Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
File: LDe0vsl9YIq-I7xXujmCRszFd2A.mft (raw, json)
Hash identifier: NHppb2U9Nn3bZ0zYH2AG2nSvv4ymORdU/BxVz7KT0lU=
Subject key identifier: 8B:55:A0:74:8D:40:01:45:9E:29:92:CF:11:76:73:B2:C5:49:1F:AF
Authority key identifier: 2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
Certificate issuer: /CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Certificate serial: 019D254C93B7D561A9BC897DD67F4210C6B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 14:01:08 +0000
Manifest this update: Wed 25 Mar 2026 14:01:08 +0000
Manifest next update: Thu 26 Mar 2026 14:01:08 +0000
Files and hashes: 1: LDe0vsl9YIq-I7xXujmCRszFd2A.crl (hash: astOii5de9LZ6Rz87g9/A79LHOY8f8lE+O31Q8/Hnb4=)
2: ayl3vnvrrdmk5cZvehuS-xb9kOo.roa (hash: RrcMxnc59zE7RGrIC4ZPK4DT+x6V2IkZuo1eiCNAHss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:93:b7:d5:61:a9:bc:89:7d:d6:7f:42:10:c6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Validity
Not Before: Mar 25 14:01:08 2026 GMT
Not After : Mar 26 14:01:08 2026 GMT
Subject: CN=8b55a0748d4001459e2992cf117673b2c5491faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5e:ca:6a:ef:3c:e6:a1:50:51:ba:44:af:6a:
2f:b1:e1:b5:c1:35:63:8c:c5:66:72:24:77:d7:8e:
58:f7:38:08:8b:92:14:fd:4b:7a:33:2f:a8:6d:a3:
8d:55:6d:b7:6a:24:56:fd:1f:90:8e:fb:7b:08:f7:
97:d1:06:1c:08:8e:e1:d5:0c:ad:a6:90:5f:a4:62:
bd:7d:a0:86:4f:f6:cd:c8:72:9c:21:8e:e2:8a:21:
f8:4d:45:40:7b:40:55:5c:f9:15:80:ac:2b:99:af:
fe:46:f8:9f:cc:99:87:77:a4:86:a1:10:f8:eb:2b:
ba:e9:b9:34:3f:cd:7e:b1:65:c2:bd:23:5a:92:31:
b4:c3:ed:44:c9:6f:e1:36:85:7c:a8:3c:5f:82:2a:
84:77:83:a9:5f:eb:fa:5a:82:5f:96:a9:31:4f:ef:
16:85:0e:46:e4:fb:be:84:a8:37:f6:82:82:ae:b9:
ba:95:0a:0a:ca:17:ba:52:c2:c4:0b:e1:49:86:44:
4b:7d:10:29:5b:f4:51:65:7e:71:71:4b:f7:0b:8d:
82:17:19:eb:c1:ee:b3:91:e4:f9:3e:b6:f9:34:ec:
45:ba:57:89:06:ac:29:9f:64:c7:65:e7:da:1b:4e:
29:f3:a6:79:a9:36:24:db:61:f4:02:ec:0c:65:5f:
61:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:55:A0:74:8D:40:01:45:9E:29:92:CF:11:76:73:B2:C5:49:1F:AF
X509v3 Authority Key Identifier:
keyid:2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:54:8c:33:87:3b:ad:37:75:d7:2b:b2:48:c9:24:fa:ad:f1:
5a:f6:04:b2:5d:6e:16:74:ee:5b:38:0f:69:07:16:39:02:ef:
b2:d0:06:dc:24:70:a6:82:3c:37:49:bc:b1:e5:44:23:13:f3:
ec:70:d6:08:26:d4:82:47:93:09:32:9a:2c:6d:d1:40:45:78:
a6:75:cc:88:69:0d:33:26:08:8f:9d:7b:ef:16:24:d2:56:60:
2e:49:58:8e:f1:71:ba:59:fc:81:3d:5f:29:0d:f8:ce:bd:cd:
0e:b7:c6:52:88:da:a3:08:ab:c4:d4:0d:76:dc:59:e7:3a:5f:
c2:ba:22:a3:0f:8f:d4:4d:b7:25:2f:6b:c4:c6:73:cd:a8:33:
f3:1a:eb:05:f9:30:2c:64:fa:21:d1:04:1b:d0:d7:5d:bb:e6:
1a:fa:b3:bf:fa:90:2a:c2:26:c9:28:0d:a8:61:5c:bb:3b:b8:
42:09:b4:12:58:5e:11:02:23:3f:bb:14:1a:64:8c:a1:51:92:
b9:df:09:45:39:07:a1:e6:99:e4:e4:01:7d:9c:75:a0:1f:dc:
f7:57:7f:32:a5:3f:67:57:56:4a:1b:01:a1:d3:ea:ba:ac:88:
87:69:9e:a9:68:49:b1:bc:5b:8f:69:99:68:25:0f:ee:99:de:
09:d9:be:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:10 2026 by rpki-client