Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File: LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier: 5LcdwGufgoyqOATmTlF/+VLyT0jKn7u0F/SnmlW4Rc8=
Subject key identifier: 63:C8:09:C8:ED:D0:2F:AB:3F:3B:15:CE:CD:65:49:EF:ED:01:28:B3
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial: 01A0E0CF63CCD1EB0006FDD0DE42FD9C6EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number: 17C0
Signing time: Sun 27 Sep 2026 03:01:22 +0000
Manifest this update: Sun 27 Sep 2026 03:01:22 +0000
Manifest next update: Mon 28 Sep 2026 03:01:22 +0000
Files and hashes: 1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: wZHrPiFno681JuWEWI1MBA34Ir+SxNFdfFuJNaxhblg=)
2: cCc9EoKWn1mq3UkIpDhniuHoz_0.roa (hash: Bx7QtDc0qD0Q85lb0xP2V1a5BckVXkCIqQNEyBo+I68=)
3: jaTCzxQZwGVoMfE5pxy0Gbm9K_E.roa (hash: ULw0U4ZGmZtESpblMgYhOZZu7hCKbL/R7CwXeeGSDEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:63:cc:d1:eb:00:06:fd:d0:de:42:fd:9c:6e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Validity
Not Before: Sep 27 03:01:22 2026 GMT
Not After : Sep 28 03:01:22 2026 GMT
Subject: CN=63c809c8edd02fab3f3b15cecd6549efed0128b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:34:61:52:fe:41:38:d6:3b:5b:0a:14:80:
35:84:56:52:6c:b0:c9:5e:a9:b6:f4:70:89:ab:7f:
15:51:25:21:f4:43:f6:e4:4f:09:2a:48:52:51:32:
99:f6:d1:1b:c7:cc:43:e2:85:f0:26:8c:75:4c:82:
24:05:7c:19:88:93:f6:9d:94:40:ed:a7:eb:77:d2:
cd:db:a7:4c:21:fc:67:58:17:26:73:63:17:e4:7a:
db:5d:b8:ef:0e:32:a3:df:ee:15:2f:a1:4d:25:84:
96:3b:0b:ca:ee:db:80:02:ac:a2:e7:45:b1:75:f9:
47:03:5a:ae:9c:52:bf:fc:f8:1c:00:55:54:2c:e0:
aa:65:0b:bb:bb:2d:c4:55:ec:8d:87:92:18:50:39:
12:64:1b:e4:02:05:bd:68:ff:59:42:25:98:2a:8e:
11:c9:83:9f:8a:7d:f8:28:8b:ef:c5:8c:1f:4c:82:
b7:b3:b8:4c:2d:e8:61:66:f6:ae:c1:76:c5:21:8f:
34:6e:26:7e:df:ab:de:63:ce:b3:a7:3f:a6:34:2d:
d1:c9:53:38:d6:28:3d:d8:c6:ae:f7:d8:26:65:09:
15:49:d8:68:22:1e:4d:e1:40:1c:59:cf:55:68:25:
fd:9a:1e:c3:eb:ff:c7:fa:61:47:df:40:17:e7:e6:
bd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C8:09:C8:ED:D0:2F:AB:3F:3B:15:CE:CD:65:49:EF:ED:01:28:B3
X509v3 Authority Key Identifier:
keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1c:0b:e4:38:8b:26:31:33:31:fb:ab:bd:ed:09:76:38:59:
c9:79:ca:a7:79:84:e9:ed:7f:71:6a:3c:4d:7b:fb:8f:3a:ad:
75:1f:07:00:87:03:10:6f:ca:55:f0:ab:ea:72:3b:1b:92:b2:
88:b2:52:e7:c6:db:f1:b2:db:33:b2:d7:ae:ab:a3:af:12:3d:
82:ed:9d:ec:9e:ae:9d:34:6b:6f:72:74:e1:b1:83:ac:a9:39:
7e:1d:6e:44:55:10:f3:5b:1b:0a:11:0c:25:44:f9:03:48:8c:
bd:7a:8a:b7:cb:cf:cc:79:8b:fb:50:a8:8e:d1:f5:5e:13:82:
26:d7:7d:0a:b4:d6:53:ca:9e:5e:ab:ba:ab:4f:a9:bb:a9:7f:
67:bc:4f:45:dc:36:41:d6:f9:2f:89:db:93:63:96:08:67:f2:
aa:f4:04:40:3c:63:67:f5:da:04:cd:d7:98:da:df:bc:df:6c:
92:83:29:ec:3f:34:66:57:6a:5a:50:e6:22:90:ec:4d:6b:53:
0d:08:c3:9f:69:b1:f2:be:81:12:8e:ea:b0:5c:29:f0:59:2f:
53:b8:18:fe:39:a8:5e:22:ed:30:d7:bc:ff:f1:0c:01:71:83:
08:0f:07:cb:0d:95:cd:64:ff:89:b6:f3:b5:16:35:66:1e:16:
89:1d:a4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:11:04 2026 by rpki-client