Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File: LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier: bvLfnoYJZ66//eaDuyhMKh6ZPDaGL+GXjeGmsbcEyy8=
Subject key identifier: 5A:A0:32:5F:FA:5A:21:A5:C7:50:0C:E7:7F:AC:F4:D8:5D:63:E2:4D
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial: 019E1FECC3F410F76ECCA0F4C2761DE5F0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number: 1653
Signing time: Wed 13 May 2026 06:01:10 +0000
Manifest this update: Wed 13 May 2026 06:01:10 +0000
Manifest next update: Thu 14 May 2026 06:01:10 +0000
Files and hashes: 1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: 7kZrnfvMivDw8QS8hsKNNfy3S5P7DzDCSWGR8SZXE5Y=)
2: cCc9EoKWn1mq3UkIpDhniuHoz_0.roa (hash: Bx7QtDc0qD0Q85lb0xP2V1a5BckVXkCIqQNEyBo+I68=)
3: jaTCzxQZwGVoMfE5pxy0Gbm9K_E.roa (hash: ULw0U4ZGmZtESpblMgYhOZZu7hCKbL/R7CwXeeGSDEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:c3:f4:10:f7:6e:cc:a0:f4:c2:76:1d:e5:f0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Validity
Not Before: May 13 06:01:10 2026 GMT
Not After : May 14 06:01:10 2026 GMT
Subject: CN=5aa0325ffa5a21a5c7500ce77facf4d85d63e24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:c9:26:74:a8:b3:c1:1d:b1:ea:12:ac:a6:
c2:3b:89:72:d7:2c:7f:a7:53:de:25:8e:35:59:ea:
5c:27:ab:e7:85:7a:ff:b9:f2:30:9b:15:bc:d4:7b:
10:d4:49:24:e4:74:98:35:72:15:dd:1e:d5:45:ad:
42:3e:9d:8a:34:2f:80:a5:c1:8a:0c:e9:ad:7a:54:
39:7b:9b:4c:89:f7:be:f9:ee:c3:07:1e:f1:03:2e:
1a:97:3f:35:c9:e2:c0:ce:d9:3e:34:38:de:c8:14:
20:1f:4c:06:52:85:cc:76:c4:34:80:7f:27:48:f4:
64:2f:52:08:19:f1:3d:fd:4e:f0:c5:27:29:b0:35:
0b:fc:ab:bf:99:8e:71:e2:04:88:48:20:b3:b8:01:
44:56:90:33:69:a5:d6:f4:81:b4:cb:1b:b4:44:19:
f3:f7:c2:33:71:f9:c9:ab:48:66:3a:86:65:59:75:
4c:39:a6:c0:53:f9:26:7b:80:5d:ef:59:bf:c3:61:
6e:45:0a:a9:d2:4e:95:bf:99:1d:ad:fc:0a:84:94:
d7:b4:9a:2a:6d:fe:f6:3c:d7:8a:e7:40:62:d4:f2:
c0:7a:fa:e0:68:01:f9:f2:0c:f9:8c:c5:9c:3c:45:
0f:8b:6f:15:7a:bc:4a:18:6a:ce:c9:d7:44:63:65:
29:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A0:32:5F:FA:5A:21:A5:C7:50:0C:E7:7F:AC:F4:D8:5D:63:E2:4D
X509v3 Authority Key Identifier:
keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6b:be:43:32:79:09:76:65:c3:c2:22:29:4d:cf:47:3e:32:
a3:5f:96:ba:ef:19:73:8f:ee:f2:8b:a5:e1:1b:f9:fd:a2:84:
ca:ae:46:79:f3:41:9b:d8:b6:f4:cc:fb:54:cb:01:fd:57:86:
21:a4:b6:d6:6d:91:94:ec:af:43:5d:43:14:4c:0a:a6:bd:a3:
8e:0d:0c:a7:c3:fc:75:7e:62:52:08:1f:b6:3b:0b:0a:03:0f:
03:f2:28:f4:fe:df:c6:3e:ad:9f:46:ee:08:0f:2f:57:f0:0a:
71:18:2e:74:8d:99:0f:e3:96:fe:cf:31:d1:1a:e0:23:63:84:
81:dd:f9:4b:f8:5f:ba:62:ae:b0:b4:65:65:ab:63:c4:cd:bf:
24:37:35:21:f9:dd:18:db:72:97:bc:0b:6d:1c:2d:0b:f1:5f:
c3:15:fc:45:91:8c:7a:9c:ec:cc:91:2a:5d:7c:62:a5:21:fd:
f2:45:57:39:73:cf:9c:97:47:c9:cd:77:d1:69:30:b9:4e:44:
e9:84:6b:e2:5b:34:a8:05:c2:7b:89:df:70:55:16:69:11:75:
b8:f3:15:79:79:04:f6:57:04:dd:6c:91:2a:c9:cc:f9:28:13:
65:fb:0f:ae:af:e0:05:70:de:fd:32:17:d5:a3:b9:2a:71:30:
97:39:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:45:49 2026 by rpki-client