Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
File: LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft (raw, json)
Hash identifier: zjmRELvV00G0XRbmtr1hTydboTfCuzCu1krLiTr1MEo=
Subject key identifier: 2F:F8:94:80:BE:AC:8B:08:94:B9:23:32:B1:4C:3F:77:EB:02:06:C1
Authority key identifier: 2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B
Certificate issuer: /CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b
Certificate serial: 019DA59DA5EFD1733DF4ACC840169CCB5D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
Manifest number: 01E0
Signing time: Sun 19 Apr 2026 12:01:05 +0000
Manifest this update: Sun 19 Apr 2026 12:01:05 +0000
Manifest next update: Mon 20 Apr 2026 12:01:05 +0000
Files and hashes: 1: LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl (hash: wov7d5aBDRw28Jh3lDEwzakQsPZ5/U2UMJGmqFXqruM=)
2: RvsaGrjxAX5qao7RR21kXobUgQM.asa (hash: q+rjI9IVipp8g9U0y29NEz+jK3MT4WSsT58lpW7Qlh8=)
3: XGNPOjmgdTFuH0d_BqCPt5RDDjY.roa (hash: Yzmgyo+pVHv+AN+UC1lB8YlcAzsH4KJR08k7WUnfwVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:a5:ef:d1:73:3d:f4:ac:c8:40:16:9c:cb:5d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b
Validity
Not Before: Apr 19 12:01:05 2026 GMT
Not After : Apr 20 12:01:05 2026 GMT
Subject: CN=2ff89480beac8b0894b92332b14c3f77eb0206c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:89:3f:52:8f:0e:33:bf:bd:a0:7a:7e:fa:
d1:e9:a9:0a:17:19:85:7d:b5:12:d4:bc:47:27:d6:
49:36:f6:9b:69:f1:92:10:ae:5d:9e:d1:94:b2:49:
84:7b:17:dc:c2:82:1d:fe:a3:51:d1:9b:5d:e7:83:
2e:66:59:e3:3b:2b:04:b1:1f:c8:e6:e0:3c:2e:e5:
21:c1:1c:98:22:f6:0f:90:e4:4c:87:36:38:48:32:
0d:c5:03:f0:e9:94:2e:56:f0:17:b4:9b:48:a7:7e:
ae:5c:a0:5d:d0:c8:22:22:37:51:ec:52:0a:72:61:
25:1c:8c:ee:32:4a:17:c4:20:84:ce:1a:7e:5e:3f:
73:84:7f:21:2b:52:86:3b:48:82:ca:3c:6f:13:9c:
4f:c7:b1:ba:52:43:bf:18:15:20:09:85:50:27:26:
18:b8:3d:3c:05:ed:00:24:7d:bf:37:c8:84:94:2f:
5d:17:f9:9e:79:12:48:6f:53:da:1a:d6:77:aa:ba:
5a:f3:21:c3:3b:84:35:df:e3:d6:96:20:26:9f:97:
88:0d:22:5b:c7:06:b1:29:d2:96:68:e8:d2:a9:c5:
7f:20:be:4d:59:39:45:3d:89:e0:82:bf:fd:5f:c9:
b6:c6:90:90:50:d7:83:c7:14:31:cc:a2:b3:c4:44:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F8:94:80:BE:AC:8B:08:94:B9:23:32:B1:4C:3F:77:EB:02:06:C1
X509v3 Authority Key Identifier:
keyid:2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ea:c4:75:92:89:26:8b:b4:c0:6e:1c:c3:0d:88:c9:95:f1:
