Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
File: ldcL-AoHyf_L7wzYRltFjWE9zIU.mft (raw, json)
Hash identifier: UhfP43E3S6N+YDJRYuf478F7g7wEOx1Vfa7uapfNUTU=
Subject key identifier: 60:B0:5D:65:85:5A:6F:04:EE:96:DB:6B:4C:D7:F4:BF:4F:53:B7:7E
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Certificate issuer: /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial: 019CA7FCB2EACE3E574B4A0ACEED957EDF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
Manifest number: 0B24
Signing time: Sun 01 Mar 2026 06:01:21 +0000
Manifest this update: Sun 01 Mar 2026 06:01:21 +0000
Manifest next update: Mon 02 Mar 2026 06:01:21 +0000
Files and hashes: 1: ldcL-AoHyf_L7wzYRltFjWE9zIU.crl (hash: QCrCPaZZwuw/1Kwgu+it2PWqUlAN63EjQCXloDLXWQI=)
2: tMCBLo17Jcu9nYj5dm70vUGR7Kw.asa (hash: 6ybtRyvqW2iRo23vB9EOMEnUyiFtXyklB8ljlHnEAdI=)
3: u4ERWMg82PqTVt7Gef_SWK-cZGQ.roa (hash: RjVOex1KtOTitdhI4w1UNBYIq1OmgpAnHu9XT16yu5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:b2:ea:ce:3e:57:4b:4a:0a:ce:ed:95:7e:df:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Validity
Not Before: Mar 1 06:01:21 2026 GMT
Not After : Mar 2 06:01:21 2026 GMT
Subject: CN=60b05d65855a6f04ee96db6b4cd7f4bf4f53b77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:84:f8:39:f2:23:6c:8c:4e:76:19:e9:27:
de:9b:35:54:ff:86:22:00:19:12:2f:48:6a:39:e8:
66:db:00:e4:0d:19:f9:df:0f:ff:9b:d6:c3:ac:16:
14:a1:11:bc:c0:d4:4e:c8:3c:9f:7d:c4:83:6a:47:
dd:7a:2d:e9:91:3f:d0:b0:96:5a:8e:a8:b8:ed:5c:
8b:48:72:83:13:bb:80:75:3a:a1:16:52:d6:4b:f2:
5a:f4:23:62:a1:41:6c:57:4e:ed:40:b8:a8:4f:f9:
77:3d:35:7b:76:a3:1b:72:f3:22:13:f7:73:4e:1d:
f1:b5:a3:12:f4:12:72:70:de:10:45:af:d1:9f:3f:
cb:49:1a:df:6c:7d:30:fb:0f:74:0d:66:60:32:61:
2c:4e:f6:57:d2:44:e7:76:4a:4d:99:ef:1d:bf:71:
09:5c:44:db:1f:bf:19:95:86:79:2f:0e:dd:a5:94:
40:92:1f:d0:0d:6c:f3:29:8e:08:8c:47:8f:31:3b:
5e:2a:ba:f2:81:25:b1:f5:de:e2:b6:6d:9a:14:f1:
f6:37:29:02:d4:af:dc:39:fd:75:b5:41:6f:7f:77:
4e:b1:31:62:4e:82:c6:34:00:f6:17:72:03:ed:1c:
75:8a:69:5d:47:68:b0:ce:58:c0:05:f2:f7:3c:01:
4b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B0:5D:65:85:5A:6F:04:EE:96:DB:6B:4C:D7:F4:BF:4F:53:B7:7E
X509v3 Authority Key Identifier:
keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:42:29:5a:f0:ff:34:df:6e:e8:85:6c:1c:80:5b:e6:4e:54:
2f:3f:02:50:41:05:eb:54:99:17:27:49:da:34:a5:98:27:22:
1b:6c:18:ec:c1:79:db:53:7f:77:c8:42:32:6a:ab:3b:33:ce:
39:ba:ae:e8:3b:15:75:3e:95:b4:d9:4d:69:b3:28:1d:cd:2d:
11:6c:20:b1:33:66:65:c6:06:29:24:0b:0d:31:0f:8b:0b:63:
fd:0b:a6:f6:3c:d0:69:1e:b1:a6:c3:f6:bf:71:0e:b2:1d:45:
f4:8e:a4:6b:c6:cd:fa:a7:f8:ca:68:51:ea:c0:a2:a3:dd:20:
fb:96:03:06:1d:b8:32:21:d4:85:db:04:eb:ff:08:4d:db:30:
c0:a7:63:ac:9c:1c:f0:ff:20:86:cf:f8:f9:84:d3:01:a3:1e:
47:92:e2:c5:95:66:f5:75:79:ae:62:c4:4a:27:db:73:af:ab:
da:6b:51:aa:4e:ce:c2:37:27:42:a1:f7:80:cd:aa:66:e0:fe:
b7:be:4e:49:e0:a1:96:73:46:3d:f2:6a:2e:d5:18:43:80:93:
4e:aa:a9:3a:97:4c:0f:dc:5d:4f:04:76:da:a5:12:c1:c0:e2:
7e:22:d9:ba:52:fc:5a:7a:1e:0e:1b:13:95:10:93:16:a5:0f:
67:52:21:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:12 2026 by rpki-client