Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
File: LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft (raw, json)
Hash identifier: 9Gj2Z09kQWWZuRHJdR/f3zSaoIG2Ug6CD+mPUHaAIMc=
Subject key identifier: 1E:1C:37:73:06:B9:96:49:3A:30:A2:7E:B4:55:1A:D7:11:BC:93:05
Authority key identifier: 2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B
Certificate issuer: /CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b
Certificate serial: 019CA8A1478A113259D7C33878D0E808DE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
Manifest number: 015D
Signing time: Sun 01 Mar 2026 09:01:07 +0000
Manifest this update: Sun 01 Mar 2026 09:01:07 +0000
Manifest next update: Mon 02 Mar 2026 09:01:07 +0000
Files and hashes: 1: LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl (hash: 3K0i0MMXZdXPevo3g/jTVqeJ/XswX7tMsat5dpqz48Q=)
2: RvsaGrjxAX5qao7RR21kXobUgQM.asa (hash: q+rjI9IVipp8g9U0y29NEz+jK3MT4WSsT58lpW7Qlh8=)
3: XGNPOjmgdTFuH0d_BqCPt5RDDjY.roa (hash: Yzmgyo+pVHv+AN+UC1lB8YlcAzsH4KJR08k7WUnfwVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:47:8a:11:32:59:d7:c3:38:78:d0:e8:08:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b
Validity
Not Before: Mar 1 09:01:07 2026 GMT
Not After : Mar 2 09:01:07 2026 GMT
Subject: CN=1e1c377306b996493a30a27eb4551ad711bc9305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:02:e5:5a:75:8d:5c:f2:c8:45:7d:10:31:
7f:03:aa:10:04:00:5a:c7:5b:69:a7:eb:2a:36:89:
15:80:c0:b0:e6:76:f6:e6:6a:2b:64:75:d1:0b:0a:
39:58:a7:7d:ce:69:d8:cb:c9:bb:90:bd:a6:6a:64:
d4:27:72:98:f7:0d:16:b8:06:52:45:7b:24:75:87:
f0:33:f5:d3:1d:c0:14:2d:b1:db:7d:a7:29:42:42:
5f:68:ea:40:b0:dd:af:7d:5f:e5:82:b8:ac:45:d6:
2c:61:fd:40:3c:57:ac:b0:1c:a3:8a:f0:fc:be:ce:
b2:fc:cf:53:d8:c9:91:e0:59:cd:ce:22:ff:fc:80:
df:87:fd:1e:ed:fc:01:6a:de:10:c0:3e:02:bd:84:
41:ff:d7:4c:f5:b0:03:5d:e2:4f:85:29:4e:9b:c2:
89:3d:30:6b:e6:7b:85:4b:6d:07:98:fd:5b:16:d6:
a4:b1:ee:77:9d:6f:cd:52:46:20:0a:ab:55:f5:b0:
f6:a0:2e:d0:7a:d9:25:0e:0c:ff:ef:58:26:d0:b1:
11:b9:3d:be:b9:3a:37:1b:f7:9d:19:26:fd:87:be:
fc:cf:d1:74:f2:0e:dd:13:99:3f:36:65:2d:f5:80:
9c:43:74:33:e9:77:2e:98:fd:1e:e1:42:43:c1:c9:
7b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1C:37:73:06:B9:96:49:3A:30:A2:7E:B4:55:1A:D7:11:BC:93:05
X509v3 Authority Key Identifier:
keyid:2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b4:53:4e:d1:c3:21:d6:63:25:16:84:8c:ad:1d:68:8c:6d:
97:80:9b:f7:11:5a:4c:f5:d9:62:b4:d8:15:de:24:60:3d:78:
44:52:88:69:f3:e9:6f:da:65:6d:dd:51:f7:e1:bb:5d:0d:ca:
e2:32:96:f2:22:74:33:5f:b4:ff:2a:eb:e7:8a:01:74:89:15:
28:fe:46:4a:58:03:8c:d7:20:a2:d1:04:79:7f:8e:62:33:c7:
fe:66:e3:42:7c:43:4b:d2:cf:54:c8:f6:8b:03:f0:9b:04:47:
62:dc:56:26:44:13:78:a2:2e:ec:de:33:16:79:ab:7e:eb:35:
65:11:bd:db:75:2e:db:6e:01:79:7f:16:29:5e:1f:ab:0a:60:
68:15:db:1d:02:89:72:8b:76:ff:72:30:c8:ac:81:53:6a:bc:
ce:57:52:b1:03:04:91:86:0a:ec:23:e5:dc:ad:47:e9:4d:1f:
7c:a4:15:f8:83:5d:83:fd:88:87:e0:88:fc:c7:33:44:42:7a:
7d:cf:a1:88:0b:36:db:59:3b:db:b0:90:9f:e6:d2:69:df:1f:
ea:12:e2:40:dd:b9:a9:48:f7:83:42:b2:18:a2:c4:30:6b:a6:
1e:c5:80:38:1d:36:cd:43:8f:06:f9:27:51:55:54:8a:a7:ad:
95:35:c8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:38 2026 by rpki-client