Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
File: ldcL-AoHyf_L7wzYRltFjWE9zIU.mft (raw, json)
Hash identifier: XzoVX92Dpc7eRitQHU4tiG1+maTdsSXNx+TlsTtIk/I=
Subject key identifier: 71:C3:F4:6C:3F:1F:DF:9D:A9:E5:94:C6:94:3F:89:2D:EB:61:DB:F3
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Certificate issuer: /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial: 01A15B54A6D5BDC4A796A7F9C0B13544691F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
Manifest number: 0D9A
Signing time: Tue 20 Oct 2026 22:00:36 +0000
Manifest this update: Tue 20 Oct 2026 22:00:36 +0000
Manifest next update: Wed 21 Oct 2026 22:00:36 +0000
Files and hashes: 1: BvAkaqIQMJfGpSIttKYw6u69UsY.roa (hash: HljiF1YNJTd/GJX5JhDeq7KwVETiH5Pa6f/ONTU55h8=)
2: VjaB08Ql0W9-r77gR-3DY__Jy88.roa (hash: YVfg6l74ML3q0VN2MwFzeG3ePk+gbLJopMwK+Q2eXHg=)
3: ldcL-AoHyf_L7wzYRltFjWE9zIU.crl (hash: zBRarlU3N60mREKNf2A7vFenIxAzr8rwUX5k166jtoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:54:a6:d5:bd:c4:a7:96:a7:f9:c0:b1:35:44:69:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Validity
Not Before: Oct 20 22:00:36 2026 GMT
Not After : Oct 21 22:00:36 2026 GMT
Subject: CN=71c3f46c3f1fdf9da9e594c6943f892deb61dbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:bb:20:ee:be:01:ed:24:74:9e:a7:2b:66:
26:ed:88:e2:2b:45:88:8c:fe:5a:80:b3:74:86:b4:
37:b5:c4:d7:57:a0:8e:f1:eb:4d:7c:3f:0a:a3:78:
95:bc:1c:3f:3b:5f:71:4d:e9:34:4e:5a:a9:7b:4a:
40:df:a6:2b:cc:71:64:72:ae:b7:01:02:e3:cd:a8:
91:cc:b9:1e:31:1d:cc:5d:3c:ec:32:72:10:1b:0f:
e8:b6:8c:d8:b2:8f:36:bc:dd:dc:7b:eb:60:c8:54:
3e:f0:1e:1e:cc:26:02:b3:46:a5:f2:ee:3e:42:ab:
08:38:d8:9c:b4:a7:1b:a0:e3:df:29:f7:c3:ee:35:
97:f0:7b:34:17:68:d4:82:74:4e:b1:d3:80:d5:34:
67:07:ab:19:38:04:97:a1:42:5c:ad:13:a1:56:21:
bf:db:56:2d:72:bb:21:c1:b6:76:81:55:90:60:46:
04:39:04:9b:33:32:a0:51:55:ac:00:2f:6d:41:48:
b7:de:2a:4e:78:51:82:af:06:90:6c:93:95:b6:a1:
bd:a6:00:13:a4:88:64:43:f5:85:0d:bd:90:cd:ac:
37:fa:df:8e:e4:a3:47:ae:4b:75:e1:97:6d:7e:21:
f0:f1:04:77:f6:af:56:fa:2b:aa:b1:d9:ff:4a:e3:
26:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C3:F4:6C:3F:1F:DF:9D:A9:E5:94:C6:94:3F:89:2D:EB:61:DB:F3
X509v3 Authority Key Identifier:
keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:64:bd:e3:06:a1:b7:07:9a:a5:f1:05:fc:a2:e5:57:4c:87:
9e:c5:be:88:bf:8f:6c:cf:e6:04:ce:d9:8e:e3:0e:d3:8f:43:
43:15:82:51:c3:04:96:35:f8:0f:aa:cb:d7:4d:bf:cc:0d:4f:
9a:13:e5:9c:0b:f1:1b:84:fa:d8:1d:e8:a0:c2:0e:49:c8:ef:
3d:af:81:4a:d6:43:ae:3c:7c:cb:53:61:99:bc:02:44:85:b1:
86:ee:a0:0d:c3:27:f3:43:79:05:fa:c8:20:0a:d0:95:c3:dc:
5c:b7:3c:b4:b6:2b:04:76:19:e7:ee:50:e6:cd:ec:1d:9c:8c:
6c:c7:b2:b6:4c:3e:68:35:f7:57:6a:5c:80:55:56:a8:61:5a:
bf:25:1f:fb:6b:f4:2f:4d:99:92:db:de:e9:d2:a7:3a:8e:08:
c0:4c:39:a7:d7:06:fe:44:60:8a:14:09:d3:4a:81:0c:d9:f5:
89:23:2d:00:e6:66:85:c9:b9:82:0f:06:02:c9:b6:03:68:58:
9b:a6:78:fa:53:54:77:f8:c4:7f:da:e8:0c:f2:77:ef:57:26:
34:47:55:bb:fe:2d:68:79:23:cd:4f:ec:37:9f:cd:33:b3:a9:
8f:ae:f8:75:b4:18:87:5b:69:04:9d:d2:3b:e5:73:5a:83:94:
4a:40:c5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:40:35 2026 by rpki-client