Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft
File: Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft (raw, json)
Hash identifier: pCmMkYkz34rRvKkd5E5xP4/roX4h8DVrXAfd4QAEfn0=
Subject key identifier: DD:BF:03:CF:2F:AB:A7:4A:C9:39:4E:CB:17:36:C5:02:B0:F4:74:74
Authority key identifier: 2E:E7:65:F6:13:D0:F2:58:55:59:86:ED:8C:C1:8A:A2:D8:18:25:0F
Certificate issuer: /CN=2ee765f613d0f258555986ed8cc18aa2d818250f
Certificate serial: 01A0ED0ABC3E93844A5585C56C631ED4A98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft
Manifest number: F4
Signing time: Tue 29 Sep 2026 12:01:38 +0000
Manifest this update: Tue 29 Sep 2026 12:01:38 +0000
Manifest next update: Wed 30 Sep 2026 12:01:38 +0000
Files and hashes: 1: AtDiavwmONmfcR6PyPSX1Y3q72M.roa (hash: 645rqeq+3xwCJ+dLSr46LUrzfMC+zVPjHY0f0QIzQr8=)
2: Ludl9hPQ8lhVWYbtjMGKotgYJQ8.crl (hash: H3Iy2Dz61RgfR2rvInf9j8Hm85wjEgyN27ZHMGD6rTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0a:bc:3e:93:84:4a:55:85:c5:6c:63:1e:d4:a9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee765f613d0f258555986ed8cc18aa2d818250f
Validity
Not Before: Sep 29 12:01:38 2026 GMT
Not After : Sep 30 12:01:38 2026 GMT
Subject: CN=ddbf03cf2faba74ac9394ecb1736c502b0f47474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:84:98:d0:03:70:a8:20:71:2d:ce:5c:e7:4a:
01:5e:3c:66:f2:9e:a2:97:23:a5:06:3e:91:da:32:
1a:67:46:c3:6e:c0:a7:3d:ca:96:ff:dc:bc:a5:2d:
90:2e:84:0f:79:2e:20:bc:22:a3:9c:0f:8a:b8:86:
5a:b8:fc:3d:4f:62:97:fa:49:65:71:e9:6a:f4:48:
f8:2d:89:d1:fc:cb:45:dc:e4:3f:1a:48:bb:f8:5b:
21:92:8b:f9:48:19:dc:44:f5:38:32:db:78:ec:0b:
74:29:0d:09:85:fa:61:b2:82:e1:07:eb:77:94:d4:
15:0b:54:9c:ab:2e:3b:ad:f8:b0:d0:3f:90:f1:a5:
2c:78:73:64:cd:31:50:11:47:b5:8d:c5:ce:8c:79:
1c:91:7f:43:3f:10:2b:ce:06:fa:f4:b2:be:1a:6a:
16:d1:36:08:8b:c5:31:3b:3f:1f:91:e2:e1:9b:99:
fe:2f:17:03:cf:9d:35:54:a8:43:fd:0e:ef:3d:62:
57:94:ab:bf:ef:b2:20:10:9e:00:ed:1c:23:53:06:
46:2f:ab:d4:bf:a2:e4:00:12:f5:49:01:8f:91:37:
0e:f1:c9:cd:9f:3b:31:a9:4a:f9:4c:41:b0:d2:f5:
cb:b9:4d:0f:44:6a:90:3e:b5:f8:0e:35:55:59:37:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BF:03:CF:2F:AB:A7:4A:C9:39:4E:CB:17:36:C5:02:B0:F4:74:74
X509v3 Authority Key Identifier:
keyid:2E:E7:65:F6:13:D0:F2:58:55:59:86:ED:8C:C1:8A:A2:D8:18:25:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:51:9c:3a:5e:d3:0a:e4:61:6f:9e:dc:cb:da:62:2b:22:74:
cb:ce:a2:b2:7f:5a:33:2d:46:b7:91:49:d3:b9:d7:49:01:b6:
af:ea:33:92:5c:1f:4d:5e:2e:17:17:af:35:4d:94:e6:ce:22:
f0:58:36:11:12:b1:ec:7f:d5:c8:79:9a:fc:8a:dc:77:91:cc:
18:14:28:9c:7c:30:6f:11:c2:c8:10:62:62:24:42:23:81:76:
5f:24:ef:58:87:59:b7:94:91:b5:2d:48:91:c4:e5:41:ce:84:
01:82:c2:1d:1e:2c:25:56:31:0b:fc:af:e8:ae:e4:9d:fb:8e:
ac:c9:c3:9e:9b:f2:4b:63:4b:37:5f:17:e3:1d:f0:72:f9:3f:
00:07:25:dc:b1:31:e6:94:70:4d:f1:e0:65:b1:5a:f6:70:8c:
bc:2a:10:9f:17:d9:61:d5:ae:b7:fb:be:bd:0b:2a:5c:6f:cc:
51:fc:47:59:a4:23:57:30:a4:0e:53:a1:cf:b7:d5:03:cb:45:
63:87:c4:50:3e:6a:26:1f:a5:d3:a7:c3:97:4f:2a:a8:81:73:
12:8f:f4:40:72:ee:1a:a0:9e:73:ab:fd:ec:fa:61:5f:39:bc:
1a:8a:2b:14:06:fe:fc:b7:5a:10:78:43:79:b3:7d:12:06:0d:
82:e3:6f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:41:37 2026 by rpki-client