20C89D6B08BCC0E891487116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:00:34 +0000
Manifest this update: Sun 01 Mar 2026 19:00:34 +0000
Manifest next update: Mon 02 Mar 2026 19:00:34 +0000
Files and hashes: 1: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: kZ5/32bkfCNxh0eM+j8uWgvPFBq9GCF0K+RWqHWc6R8=)
2: rMVZ8VNrAbOr1spmw2IgJ5BytdA.roa (hash: tTo1sNFXQgwbOz3Qzxrcjf5177mm498Fb+OqdLzuw6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:16:fa:20:c8:9d:6b:08:bc:c0:e8:91:48:71:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Validity
Not Before: Mar 1 19:00:34 2026 GMT
Not After : Mar 2 19:00:34 2026 GMT
Subject: CN=c5bc5510ab9c19fb2d6b8464db6595d62142841c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:73:ed:b2:a4:35:8a:4b:f9:8f:d8:8d:9c:
01:b6:d1:11:ae:e8:e0:ad:5e:7c:28:1b:9e:e4:05:
b8:ef:c4:ee:46:3b:aa:db:83:27:64:ce:b7:14:94:
d7:4e:ba:a3:f0:a0:86:27:35:e3:ce:8d:7a:59:f2:
2b:7c:71:53:01:9a:7b:0f:94:34:cf:ba:56:e0:ba:
7a:70:7f:11:86:67:b6:53:25:9a:43:7d:58:3e:22:
e4:c4:de:e2:26:55:f5:73:67:b6:ba:f7:c0:16:c6:
3e:99:1b:36:34:5d:4c:8a:2e:7b:da:c4:bf:13:f5:
45:e9:77:cc:cb:7e:2c:e5:4e:3d:05:4c:88:f8:bb:
91:34:3f:78:bd:c6:69:0c:3d:61:4f:1d:67:3e:7a:
10:e3:cd:92:2a:fc:50:f3:54:76:cd:60:91:d2:64:
94:3e:07:6a:2b:bb:28:25:8a:3d:14:4e:1d:b4:e9:
92:05:b7:10:07:3a:cb:bd:68:7e:df:1a:97:68:70:
76:54:32:aa:2b:f6:3b:b4:4f:5c:71:cc:7b:b1:12:
14:6f:0f:6f:78:35:61:c3:d3:0b:39:29:70:f4:c4:
f9:cf:b9:99:1c:63:a4:20:d7:02:a9:08:58:9b:5e:
20:da:64:e4:77:72:8f:03:ab:e4:b5:3a:fe:42:44:
15:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BC:55:10:AB:9C:19:FB:2D:6B:84:64:DB:65:95:D6:21:42:84:1C
X509v3 Authority Key Identifier:
keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:98:02:8e:7f:8a:29:f4:c3:38:3d:f5:50:56:41:70:fd:a5:
f4:b6:d1:a5:5c:87:58:fa:2f:1d:81:3c:3a:cc:f5:60:da:9d:
08:bd:76:e1:f5:2c:39:c2:e3:d3:d8:21:42:37:7d:65:ad:5c:
cf:5e:ef:9f:7c:eb:f4:cb:c3:75:9b:13:49:86:82:58:19:f8:
a0:f6:48:33:72:d4:aa:b2:99:6b:dc:f5:14:7c:c5:61:bf:dd:
8b:61:14:16:b0:ac:3d:64:fe:7f:55:cd:2c:18:be:c7:34:71:
01:20:b0:08:e7:24:da:dc:db:38:cf:c7:a7:3b:91:20:5f:1f:
a1:3c:07:bd:13:be:00:76:54:29:a3:fb:73:7e:1f:0b:1b:0d:
98:b2:a5:61:8e:d5:e5:74:3e:42:0c:e0:6e:e5:82:70:80:84:
55:f4:a9:4d:51:70:f8:1e:e0:c1:c3:c8:cf:7d:db:0c:e8:c8:
18:d7:3e:ea:46:18:02:af:ba:05:06:7e:7a:e9:2b:9f:02:d6:
1c:8d:56:43:b1:f4:be:53:43:34:b4:45:f3:43:3d:47:8b:e1:
b1:a1:93:34:19:33:4d:64:5a:68:be:70:4f:3d:53:18:76:44:
23:24:14:69:51:cf:76:9a:f6:b5:f0:3e:57:e3:54:46:19:a6:
d2:67:70:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxhb6IMidawi8wOiRSHEWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZDYxYWU4NDcyYzVjOGZjZDgxMzc1NmMxNjRjMmYxODY0
ZDNjOTAwHhcNMjYwMzAxMTkwMDM0WhcNMjYwMzAyMTkwMDM0WjAzMTEwLwYDVQQD
EyhjNWJjNTUxMGFiOWMxOWZiMmQ2Yjg0NjRkYjY1OTVkNjIxNDI4NDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjhz7bKkNYpL+Y/YjZwBttERrujg
rV58KBue5AW478TuRjuq24MnZM63FJTXTrqj8KCGJzXjzo16WfIrfHFTAZp7D5Q0
z7pW4Lp6cH8Rhme2UyWaQ31YPiLkxN7iJlX1c2e2uvfAFsY+mRs2NF1Mii572sS/
E/VF6XfMy34s5U49BUyI+LuRND94vcZpDD1hTx1nPnoQ482SKvxQ81R2zWCR0mSU
PgdqK7soJYo9FE4dtOmSBbcQBzrLvWh+3xqXaHB2VDKqK/Y7tE9cccx7sRIUbw9v
eDVhw9MLOSlw9MT5z7mZHGOkINcCqQhYm14g2mTkd3KPA6vktTr+QkQVfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMW8VRCrnBn7LWuEZNtlldYhQoQcMB8GA1UdIwQY
MBaAFJXWGuhHLFyPzYE3VsFkwvGGTTyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTQ3NDgtNGVhYi00ZTU1LWI2NGEt
MmM3YTExYzFmYmFmLzEvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZTQ3NDgtNGVhYi00ZTU1LWI2NGEtMmM3YTExYzFmYmFm
LzEvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5gCjn+K
KfTDOD31UFZBcP2l9LbRpVyHWPovHYE8Osz1YNqdCL124fUsOcLj09ghQjd9Za1c
z17vn3zr9MvDdZsTSYaCWBn4oPZIM3LUqrKZa9z1FHzFYb/di2EUFrCsPWT+f1XN
LBi+xzRxASCwCOck2tzbOM/HpzuRIF8foTwHvRO+AHZUKaP7c34fCxsNmLKlYY7V
5XQ+QgzgbuWCcICEVfSpTVFw+B7gwcPIz33bDOjIGNc+6kYYAq+6BQZ+eukrnwLW
HI1WQ7H0vlNDNLRF80M9R4vhsaGTNBkzTWRaaL5wTz1TGHZEIyQUaVHPdpr2tfA+
V+NURhmm0mdw9w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:32:46 2026 by rpki-client