Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
File: ldcL-AoHyf_L7wzYRltFjWE9zIU.mft (raw, json)
Hash identifier: hewy5K/todK0N8Sdv2Zn5LZQyHi5nsybgU0D//whhmU=
Subject key identifier: 03:38:1C:36:B5:FF:A3:EB:09:D7:3D:5C:1A:BA:5F:43:19:8A:EC:0C
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Certificate issuer: /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial: 019FAE9AFCF77B6130DBC89407588D64D2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
Manifest number: 0CBC
Signing time: Wed 29 Jul 2026 16:00:20 +0000
Manifest this update: Wed 29 Jul 2026 16:00:20 +0000
Manifest next update: Thu 30 Jul 2026 16:00:20 +0000
Files and hashes: 1: BvAkaqIQMJfGpSIttKYw6u69UsY.roa (hash: HljiF1YNJTd/GJX5JhDeq7KwVETiH5Pa6f/ONTU55h8=)
2: VjaB08Ql0W9-r77gR-3DY__Jy88.roa (hash: YVfg6l74ML3q0VN2MwFzeG3ePk+gbLJopMwK+Q2eXHg=)
3: ldcL-AoHyf_L7wzYRltFjWE9zIU.crl (hash: 4GzlA/0gtss2Pxu4s7y39+9NipM3lh3Z0A0jjDeWvyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:9a:fc:f7:7b:61:30:db:c8:94:07:58:8d:64:d2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Validity
Not Before: Jul 29 16:00:20 2026 GMT
Not After : Jul 30 16:00:20 2026 GMT
Subject: CN=03381c36b5ffa3eb09d73d5c1aba5f43198aec0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:96:d4:76:3d:72:53:0f:3e:b9:58:8b:6d:
ca:64:d9:f5:cf:d4:a3:8a:d7:3c:34:20:97:ee:d1:
0e:33:42:70:ac:5c:81:ca:69:64:d2:6d:dc:2d:ba:
71:4e:3b:d2:36:91:9d:2c:ac:cd:fe:5d:87:0c:c8:
5f:64:5f:cf:25:5d:76:5b:d1:32:f5:34:13:45:74:
2d:73:7f:e6:f5:a9:f0:77:bd:6f:c1:55:5e:ea:45:
92:59:15:85:46:13:fa:5c:a3:44:0e:a2:ed:8c:af:
81:55:27:23:6b:2f:c5:d3:f4:b7:f3:86:f0:b9:ac:
76:0d:2c:cc:77:98:27:8b:51:a4:c9:af:9d:6f:df:
6b:3a:48:4c:78:01:53:cd:ac:3e:c9:a0:a2:7a:8c:
e8:06:84:de:4b:ae:48:ff:e6:51:4a:51:fc:97:de:
48:1f:0a:5f:f3:58:9a:3b:ca:11:f5:66:0e:f1:c8:
75:30:6f:f5:87:77:9f:d1:ed:38:7e:fc:47:3f:3f:
72:09:00:1d:9d:2f:3b:20:11:8a:24:8a:57:68:ef:
62:c8:7c:c7:a2:ed:9a:0e:b7:a6:05:6d:74:c0:c2:
fd:71:9c:81:3b:c4:c8:0c:6b:e2:e7:bb:b2:2b:49:
02:88:a5:0e:31:97:ec:46:4d:7f:b1:7a:35:7e:29:
af:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:38:1C:36:B5:FF:A3:EB:09:D7:3D:5C:1A:BA:5F:43:19:8A:EC:0C
X509v3 Authority Key Identifier:
keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:89:b8:0f:15:cf:32:9c:2b:e6:a9:78:01:17:e3:07:17:52:
9e:c7:9f:ec:ec:78:da:73:3f:71:32:22:41:cd:0a:71:5f:4c:
9f:12:ef:41:58:87:83:e4:87:12:c5:f5:a9:cb:b8:b5:30:12:
d9:14:c0:69:7e:82:cb:35:da:10:0c:f0:ca:dd:f9:94:ce:55:
c5:4e:63:e6:fb:69:90:48:94:93:d2:11:ff:75:19:5b:50:4c:
16:e7:65:cd:9a:d8:01:31:0d:98:95:4e:16:a9:5c:b8:d6:35:
8c:dc:69:f8:b9:b7:fd:25:88:8d:04:5d:57:84:65:5d:29:50:
d0:63:89:68:8f:ae:9e:2e:d1:d7:93:93:2d:7d:d9:8a:9a:d4:
c6:16:64:5f:7b:2a:5a:31:0f:75:e1:cf:c3:ed:71:b0:30:e4:
17:76:f9:4b:8e:ec:84:bd:33:85:e8:b4:21:0b:9e:36:2a:c0:
4d:6f:67:4d:46:bb:e3:d3:21:a0:fb:40:02:94:7b:ea:81:4c:
99:3a:8a:4f:f7:de:f7:c3:c7:06:c3:e4:e0:ce:c6:7a:8f:fc:
75:49:ad:5b:b9:c7:7a:27:6f:54:59:5c:47:53:a5:54:54:02:
02:3a:a1:c9:a9:b9:c0:2a:5f:ee:10:ad:4c:68:b4:d1:26:d4:
fa:82:6d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:02:41 2026 by rpki-client