0a:59:2c:34:98:9b:d1:5d:b5:57:25:03:dd:a3:b6:87:9c:d1:
bb:2a:8e:0c:cd:36:f1:32:ed:fd:8f:6f:d5:d5:2a:17:97:57:
52:12:32:b2:7b:76:72:44:59:d7:b5:2d:49:75:44:5e:81:38:
bc:16:ef:c9:02:12:f5:5c:92:24:24:18:13:95:e5:63:f3:8a:
f8:90:2e:50:58:0f:56:c0:d9:52:ca:f8:dc:32:0c:85:85:db:
cb:11:a4:bb:7f:b0:c9:47:f2:2b:ea:cc:d6:e2:95:0b:06:ed:
ce:d8:6d:31:e8:2e:8e:45:00:6f:8e:72:e3:bc:15:e4:ea:0c:
fd:cc:9e:39:ad:9b:d6:a8:a2:b9:56:8a:6c:98:4f:17:df:b1:
fc:fb:b5:e8:39:78:55:da:14:b1:81:5a:e5:1e:45:77:8b:04:
e9:51:6e:dc:ce:03:fc:8b:90:6d:29:08:e2:07:a7:04:70:cd:
3a:39:bd:cb:cd:6a:3c:71:fa:4e:2e:43:42:51:23:fd:11:20:
0b:21:2e:53:91:a5:5b:55:e7:f3:27:fd:55:35:73:3c:65:7b:
3b:aa:4a:ed:07:f5:0a:16:b2:f4:09:df:f4:40:6b:d6:85:fe:
73:0f:02:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lnaXv0XM99KzIQBacy12dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZDVlYTNjNzUzMGZkMDhjMjk5ZDgwODc1M2Y0N2I4ZGZi
ODRlMGIwHhcNMjYwNDE5MTIwMTA1WhcNMjYwNDIwMTIwMTA1WjAzMTEwLwYDVQQD
EygyZmY4OTQ4MGJlYWM4YjA4OTRiOTIzMzJiMTRjM2Y3N2ViMDIwNmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/uJP1KPDjO/vaB6fvrR6akKFxmF
fbUS1LxHJ9ZJNvabafGSEK5dntGUskmEexfcwoId/qNR0Ztd54MuZlnjOysEsR/I
5uA8LuUhwRyYIvYPkORMhzY4SDINxQPw6ZQuVvAXtJtIp36uXKBd0MgiIjdR7FIK
cmElHIzuMkoXxCCEzhp+Xj9zhH8hK1KGO0iCyjxvE5xPx7G6UkO/GBUgCYVQJyYY
uD08Be0AJH2/N8iElC9dF/meeRJIb1PaGtZ3qrpa8yHDO4Q13+PWliAmn5eIDSJb
xwaxKdKWaOjSqcV/IL5NWTlFPYnggr/9X8m2xpCQUNeDxxQxzKKzxERG2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/4lIC+rIsIlLkjMrFMP3frAgbBMB8GA1UdIwQY
MBaAFC3V6jx1MP0IwpnYCHU/R7jfuE4LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGRYcVBIVXdfUWpDbWRnSWRUOUh1Ti00VGdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xZmEwMzgtMzFjZS00YTJlLTlkNDUt
ZmVmMjRjMzk1ZjkxLzEvTGRYcVBIVXdfUWpDbWRnSWRUOUh1Ti00VGdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xZmEwMzgtMzFjZS00YTJlLTlkNDUtZmVmMjRjMzk1Zjkx
LzEvTGRYcVBIVXdfUWpDbWRnSWRUOUh1Ti00VGdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOrEdZKJ
Jou0wG4cww2IyZXxClksNJib0V21VyUD3aO2h5zRuyqODM028TLt/Y9v1dUqF5dX
UhIysnt2ckRZ17UtSXVEXoE4vBbvyQIS9VySJCQYE5XlY/OK+JAuUFgPVsDZUsr4
3DIMhYXbyxGku3+wyUfyK+rM1uKVCwbtzthtMegujkUAb45y47wV5OoM/cyeOa2b
1qiiuVaKbJhPF9+x/Pu16Dl4VdoUsYFa5R5Fd4sE6VFu3M4D/IuQbSkI4genBHDN
Ojm9y81qPHH6Ti5DQlEj/REgCyEuU5GlW1Xn8yf9VTVzPGV7O6pK7Qf1Chay9Anf
9EBr1oX+cw8C1w==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:46:23 2026 by rpki-client