
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
File: LDljuiquWr04pu7QnamFYR8bUCE.mft (raw, json)
Hash identifier: ydNEe2QF0ECeW/y4ZHsOTVQ4/dWxYDn6D/h+VsfqQXg=
Subject key identifier: 0D:47:83:0C:5C:15:24:EA:87:F8:CA:B2:43:93:17:43:CA:46:D8:05
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 019FAB9A2262C9D8AA5786CCC89E558FC9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
Manifest number: 19E7
Signing time: Wed 29 Jul 2026 02:00:33 +0000
Manifest this update: Wed 29 Jul 2026 02:00:33 +0000
Manifest next update: Thu 30 Jul 2026 02:00:33 +0000
Files and hashes: 1: 1-HxunCEu3Y-L5oAVVKO35PcAYpw.roa (hash: 5WKu4LWonKHRxxs99iSw6h5aj4s3WEayXBY2TqBi9nA=)
2: 1Gik3uokQgHgJGrEqX2lFkzr0cY.roa (hash: Kk98fLYxI9U7uOT4mbQ7y0T5RVTRCELUDm+h4tCANjs=)
3: 2RbyrkRyfy89JjRg3To0T1X7M24.roa (hash: b2qdxjwNibknS7GfNAq+qHd1R5651Flic59AvsJpQf4=)
4: 6brxduzXhHDEdEdLPYo-IkEXumQ.roa (hash: BNtGnX+ZgfT95cD+u1NiIdsjMWlhX2+WUP0xdw5BCqw=)
5: CDi03via9tSrSWhEkc8SyFAzxU8.roa (hash: 4E5NjZdVovSPIPi8ZzMY1G+T+skgT6FVyGUEU7eeF4A=)
6: Dol2l9Rfy0dxVu3AOYUz7eY8PRE.roa (hash: 5IPdnacUry/jeLV3YhfaDu6Wg2YGyXm/oHlA8O6l+z8=)
7: DtOAaerGRysyOa_ptkbSzt83ans.asa (hash: FxAm4yjqU86Xn+0M/VpmlLrJ7swMzMqWyDSpp0y9U8U=)
8: F3gi0tGQH_1DKuI8rNzFuXZmRlk.roa (hash: 23DkMsSVoahaS49VnCTPljUSOUkll2ueapsYq9u+mmk=)
9: FHznUXLD8rFTI78uN7oxhc4DhSU.roa (hash: b+nymXPjgks3IFJ/o1An5mcttD+ZdDuxy6fPoMhsETE=)
10: LDljuiquWr04pu7QnamFYR8bUCE.crl (hash: huqowbxrLSLJ2Nc05cO/QzTfGI/0eLO/AyFGL9bRgSg=)
11: LumDKv8yJCaTy-63lwCESoCV9wg.roa (hash: sY6Zv0xvPu2a/4QF003FOap0XFsW2Wqm364DnIdq744=)
12: Q8xfZWaRSUr-qefF7BhmHKjMl3s.roa (hash: HJ9iHQ4hdTkZ4JJds6Vw/2RFkXgvBx/DD5d+J3cy7Ts=)
13: R9KDbq4_KK0GlGPdLMfTos0CBjE.roa (hash: QHS2bULmvFoSCrqKfTl/c1ypYsSyCSgswpWvIKsISSU=)
14: Vt0us9OcLBIXjJfySaiTKs5W6wQ.roa (hash: nyuVpwcHfYR7p0Amdida/oXahMkize2c3OFf8NBV6os=)
15: cbVChPNP4-DIWiKkOfkWP8doixc.roa (hash: kIXewO7P0d1ssZnGCLQfIk8MUG+ijdkQqTo/a3x7pAg=)
16: lPjhCpLeDikKgymVS-eWXgwxAp8.roa (hash: MyuMAm1eed/9jmE8+GgWWmDVqy3fbOF+fkCjwKELi/0=)
17: n-gPrL8W0rexTPlzL1gsOHxjPFQ.roa (hash: Mdos03oYdbkiZzG/wC3jhapVhZc0L3yy3J3lEF+MNPQ=)
18: rR1f83OQ9uRUE7_cr1u6YytDpBc.roa (hash: XM5rNdyvUe3EDxwwVIUj6GQWBqMm/WaWj2X3nUSC/Qg=)
19: rjJb7Ma4JA2QDwSLDvxE_nuqcm0.roa (hash: QxeA9lmoqDy9aA4mXJ53DXoy59LVGmnnOAFARnPU/Bk=)
20: t5uw45Hhtzxj2GLToAWcTHImtcg.roa (hash: fqD4dYIocF+gCJ4U31lpisnaUUMjXKt9o0wyGOryKek=)
21: uea9rgFUf1JA0CrNAzpNKJzb_aw.roa (hash: k8IR4W1p+ygIWocTeYwLCg/tltltxbnE44agYQdWhgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:22:62:c9:d8:aa:57:86:cc:c8:9e:55:8f:c9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Jul 29 02:00:33 2026 GMT
Not After : Jul 30 02:00:33 2026 GMT
Subject: CN=0d47830c5c1524ea87f8cab243931743ca46d805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:71:d3:92:9b:44:1d:1c:b6:ee:5b:91:8e:7f:
f1:ed:d4:3c:38:13:87:f3:cd:5c:35:5b:c0:ef:2c:
e3:58:63:0a:5a:2d:67:e4:ef:59:af:0d:62:f1:db:
3d:ae:5b:f0:4c:b7:1b:d4:f0:25:03:86:bf:28:49:
