Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
File: LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json)
Hash identifier: su2F+gzcAaAW/GWax/P7G26ULQe43SzrMeEsSD7jdgo=
Subject key identifier: C7:06:AA:1D:69:9D:30:42:28:AA:E1:FB:08:79:42:9F:7D:CE:A5:69
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Certificate issuer: /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial: 019D9AAB7F0EEE6335BCD34F12E9F99DDB13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 09:00:23 +0000
Manifest this update: Fri 17 Apr 2026 09:00:23 +0000
Manifest next update: Sat 18 Apr 2026 09:00:23 +0000
Files and hashes: 1: 1-ABSTKH1wT-DANifzoEt3vYq-W0.roa (hash: oFzRFkLTXJ5mQQTzZqb5dFPrqzG+W5jr/q9L6K3O9sM=)
2: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: L894w583XqrtQ/ohbYyLNs5Td1leGQkYpHsQF13qcYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:7f:0e:ee:63:35:bc:d3:4f:12:e9:f9:9d:db:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Validity
Not Before: Apr 17 09:00:23 2026 GMT
Not After : Apr 18 09:00:23 2026 GMT
Subject: CN=c706aa1d699d304228aae1fb0879429f7dcea569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3c:74:39:80:2f:f1:8b:c1:c4:e5:06:b5:32:
e4:22:3a:d1:d4:60:e1:8f:07:e2:83:e4:2b:02:79:
71:5b:81:0b:93:75:4e:0e:14:9b:ec:cf:ba:aa:dc:
a8:f5:5e:38:cf:56:2e:63:d8:c3:f1:fd:25:a4:e4:
0c:da:23:ea:82:42:bc:2f:de:81:87:44:77:eb:0b:
ee:28:79:63:f5:a0:4c:b9:3b:ff:67:d6:6d:86:65:
9b:ea:b8:2d:bd:46:fa:05:b6:08:be:d7:6d:b8:fb:
3e:37:47:75:df:a0:9e:4c:ff:73:5a:1b:ae:74:4b:
54:d8:81:84:5b:75:6c:56:fe:19:d1:52:12:b2:cf:
bc:60:c6:b0:9d:84:de:2c:2e:bb:7d:2c:79:a6:07:
0b:26:20:0f:7f:b9:35:27:a7:60:50:9d:90:94:f8:
9f:19:ab:aa:39:b5:30:e4:c5:d7:63:ac:e3:d8:e5:
ee:3d:8d:c9:9f:cd:b4:41:a1:cd:f6:10:73:37:94:
22:ca:7d:12:2c:c8:b4:4b:82:f0:c5:40:ee:26:a6:
e6:2a:13:f7:56:e4:19:4d:bb:d3:56:36:5c:65:93:
e9:19:c2:4c:c5:cb:a0:70:f7:3d:6f:64:31:ae:30:
db:f3:6b:89:0f:20:7e:f3:ce:2a:99:0f:76:d9:66:
8c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:06:AA:1D:69:9D:30:42:28:AA:E1:FB:08:79:42:9F:7D:CE:A5:69
X509v3 Authority Key Identifier:
keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e3:68:6b:8a:df:75:33:d9:72:e1:d6:d2:2b:1d:80:d6:3c:
8e:f6:6e:c6:10:3c:7b:39:2f:05:50:e9:8f:b6:48:13:66:f8:
ca:e9:98:ef:f8:6f:64:c8:aa:b6:a5:d9:b9:b8:c5:d6:6b:9e:
34:e1:1a:da:6a:dd:d7:70:1b:55:c9:79:fa:48:46:42:59:85:
48:eb:22:44:24:cc:cb:c8:0b:9d:a6:07:dc:6d:58:87:ca:2a:
20:ee:b5:14:bf:01:07:32:75:e7:5c:21:a8:86:af:7d:9d:38:
90:3a:cc:38:83:45:6e:13:61:db:ec:7c:d0:5f:fa:93:ba:74:
c6:c1:e7:4b:87:09:b3:8e:f2:5d:f3:bf:8b:45:e1:e0:41:e6:
11:92:af:39:d0:c8:f7:19:7c:65:ea:88:30:9d:ec:0f:c5:73:
e8:10:92:41:2d:90:37:eb:53:99:31:f4:b3:50:14:eb:65:40:
eb:d6:6b:d2:f3:6e:b7:31:92:52:41:f2:fd:05:64:5f:aa:93:
57:98:de:45:27:de:28:4c:20:c6:6c:d5:86:61:e8:e9:ad:37:
52:88:5b:5d:07:e9:88:7d:1f:5e:85:71:a9:72:8f:2c:d3:80:
18:09:b8:ed:ec:4d:56:08:5b:22:41:23:94:dc:7c:e5:33:95:
fb:00:b1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:06 2026 by rpki-client