Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
File: LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json)
Hash identifier: XZmvMvoAEK33ty+/RItE5FYk4xEsVUxQp70h1XmZ+XA=
Subject key identifier: 7E:D1:45:23:0C:84:D0:C1:BD:D8:12:97:E8:17:8D:3F:E0:23:AA:B7
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Certificate issuer: /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial: 01A13F7005F25FD32B8E924A32D013A60D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 12:01:08 +0000
Manifest this update: Thu 15 Oct 2026 12:01:08 +0000
Manifest next update: Fri 16 Oct 2026 12:01:08 +0000
Files and hashes: 1: 1-ABSTKH1wT-DANifzoEt3vYq-W0.roa (hash: oFzRFkLTXJ5mQQTzZqb5dFPrqzG+W5jr/q9L6K3O9sM=)
2: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: z70u9iHDPFiQLZYFZ+Si4ob51S9NMs6YJEsLSyXefuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:05:f2:5f:d3:2b:8e:92:4a:32:d0:13:a6:0d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Validity
Not Before: Oct 15 12:01:08 2026 GMT
Not After : Oct 16 12:01:08 2026 GMT
Subject: CN=7ed145230c84d0c1bdd81297e8178d3fe023aab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:d3:46:c3:f7:a5:65:f5:17:74:69:a1:14:
56:c5:c7:f8:c1:8e:d5:b3:91:d2:6a:e9:0d:96:00:
45:2c:53:1f:56:98:9e:1a:a9:ab:39:83:bd:34:2b:
ed:de:b8:0e:0d:6e:46:92:f9:db:e4:f8:28:f2:6e:
a2:c6:98:0c:3e:ab:24:a5:95:30:00:5f:cc:34:54:
89:82:f2:3d:03:ce:86:5b:95:e6:51:b8:71:0e:2f:
7a:8a:bb:24:ae:c9:bc:04:6a:5d:e1:0b:69:4f:15:
a0:16:c1:0e:f2:0e:eb:f6:52:94:98:7a:9e:5c:78:
be:ec:da:94:2c:1d:58:4c:73:e3:9c:e2:82:f3:fa:
68:34:24:f0:c2:af:1f:d4:1d:ff:a1:d3:e1:44:e5:
01:4b:55:b8:f9:a3:92:45:7b:ea:15:c5:f1:c6:ca:
20:e3:69:20:b7:b5:34:21:61:25:74:cb:17:84:21:
d3:04:f5:5c:5e:d4:1d:a1:cc:91:cd:2b:37:23:01:
1f:b6:7a:36:42:67:1a:6f:98:35:a3:25:76:89:9e:
81:49:ce:cc:73:d5:38:27:20:84:65:5f:60:e9:82:
2e:d0:fe:d1:72:6a:82:1e:c8:1f:9a:8c:ae:1f:5d:
3c:f4:d4:35:4d:50:81:c7:7f:2a:39:6d:07:3e:7f:
0f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D1:45:23:0C:84:D0:C1:BD:D8:12:97:E8:17:8D:3F:E0:23:AA:B7
X509v3 Authority Key Identifier:
keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:31:94:30:0d:23:54:2f:67:a9:bf:08:ae:ea:1d:0e:09:39:
32:01:87:71:64:23:63:81:a1:69:f9:ab:67:ec:15:8b:ed:d1:
ce:90:5f:2a:6d:ed:8e:8c:e8:3e:8d:47:05:ec:d3:1e:48:be:
8b:d7:58:d5:b0:45:55:68:47:94:16:66:82:a8:96:39:05:dc:
0a:01:9b:05:fe:8a:d4:82:3d:36:34:a1:79:0f:8a:d6:55:18:
ae:e0:30:de:06:1c:2a:88:e8:a6:43:36:6e:dd:fe:e4:bf:27:
3e:da:8a:10:2f:be:25:10:6c:a9:2a:fa:48:86:44:52:63:9a:
59:ed:f0:8d:d8:70:9d:2c:5f:13:cb:52:02:74:21:af:8a:31:
1b:7e:12:8c:4c:8c:44:37:f2:67:66:58:a9:7c:83:3d:e3:db:
fa:c8:55:5c:41:ff:5d:cf:54:21:03:55:0b:e2:90:84:02:01:
aa:60:b0:51:8d:f0:f6:52:77:7b:18:80:5b:8a:17:4c:96:cb:
7b:fa:4a:94:45:f3:c0:bf:4b:b4:50:f5:07:5b:1b:3d:2c:f7:
52:00:8f:7e:1d:da:08:d5:95:66:7e:ef:a6:dc:69:4b:a4:3b:
d9:1d:80:d9:4e:65:34:7d:ca:f7:4d:c4:31:17:09:40:7f:60:
0f:83:aa:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:08:14 2026 by rpki-client