Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
File: ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json)
Hash identifier: F/kaaqDgCYgWHuiXGqu6UtJ+vO+kGkhL0/Orwjqo8QI=
Subject key identifier: 00:90:8D:FA:CE:3D:CB:C5:3C:A2:9F:2A:4A:03:78:08:D0:12:4F:34
Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
Certificate issuer: /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Certificate serial: 019D265EE871914BCCA53138E653A642E7F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 19:00:47 +0000
Manifest this update: Wed 25 Mar 2026 19:00:47 +0000
Manifest next update: Thu 26 Mar 2026 19:00:47 +0000
Files and hashes: 1: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: v5zZ1rP8yeTC9tlncEPKDbwQsvatgDa91cEFxV7wAZc=)
2: rMVZ8VNrAbOr1spmw2IgJ5BytdA.roa (hash: tTo1sNFXQgwbOz3Qzxrcjf5177mm498Fb+OqdLzuw6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:e8:71:91:4b:cc:a5:31:38:e6:53:a6:42:e7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Validity
Not Before: Mar 25 19:00:47 2026 GMT
Not After : Mar 26 19:00:47 2026 GMT
Subject: CN=00908dface3dcbc53ca29f2a4a037808d0124f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:f0:b7:26:dd:a2:67:3b:90:27:01:3b:09:
4b:ee:83:a6:0a:1d:bc:d0:a3:8e:cc:4c:44:bb:55:
8c:7b:5e:4d:d7:97:87:4c:63:29:7a:95:1f:99:72:
97:59:ed:84:dd:bc:21:60:45:06:1c:e2:05:26:be:
04:f0:e8:67:b2:04:60:74:c9:f5:63:44:8b:e9:01:
eb:bb:4b:82:68:75:2b:ba:40:30:7d:5f:62:db:77:
eb:d9:ed:54:4d:1f:29:3f:15:d6:5e:14:0a:16:e0:
ac:69:9a:3f:01:1e:a7:62:cc:3c:5f:2c:46:19:2e:
58:cb:a7:16:e8:87:7c:4e:d8:be:90:59:a5:42:c3:
90:74:fc:b5:92:51:c9:fe:be:36:d8:e8:15:d1:bb:
6f:22:41:5f:8f:c5:08:b7:6a:fb:ac:f4:07:b3:30:
aa:f4:28:ca:70:c2:ef:59:1d:5c:b6:96:fa:3f:04:
2c:c8:77:27:e8:b7:0a:9c:de:87:1e:15:13:3f:50:
c0:8f:50:0e:18:ff:12:02:02:6b:94:ab:aa:3e:a3:
99:e6:2c:bd:13:e3:fb:e9:ef:98:fa:ca:35:b9:65:
fb:4a:23:e5:f0:f9:9f:cc:f7:78:38:47:b4:96:96:
59:84:d0:95:54:a2:07:d5:69:b5:84:be:f6:dd:5b:
b4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:90:8D:FA:CE:3D:CB:C5:3C:A2:9F:2A:4A:03:78:08:D0:12:4F:34
X509v3 Authority Key Identifier:
keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:dd:e7:3f:87:d9:af:96:ea:d7:3c:84:25:75:fb:5f:11:9c:
15:f2:fa:bc:23:d8:51:4a:47:4e:f8:61:b3:d9:bb:6f:3a:b8:
74:cb:53:0d:05:a6:0a:b7:fd:68:e9:ab:22:30:d3:63:8a:8e:
91:b4:cc:17:8a:c2:6f:46:b3:ae:a2:df:1d:aa:16:90:9f:0d:
1b:49:ad:df:8a:59:ee:22:d1:e3:9a:e0:7d:e9:75:b6:de:4f:
37:af:95:9f:16:db:69:0b:96:3d:20:02:17:01:dc:29:d2:ff:
03:aa:ba:11:41:4e:6f:b7:c0:f9:17:cc:dd:e4:ad:62:dd:5f:
75:d3:aa:e7:fe:06:97:16:82:ca:55:53:a4:58:a8:c5:0b:c2:
d3:b9:ab:60:7f:a7:87:bd:a8:65:c3:30:b7:82:a2:73:f3:d5:
72:eb:5c:06:04:60:f3:57:3c:0b:eb:03:50:d4:ea:52:8d:8b:
54:b7:9f:66:f1:67:41:76:c8:2e:66:8b:d2:1a:81:f4:ac:be:
75:4a:8e:0f:57:9e:aa:e5:70:46:35:53:7b:13:7e:2f:0e:9d:
4f:fe:fb:0f:f7:63:da:b0:1b:2a:cc:a6:80:c4:b5:92:d0:3f:
57:9e:ec:e8:55:53:d6:cd:dd:ed:a3:0c:18:db:11:12:45:a8:
3e:bc:e8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:47:52 2026 by rpki-client