c9:f4:a2:1d:5b:ef:53:1b:f6:7c:5d:3d:c7:4b:f9:
28:39:e3:fe:ca:06:22:89:a2:f4:dc:d8:9f:c4:d8:
72:44:7f:ac:94:7b:5c:74:8a:71:5f:ad:71:24:94:
62:47:f6:11:39:f3:36:99:4d:ba:c0:17:1d:9f:56:
35:81:8e:f1:d4:c7:2f:0a:73:5c:fb:1f:27:50:f7:
70:e3:fa:37:55:cb:02:9c:15:0d:d9:85:0b:00:21:
06:36:bb:5a:95:d8:48:b2:a1:53:3c:8d:fa:4a:69:
9d:95:61:ea:cd:ff:c6:82:bc:6a:95:df:8a:98:fd:
14:71:c3:0f:d9:78:e8:0c:83:6f:79:11:be:83:92:
25:64:20:f9:32:36:fb:a9:c4:e2:5e:e9:d9:9d:72:
04:5e:06:70:d3:e3:62:78:2b:88:0d:14:67:0f:43:
0d:2f:20:3c:6c:f8:82:92:db:8d:5d:12:9c:b8:c3:
97:c1:91:49:b7:f9:4d:0a:24:dc:85:cd:5c:fc:a6:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:47:83:0C:5C:15:24:EA:87:F8:CA:B2:43:93:17:43:CA:46:D8:05
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:42:24:b0:97:35:8d:bb:43:f6:2b:61:6a:b1:0e:06:c2:12:
c5:f2:f0:3c:e0:06:0d:fd:d8:0e:18:f0:f8:7c:a8:33:a1:c0:
5a:3e:bd:0d:1b:d3:fd:69:00:13:8b:3c:6f:5c:7b:44:a3:e4:
47:d3:1b:76:58:d9:be:f1:4e:32:3d:bc:26:5b:61:e4:35:58:
77:59:ea:fc:1a:4e:c9:cb:63:dd:10:2b:9a:aa:2d:e2:b7:cb:
b6:f8:bc:d8:de:2d:35:ce:8c:d0:a6:37:d0:f7:d3:9d:9c:41:
bd:8c:f8:89:a5:6d:5a:ca:f8:c5:b4:c9:e3:bd:4b:56:9a:2f:
ec:b1:36:ea:5f:49:0d:b1:cf:bc:48:16:b9:1c:04:05:bb:ca:
f3:fe:7e:5e:0a:4b:f9:84:8b:31:aa:b3:67:0e:13:4b:34:0c:
0a:60:f9:48:80:10:10:ba:93:3a:e5:a6:0c:a1:2c:55:7d:f8:
bd:aa:57:70:74:4b:fd:43:0d:5d:6e:20:bb:8f:80:3a:e2:e5:
e0:92:f4:d3:81:97:db:65:2c:a7:c1:e4:60:f6:16:4b:02:57:
6c:0b:bf:1a:3a:93:d4:32:92:b4:73:f3:f2:1f:26:0c:f1:5a:
49:4d:08:4d:4b:ac:04:fd:d2:eb:af:71:01:32:ac:c0:18:94:
a9:67:f0:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmiJiydiqV4bMyJ5Vj8mmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx
YjUwMjEwHhcNMjYwNzI5MDIwMDMzWhcNMjYwNzMwMDIwMDMzWjAzMTEwLwYDVQQD
EygwZDQ3ODMwYzVjMTUyNGVhODdmOGNhYjI0MzkzMTc0M2NhNDZkODA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3HTkptEHRy27luRjn/x7dQ8OBOH
881cNVvA7yzjWGMKWi1n5O9Zrw1i8ds9rlvwTLcb1PAlA4a/KEnJ9KIdW+9TG/Z8
XT3HS/koOeP+ygYiiaL03NifxNhyRH+slHtcdIpxX61xJJRiR/YROfM2mU26wBcd
n1Y1gY7x1McvCnNc+x8nUPdw4/o3VcsCnBUN2YULACEGNrtaldhIsqFTPI36Smmd
lWHqzf/Ggrxqld+KmP0UccMP2XjoDINveRG+g5IlZCD5Mjb7qcTiXunZnXIEXgZw
0+NieCuIDRRnD0MNLyA8bPiCktuNXRKcuMOXwZFJt/lNCiTchc1c/Ka6zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1HgwxcFSTqh/jKskOTF0PKRtgFMB8GA1UdIwQY
MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt
MTc2OTNlN2VhNjdhLzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh
LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUIksJc1
jbtD9itharEOBsISxfLwPOAGDf3YDhjw+HyoM6HAWj69DRvT/WkAE4s8b1x7RKPk
R9MbdljZvvFOMj28Jlth5DVYd1nq/BpOyctj3RArmqot4rfLtvi82N4tNc6M0KY3
0PfTnZxBvYz4iaVtWsr4xbTJ471LVpov7LE26l9JDbHPvEgWuRwEBbvK8/5+XgpL
+YSLMaqzZw4TSzQMCmD5SIAQELqTOuWmDKEsVX34vapXcHRL/UMNXW4gu4+AOuLl
4JL004GX22Usp8HkYPYWSwJXbAu/GjqT1DKStHPz8h8mDPFaSU0ITUusBP3S669x
ATKswBiUqWfwog==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:40:53 2026 by rpki-client