Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
File: ldn8gV6QyoeSeQfF6rP-ecohXqo.mft (raw, json)
Hash identifier: 4Zio41/N1P9N0fMDW0Z8np4yFkSPdX7O3peUSOC6rGQ=
Subject key identifier: 64:04:13:8C:82:2F:B2:6D:F1:11:F0:A4:78:5C:28:5F:E9:74:20:44
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Certificate issuer: /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial: 019D26601C8507DDF16FCC9310FCECC2621D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
Manifest number: 0588
Signing time: Wed 25 Mar 2026 19:02:06 +0000
Manifest this update: Wed 25 Mar 2026 19:02:06 +0000
Manifest next update: Thu 26 Mar 2026 19:02:06 +0000
Files and hashes: 1: LUonv2RCWvu1zL14QrHsu9P2rS4.roa (hash: sYEwbsM2ctHv6cNHrCxgkHRsQW+if3GIsRAYyp3V97Y=)
2: S8keSl8NDHVc6KPmbXVZh56DkMo.roa (hash: gehjFU9x+RbJrI179PzTfPP1zreMHK8V8b0riuey5sI=)
3: dXBxqg2WRY0bNZSrjzenz8d7Y10.roa (hash: bonkDkqWKImRRfgE/vT3fEawIKDM/g7JC3uJ3coEEKE=)
4: ldn8gV6QyoeSeQfF6rP-ecohXqo.crl (hash: z3m1dvKlkoW813kze47xKK8MsCFHqzlpMYjzEp8wOho=)
5: rNttweQh2PLctodsZ8mGF8Xdou4.roa (hash: RnrUAyBZsGmfOkyGXTt4MMRoQ1xT0nGSE3thOB+UT3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:60:1c:85:07:dd:f1:6f:cc:93:10:fc:ec:c2:62:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Validity
Not Before: Mar 25 19:02:06 2026 GMT
Not After : Mar 26 19:02:06 2026 GMT
Subject: CN=6404138c822fb26df111f0a4785c285fe9742044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:38:fa:de:ea:78:5f:e7:68:f1:ff:99:86:
5f:b8:4a:6a:5c:ec:80:9f:8e:c8:ba:26:5f:e3:f0:
d2:a4:c7:19:60:b7:60:7b:d8:54:4b:dd:ca:85:cd:
7c:b6:c4:11:92:d4:11:37:00:ce:72:14:b1:01:ad:
ed:45:95:58:23:85:73:47:6c:fb:30:ac:cd:32:1c:
7b:21:f5:fa:17:50:88:2f:d4:52:c7:60:a0:8f:df:
7b:33:cd:7d:ec:74:f9:ba:c3:07:4e:4d:db:0e:b3:
b3:32:1a:1e:a4:44:11:30:cb:24:da:34:0d:02:0e:
51:53:25:63:b3:19:b4:6b:96:88:11:bd:f2:43:f5:
48:90:1f:7c:18:bc:7d:78:a0:e0:bf:2a:d8:f3:24:
e2:c6:48:5a:93:d2:fe:56:18:d4:92:35:ab:3a:cb:
46:7c:8f:06:b8:d7:4b:cf:ed:62:9a:82:68:26:c2:
ad:71:14:6c:a9:79:bd:52:8a:8f:d6:9c:f1:4c:06:
af:6c:70:97:20:d3:5b:a2:e4:ce:c3:83:82:c1:31:
70:d1:78:67:33:c4:aa:dd:28:e1:8b:44:f8:24:35:
84:4b:6a:52:ca:cf:9a:52:80:b3:8a:0f:3a:b2:a2:
c7:04:96:1d:fd:26:b4:15:dd:05:5e:1a:33:5d:0b:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:04:13:8C:82:2F:B2:6D:F1:11:F0:A4:78:5C:28:5F:E9:74:20:44
X509v3 Authority Key Identifier:
keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:21:a2:08:c2:4c:74:db:c7:8a:04:9a:f3:89:93:3b:b2:cd:
00:48:b4:04:3e:7d:f4:f7:94:a4:df:fa:00:01:de:8c:14:2a:
eb:2a:86:51:bc:1c:65:f5:09:cb:ff:16:51:a1:e3:3f:43:42:
7f:ed:1b:96:8c:33:cb:b7:44:45:db:b7:2c:20:63:0d:24:c5:
34:45:9f:f4:3b:d4:b2:0f:3c:60:cb:4f:a0:c1:f3:c4:66:bb:
5e:e1:f5:29:fa:91:96:01:bb:8c:30:b6:b8:0e:7f:aa:47:9c:
73:bb:fb:94:72:d4:7c:45:4d:da:b8:20:c4:27:2f:f4:c7:7b:
e7:a4:e8:16:04:04:c6:05:23:9b:d1:6b:67:39:61:36:87:b7:
3c:60:6f:52:fa:12:e2:c6:f7:e2:f4:9d:40:9c:6f:5f:d0:e6:
7f:5b:99:7c:91:cb:41:3b:d3:8e:89:85:a8:ab:f8:b3:eb:b2:
38:d7:a8:96:09:69:0b:5d:2e:29:39:4d:c3:1e:09:d4:11:d2:
ea:96:c6:70:c9:0a:bf:87:27:68:6d:24:8a:c8:14:9d:7d:3b:
8c:72:ff:4b:c8:f4:7f:5b:b8:64:41:49:91:56:8f:38:bb:bd:
bd:b6:55:01:90:13:18:34:b8:86:fb:4f:27:76:67:6a:14:67:
38:5f:a6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:37 2026 by rpki-client