Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
File: ldcL-AoHyf_L7wzYRltFjWE9zIU.mft (raw, json)
Hash identifier: 4jIRwPak8iS5nqdMRj8gctLagHVXSFQgmjvijOBMR0g=
Subject key identifier: 1F:5A:D6:7A:DB:AA:78:01:AA:46:1E:AB:93:A1:7E:8C:C2:D9:04:64
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Certificate issuer: /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial: 019CA9EAE958C7F083174A9EA38454D47CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
Manifest number: 0B25
Signing time: Sun 01 Mar 2026 15:01:10 +0000
Manifest this update: Sun 01 Mar 2026 15:01:10 +0000
Manifest next update: Mon 02 Mar 2026 15:01:10 +0000
Files and hashes: 1: ldcL-AoHyf_L7wzYRltFjWE9zIU.crl (hash: cD7/nqLHU1sqj7r29Mz+T/yEpFHB2sYuYDOudeb/npk=)
2: tMCBLo17Jcu9nYj5dm70vUGR7Kw.asa (hash: 6ybtRyvqW2iRo23vB9EOMEnUyiFtXyklB8ljlHnEAdI=)
3: u4ERWMg82PqTVt7Gef_SWK-cZGQ.roa (hash: RjVOex1KtOTitdhI4w1UNBYIq1OmgpAnHu9XT16yu5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:e9:58:c7:f0:83:17:4a:9e:a3:84:54:d4:7c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Validity
Not Before: Mar 1 15:01:10 2026 GMT
Not After : Mar 2 15:01:10 2026 GMT
Subject: CN=1f5ad67adbaa7801aa461eab93a17e8cc2d90464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:5b:ab:95:17:c5:0f:e2:0c:2a:b0:81:43:
19:d6:3f:36:ee:7f:ea:25:20:4f:4c:d1:11:d1:89:
ab:dd:9e:26:9b:b7:62:72:01:8d:c3:5d:58:09:77:
2d:71:64:00:5f:86:72:3b:f1:24:c0:92:38:17:b9:
12:28:56:89:ae:c3:2e:86:7c:f2:79:a9:34:3c:23:
39:90:a2:f9:34:17:c3:23:61:4c:ce:a3:8c:54:d6:
ad:5b:89:95:f8:53:0b:60:8e:ce:f1:6c:0a:89:d5:
96:dd:f3:a4:d3:14:36:14:2f:1c:80:c3:c5:74:3c:
20:02:cc:0e:f4:8e:52:9d:0e:d8:1b:2c:b6:67:58:
e2:e3:41:86:6a:fc:c6:0d:ec:71:fd:eb:3f:d5:d8:
67:37:9f:04:8e:60:b9:6d:3a:4a:c9:9a:b2:08:5f:
f6:82:3f:32:57:21:4a:3f:05:7d:c5:fe:53:25:25:
cc:99:52:19:76:33:dc:9f:90:a5:83:1f:6b:c3:cf:
e6:cb:fc:f3:ed:28:28:07:66:86:89:d0:a4:8c:74:
77:fe:c0:0d:df:8e:b6:8a:e0:05:ac:5e:47:fa:b3:
5b:db:23:15:09:3a:ad:63:3f:9a:35:95:5e:32:76:
a5:26:4d:fb:0a:00:66:c0:0b:a3:f3:3c:b1:6e:51:
3d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5A:D6:7A:DB:AA:78:01:AA:46:1E:AB:93:A1:7E:8C:C2:D9:04:64
X509v3 Authority Key Identifier:
keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0d:4d:76:93:98:90:a9:32:50:d4:bd:bd:aa:47:00:79:1d:
08:35:ed:8f:7c:68:ec:cc:82:34:f2:ee:bf:e5:80:e3:bc:4c:
4c:75:01:cc:a2:42:72:87:8c:b3:7c:75:5a:f8:44:66:5d:bc:
37:b6:73:2a:90:61:0d:65:cd:e1:90:13:48:56:85:91:a9:76:
39:e9:d5:d1:21:e6:da:1f:e3:ed:08:50:61:bb:42:f2:fd:3b:
0c:66:3b:3b:8c:2c:d9:c9:e8:74:39:8c:22:6e:f3:bd:91:bd:
81:f2:71:ff:be:10:f3:fd:95:96:77:b2:a6:c1:f8:df:fb:d7:
db:e4:bf:35:1c:d7:0e:e6:50:e7:c7:92:8c:d7:36:01:f9:9f:
9a:af:e4:a5:e3:91:a8:51:16:94:60:76:70:10:ea:d5:df:8c:
c6:26:c1:af:76:ca:3d:62:5a:bc:e5:d4:5a:38:9e:4c:18:68:
2e:29:48:31:4a:e9:d9:68:0f:84:bb:2b:3f:30:ca:9b:3f:49:
d4:1b:19:96:7d:ac:78:49:fe:d9:00:df:14:b9:19:ae:ad:96:
d7:14:77:41:f9:3e:da:98:eb:bb:04:dd:21:69:6f:59:4a:b9:
24:f3:77:92:69:51:00:80:6d:f6:1e:0e:14:09:17:5a:3e:44:
13:c0:57:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:52:35 2026 by rpki-client