Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
File: LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json)
Hash identifier: xgMVUtwhHXHrf+xbVMKjl8WPwEatyGq/nBGOpzdXN2Q=
Subject key identifier: 3C:75:58:E9:B6:EF:82:F3:36:65:13:6D:CC:97:B8:41:CB:C3:D2:FD
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Certificate issuer: /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial: 019CAB33FBCD13D76300EB4C26A277DAAC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:36 +0000
Manifest this update: Sun 01 Mar 2026 21:00:36 +0000
Manifest next update: Mon 02 Mar 2026 21:00:36 +0000
Files and hashes: 1: 1-ABSTKH1wT-DANifzoEt3vYq-W0.roa (hash: oFzRFkLTXJ5mQQTzZqb5dFPrqzG+W5jr/q9L6K3O9sM=)
2: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: k+aEQjwur9aLLwKG0OIMBWn7yxhAY9CpY3OJhzTqShE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:fb:cd:13:d7:63:00:eb:4c:26:a2:77:da:ac:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Validity
Not Before: Mar 1 21:00:36 2026 GMT
Not After : Mar 2 21:00:36 2026 GMT
Subject: CN=3c7558e9b6ef82f33665136dcc97b841cbc3d2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2d:94:7b:be:df:20:d1:c8:97:a4:58:fb:3d:
f0:c7:0f:3e:07:bc:1a:06:7b:53:43:7f:98:a5:88:
41:cd:3d:c7:5c:1a:1a:96:99:db:4f:1c:5e:ea:e9:
94:c9:49:18:03:de:79:99:f9:06:e1:b9:5c:3f:26:
e8:7a:57:f1:e3:2b:ad:56:79:6c:13:d2:bf:0d:3a:
53:40:33:ff:67:e6:be:33:03:79:7c:ed:86:f9:8d:
a7:44:8f:08:71:59:ec:81:79:ef:b7:e6:5e:5c:cf:
5f:40:3d:04:cf:f9:70:cb:9f:97:6b:34:68:f1:ef:
8c:e0:6b:bb:44:b0:18:14:4f:92:f4:9f:4f:f5:f5:
48:65:88:ce:d3:3f:94:22:8c:ad:4c:fb:12:3e:94:
09:92:f1:65:39:b7:6a:98:e7:f3:1d:67:bd:28:d3:
d5:1a:fa:13:3f:4e:3c:9a:9a:8f:07:c6:fa:f8:d0:
56:76:3b:88:e9:19:49:f5:40:d8:c1:11:6c:80:df:
61:27:16:39:f9:48:f7:5d:7e:24:bd:b3:e9:77:5f:
6b:b9:71:ae:3c:ad:ae:69:a3:0b:7d:3d:3f:61:ce:
f4:98:c8:f5:75:aa:45:22:22:64:03:02:e1:60:23:
fa:b8:d7:00:19:e2:e5:85:6a:6f:c1:51:62:82:0b:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:75:58:E9:B6:EF:82:F3:36:65:13:6D:CC:97:B8:41:CB:C3:D2:FD
X509v3 Authority Key Identifier:
keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:29:60:b3:a3:ee:18:3a:21:bb:85:a1:52:ad:c3:17:72:0c:
23:47:21:21:aa:c0:b2:0c:3d:02:52:a7:a5:80:1f:4c:73:c5:
49:8d:19:82:49:6b:a4:75:80:08:18:aa:44:c9:09:13:09:60:
61:01:20:77:71:a3:e9:ed:2d:52:39:49:b8:89:f3:0a:32:02:
d2:07:df:30:6b:6e:8c:8d:72:49:79:0b:fe:ca:68:34:ca:87:
f9:72:85:83:b3:38:f0:ae:47:b7:11:82:10:6a:bd:b8:ca:90:
e8:2f:10:23:cf:65:14:f1:a1:47:d8:be:dd:e3:e8:7d:cd:76:
ad:29:48:0b:99:9a:7e:60:71:ef:9f:2c:52:96:44:e1:bc:58:
dc:31:f1:d6:a4:4c:c2:ec:11:28:df:0c:23:55:e4:14:f1:cf:
7d:cf:be:7f:3d:4e:c1:f1:cb:ad:93:31:b8:a7:49:94:7e:62:
53:09:e5:e6:51:f7:06:7a:34:64:45:fb:4d:44:20:fd:be:81:
e5:c1:6a:e0:b2:c8:08:03:b5:84:da:d0:9b:28:5c:90:21:e4:
50:b3:ce:33:fd:2b:c3:57:c2:1e:b3:bf:95:83:a0:0e:24:38:
1d:a9:a0:89:04:d1:8c:37:2b:d3:60:08:2d:36:94:6f:57:b9:
0d:1d:14:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:20 2026 by rpki-client