Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
File: LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft (raw, json)
Hash identifier: QDNAW8hjxDQWgD28gpffsnf6AQ2X3yKKDgsOxHjcTH4=
Subject key identifier: F8:1F:2B:8B:68:7A:3A:0A:D4:96:7F:11:F0:0F:E8:3E:F2:D1:0A:1F
Authority key identifier: 2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B
Certificate issuer: /CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b
Certificate serial: 019E1F4833A60E2FF30D6FEBFA43139DF044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
Manifest number: 021F
Signing time: Wed 13 May 2026 03:01:25 +0000
Manifest this update: Wed 13 May 2026 03:01:25 +0000
Manifest next update: Thu 14 May 2026 03:01:25 +0000
Files and hashes: 1: LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl (hash: JdRBH1YEztc0+NhFsnwFU59Mz/TbvrgI1+MjspYucUU=)
2: RvsaGrjxAX5qao7RR21kXobUgQM.asa (hash: q+rjI9IVipp8g9U0y29NEz+jK3MT4WSsT58lpW7Qlh8=)
3: XGNPOjmgdTFuH0d_BqCPt5RDDjY.roa (hash: Yzmgyo+pVHv+AN+UC1lB8YlcAzsH4KJR08k7WUnfwVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:33:a6:0e:2f:f3:0d:6f:eb:fa:43:13:9d:f0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b
Validity
Not Before: May 13 03:01:25 2026 GMT
Not After : May 14 03:01:25 2026 GMT
Subject: CN=f81f2b8b687a3a0ad4967f11f00fe83ef2d10a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:2b:ce:53:63:28:c0:62:f4:b6:8e:37:83:
9c:46:07:76:21:cb:25:cf:51:da:78:77:e5:31:7c:
2e:3c:6e:7c:dc:a1:df:6e:70:fd:f8:b0:8c:88:dc:
43:b5:0f:7e:3c:57:05:dc:3f:2d:a3:dd:d1:a1:8c:
df:e1:20:26:4d:b3:63:d2:90:fd:d0:cc:b9:4f:d5:
b8:27:20:af:a5:4e:93:9a:61:54:dd:1c:13:af:b3:
de:f7:30:fd:7f:97:f1:0d:f1:ec:7c:ef:de:3f:6f:
91:04:05:04:60:22:43:98:b9:2d:55:a0:8a:f5:3b:
4b:fa:76:65:66:61:2b:ba:bc:e0:bd:51:1f:ae:41:
68:5d:77:43:6a:23:3f:f7:e2:6d:9c:72:a2:0b:af:
be:38:40:32:9c:40:c7:ed:59:c8:04:8c:43:ff:1e:
c1:1f:b2:98:5e:36:47:f8:3f:64:12:c2:52:2b:83:
b8:ec:2b:d3:06:25:80:af:b1:09:82:cc:ee:20:2f:
14:e7:f9:bd:52:aa:81:67:cb:a6:ba:52:1c:fd:e1:
74:c2:e6:bd:f8:df:21:9b:be:25:17:4b:6a:52:00:
1e:f7:78:8d:e6:14:bd:95:53:31:56:ec:38:83:8b:
93:d8:20:47:4d:16:6a:f0:cc:28:f9:26:cb:be:5a:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1F:2B:8B:68:7A:3A:0A:D4:96:7F:11:F0:0F:E8:3E:F2:D1:0A:1F
X509v3 Authority Key Identifier:
keyid:2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0f:ff:12:e0:e5:27:c4:1f:5d:90:0b:85:a4:43:88:b3:3f:
cf:09:8e:eb:4d:38:14:78:3b:12:17:58:b3:f4:fb:cd:c7:65:
74:c0:0b:37:ec:93:ab:d3:a7:0d:99:0d:6c:dd:47:c3:cf:c7:
3e:39:99:34:f0:43:6a:b7:c8:36:11:20:df:41:93:e1:80:8a:
61:6c:74:d0:75:3b:5d:7e:8c:22:aa:8a:25:3f:39:f8:31:14:
71:29:78:b4:df:d0:09:55:90:8f:1e:43:5e:2e:2a:11:d6:6d:
6a:f6:8e:25:66:f4:4e:f4:b8:74:a7:68:1f:1f:1a:c9:9f:01:
e4:fa:b7:ae:89:13:ca:e8:ba:56:4c:88:9c:60:ae:cc:f0:0c:
2e:e6:47:32:7d:89:82:e9:f6:8c:eb:da:a2:08:96:16:ea:39:
11:84:11:f9:cd:18:33:a5:92:e0:c1:94:b0:73:76:80:72:17:
87:94:5d:24:a9:9b:24:82:cd:24:34:61:d4:72:d5:ae:16:5e:
4b:23:4c:55:bb:9c:da:db:4e:61:7c:4d:5e:78:1a:27:be:ec:
7c:d5:e6:e3:35:ca:22:dd:0b:66:8d:3b:1b:43:9d:05:53:72:
e0:9e:67:e0:f8:88:2e:36:96:db:19:ae:2f:38:2c:f4:80:c5:
2c:76:5e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:55:32 2026 by rpki-client