Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
File: LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft (raw, json)
Hash identifier: puWaDwMajDe1CuWY9uIXoteS3fV4of5kO4cw4PJe1i4=
Subject key identifier: 68:DF:D7:A3:1D:66:EE:05:D4:B6:40:69:FE:1B:D2:18:A3:52:76:E6
Authority key identifier: 2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B
Certificate issuer: /CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b
Certificate serial: 019D2627FD079A752DCDA1642C32372381C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
Manifest number: 019E
Signing time: Wed 25 Mar 2026 18:00:48 +0000
Manifest this update: Wed 25 Mar 2026 18:00:48 +0000
Manifest next update: Thu 26 Mar 2026 18:00:48 +0000
Files and hashes: 1: LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl (hash: 29duYWo+aqAFOXn+39Y1Qt+4GoLZS9kyredqyq7+IQM=)
2: RvsaGrjxAX5qao7RR21kXobUgQM.asa (hash: q+rjI9IVipp8g9U0y29NEz+jK3MT4WSsT58lpW7Qlh8=)
3: XGNPOjmgdTFuH0d_BqCPt5RDDjY.roa (hash: Yzmgyo+pVHv+AN+UC1lB8YlcAzsH4KJR08k7WUnfwVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:fd:07:9a:75:2d:cd:a1:64:2c:32:37:23:81:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b
Validity
Not Before: Mar 25 18:00:48 2026 GMT
Not After : Mar 26 18:00:48 2026 GMT
Subject: CN=68dfd7a31d66ee05d4b64069fe1bd218a35276e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:9c:d6:fb:b5:31:5e:f6:65:88:5a:fb:7f:
d8:86:c0:1d:de:27:30:8f:bc:c0:8e:21:67:22:4f:
a9:5b:40:65:f5:7b:8b:06:1e:bd:a1:16:9d:1a:88:
78:0c:1c:aa:a5:b2:2c:1c:33:e7:1a:ba:d7:f0:e0:
d6:6b:d0:05:c6:ce:cc:02:63:1e:4e:18:51:99:92:
59:45:7c:50:92:9e:bb:3a:ad:67:ba:be:f1:1e:dd:
7e:08:95:96:8c:a9:4c:89:49:04:33:00:fc:96:0a:
0a:86:5d:35:fc:54:4a:bf:43:e3:02:8d:c9:3b:8c:
4c:e4:14:eb:17:15:e4:07:84:1e:72:1b:1d:78:9a:
49:e7:62:98:87:d1:7d:54:79:a2:55:b1:2c:ab:53:
8b:2c:b2:25:7c:5b:20:b5:d7:93:fc:13:c2:e1:ce:
f4:7b:f1:4a:da:ab:64:22:e7:38:78:b4:8b:20:08:
77:25:23:d3:f1:88:d6:b8:3c:ca:aa:26:3f:1d:81:
e2:5d:91:63:33:a1:65:bc:a7:f4:24:07:63:11:04:
62:af:f8:51:07:4f:de:9e:36:00:a1:6e:8e:64:86:
2a:f7:49:0b:97:ac:9d:cb:39:6f:d2:3b:d3:fe:90:
bb:24:8e:cb:5a:90:e6:dd:65:fd:86:b1:06:0f:30:
a3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DF:D7:A3:1D:66:EE:05:D4:B6:40:69:FE:1B:D2:18:A3:52:76:E6
X509v3 Authority Key Identifier:
keyid:2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d6:b5:aa:a2:d9:55:ff:2d:12:a3:ce:ea:77:44:de:4e:33:
b2:f9:64:6e:7e:e5:5e:85:8d:84:ef:06:22:83:ae:5d:61:4f:
02:0a:e9:ef:da:31:78:f1:d6:a1:6d:e0:9c:a1:e9:24:bf:3e:
fe:86:94:94:6b:c5:67:81:93:1a:68:8f:59:27:99:e1:91:8b:
83:92:9a:ca:cd:4c:ec:c6:66:01:de:c1:8a:f5:42:3e:be:16:
a5:c1:4e:57:7e:74:9d:93:4d:19:82:00:8f:a2:d9:0e:f2:99:
43:78:91:55:0b:10:88:67:32:57:db:9e:59:eb:ad:b5:ae:b5:
44:70:fe:84:65:15:a2:b4:94:3c:0c:94:62:e6:fb:a3:05:46:
10:ef:73:72:ce:55:b8:2d:e1:7c:fb:7f:5c:66:4f:5c:7f:a1:
36:11:17:37:b0:e8:10:35:fe:c9:58:2f:0d:87:3d:fe:ff:88:
f7:9c:09:a7:4e:14:36:bf:71:6b:ea:d1:73:98:c2:e3:ad:01:
f0:d5:dd:a6:db:0c:18:09:23:5b:c6:25:90:16:5a:40:d3:6c:
d8:08:71:6a:d0:78:da:05:67:2e:4e:14:24:29:81:ce:b2:e7:
ec:24:2e:0b:be:b4:e2:4a:95:1a:39:33:d3:00:4d:c2:e5:7f:
d0:53:ef:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mJ/0HmnUtzaFkLDI3I4HEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZDVlYTNjNzUzMGZkMDhjMjk5ZDgwODc1M2Y0N2I4ZGZi
ODRlMGIwHhcNMjYwMzI1MTgwMDQ4WhcNMjYwMzI2MTgwMDQ4WjAzMTEwLwYDVQQD
Eyg2OGRmZDdhMzFkNjZlZTA1ZDRiNjQwNjlmZTFiZDIxOGEzNTI3NmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmqc1vu1MV72ZYha+3/YhsAd3icw
j7zAjiFnIk+pW0Bl9XuLBh69oRadGoh4DByqpbIsHDPnGrrX8ODWa9AFxs7MAmMe
ThhRmZJZRXxQkp67Oq1nur7xHt1+CJWWjKlMiUkEMwD8lgoKhl01/FRKv0PjAo3J
O4xM5BTrFxXkB4QechsdeJpJ52KYh9F9VHmiVbEsq1OLLLIlfFsgtdeT/BPC4c70
e/FK2qtkIuc4eLSLIAh3JSPT8YjWuDzKqiY/HYHiXZFjM6FlvKf0JAdjEQRir/hR
B0/enjYAoW6OZIYq90kLl6ydyzlv0jvT/pC7JI7LWpDm3WX9hrEGDzCjzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjf16MdZu4F1LZAaf4b0hijUnbmMB8GA1UdIwQY
MBaAFC3V6jx1MP0IwpnYCHU/R7jfuE4LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGRYcVBIVXdfUWpDbWRnSWRUOUh1Ti00VGdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xZmEwMzgtMzFjZS00YTJlLTlkNDUt
ZmVmMjRjMzk1ZjkxLzEvTGRYcVBIVXdfUWpDbWRnSWRUOUh1Ti00VGdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xZmEwMzgtMzFjZS00YTJlLTlkNDUtZmVmMjRjMzk1Zjkx
LzEvTGRYcVBIVXdfUWpDbWRnSWRUOUh1Ti00VGdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAida1qqLZ
Vf8tEqPO6ndE3k4zsvlkbn7lXoWNhO8GIoOuXWFPAgrp79oxePHWoW3gnKHpJL8+
/oaUlGvFZ4GTGmiPWSeZ4ZGLg5Kays1M7MZmAd7BivVCPr4WpcFOV350nZNNGYIA
j6LZDvKZQ3iRVQsQiGcyV9ueWeutta61RHD+hGUVorSUPAyUYub7owVGEO9zcs5V
uC3hfPt/XGZPXH+hNhEXN7DoEDX+yVgvDYc9/v+I95wJp04UNr9xa+rRc5jC460B
8NXdptsMGAkjW8YlkBZaQNNs2AhxatB42gVnLk4UJCmBzrLn7CQuC7604kqVGjkz
0wBNwuV/0FPvWA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:48:16 2026 by rpki-client