Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
File: LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json)
Hash identifier: hmJ3MLr5eZTrok8qb3/tFOJnNFoZQZx4EtohMbdEe74=
Subject key identifier: 89:43:0C:17:C9:7E:7D:63:96:EF:3B:27:D7:8D:15:D4:27:72:A5:E1
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Certificate issuer: /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial: 019FADBF770254660C150AB35920FD6AF503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 12:00:33 +0000
Manifest this update: Wed 29 Jul 2026 12:00:33 +0000
Manifest next update: Thu 30 Jul 2026 12:00:33 +0000
Files and hashes: 1: 1-ABSTKH1wT-DANifzoEt3vYq-W0.roa (hash: oFzRFkLTXJ5mQQTzZqb5dFPrqzG+W5jr/q9L6K3O9sM=)
2: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: z/EwNhtr51E3B6y49kDDa72xEFmhUuisY6UUzYXB6lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:77:02:54:66:0c:15:0a:b3:59:20:fd:6a:f5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Validity
Not Before: Jul 29 12:00:33 2026 GMT
Not After : Jul 30 12:00:33 2026 GMT
Subject: CN=89430c17c97e7d6396ef3b27d78d15d42772a5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9a:ea:4d:6b:3e:80:0a:d5:55:5d:7b:1f:e4:
0f:35:7b:f6:67:62:05:36:69:32:db:f8:d8:3a:3a:
07:d6:66:2d:67:30:d9:a8:9f:ec:42:af:9f:0e:94:
a5:1a:15:26:db:3c:cd:29:d7:d3:ca:a4:19:ad:87:
75:3a:48:7d:21:25:d8:dc:ba:f9:05:7c:77:6c:d0:
f4:cb:82:d7:5a:b1:8e:d3:bc:b3:d2:bd:31:b9:b2:
e2:a4:81:63:49:93:67:d3:71:21:89:f5:f7:7f:ed:
5d:2d:aa:6c:2e:b3:14:7d:fa:27:9d:5a:d8:6f:e8:
e9:4b:a9:24:ae:ae:97:5c:d7:0c:bf:15:ee:78:04:
11:d6:bf:27:1f:9e:84:e4:9a:84:92:3b:90:32:77:
b2:21:b8:ec:b2:dc:2b:4e:b8:fc:c3:b2:75:1f:9b:
ea:01:c4:88:4f:d0:0a:b9:3d:6f:cb:50:b0:3e:7e:
32:15:19:48:0c:b8:c4:ea:f9:df:73:e4:59:59:bd:
3c:bb:8c:10:47:7f:0b:8f:32:e1:77:f8:48:27:6b:
5f:bd:d1:8e:d2:d2:1c:89:35:2d:26:ec:31:c3:64:
68:72:42:45:59:a4:27:55:18:9c:b2:57:6b:5e:b0:
2f:c8:54:e3:22:af:dc:ae:f0:85:26:0d:be:72:da:
56:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:43:0C:17:C9:7E:7D:63:96:EF:3B:27:D7:8D:15:D4:27:72:A5:E1
X509v3 Authority Key Identifier:
keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a0:53:94:ce:af:7a:7f:27:a4:63:ee:ac:e0:89:9a:70:fd:
30:db:1a:2f:3f:aa:1e:f7:0c:d6:d0:4d:66:05:9c:00:35:7e:
c9:cf:e4:49:0a:26:51:ed:a1:69:6a:58:9f:eb:9c:99:d5:53:
b8:b7:d6:1b:8d:5c:12:d4:b5:90:27:ae:67:fb:80:55:4a:18:
cf:14:51:14:de:9f:13:10:49:6f:e0:41:e7:02:37:97:79:ed:
55:c5:35:74:ca:33:42:e8:69:b6:e2:8f:2b:40:5c:df:c9:26:
a5:92:d4:25:52:ad:9d:31:4d:93:9a:02:a7:91:00:68:73:38:
0c:56:5b:9f:a9:8d:6f:04:a0:be:a1:dd:a6:18:be:07:cd:76:
ff:5d:41:b2:d4:36:26:4b:bd:0a:da:a8:25:96:e3:22:8c:da:
ad:44:40:e7:2f:fe:f9:c7:72:c6:2d:89:78:c7:3b:7e:cd:99:
15:9f:29:f2:e9:fe:b8:af:c9:d8:01:06:77:42:8f:0d:56:40:
ac:7d:ce:19:bb:ec:c4:90:a1:43:ce:0a:a6:c4:06:d3:2e:56:
ea:a4:3d:ae:db:04:e2:3a:24:57:f1:6e:23:86:c0:ef:8e:c3:
96:05:f4:0a:b1:85:11:36:9c:f5:f8:af:64:e9:67:5a:29:21:
9d:94:a4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:10:48 2026 by rpki-client