Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
File: LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft (raw, json)
Hash identifier: Rx1G43l90h8xstdAuTdZzgtBsKs6sCJZDryXN0sYZKk=
Subject key identifier: C0:83:A0:11:F4:58:1F:1E:1F:99:DF:94:95:B4:21:75:B0:82:86:F1
Authority key identifier: 2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B
Certificate issuer: /CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b
Certificate serial: 01A0C96BB451A3D8F9AC7CB8F08054F64779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
Manifest number: 0381
Signing time: Tue 22 Sep 2026 14:01:13 +0000
Manifest this update: Tue 22 Sep 2026 14:01:13 +0000
Manifest next update: Wed 23 Sep 2026 14:01:13 +0000
Files and hashes: 1: LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl (hash: JNg4HEl+HnDnc8bsxTHIlqJrAVWo4Jk7t5BAnvIh2lM=)
2: RvsaGrjxAX5qao7RR21kXobUgQM.asa (hash: q+rjI9IVipp8g9U0y29NEz+jK3MT4WSsT58lpW7Qlh8=)
3: fQmtrzrbzw4gWBCIWX8LdJFiKEE.roa (hash: 0Cel+oB84KUJsE+NVR0+1YgTW5yxAFtMO6zocsewmpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:b4:51:a3:d8:f9:ac:7c:b8:f0:80:54:f6:47:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b
Validity
Not Before: Sep 22 14:01:13 2026 GMT
Not After : Sep 23 14:01:13 2026 GMT
Subject: CN=c083a011f4581f1e1f99df9495b42175b08286f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:78:71:1f:ad:8f:f3:1f:27:09:a4:68:ee:07:
18:98:ba:5e:48:da:40:30:e2:15:a7:2a:6b:68:9c:
fb:6b:1b:f8:c7:93:d7:2b:2b:89:ca:6a:2a:0f:1e:
59:e3:24:3b:ff:ab:0a:c7:38:de:9f:cc:aa:22:cb:
0b:7b:cd:de:7a:9d:80:35:41:44:7e:8f:41:7e:94:
40:5b:1c:90:47:bb:6c:7b:64:3e:2f:8f:43:3c:f4:
d5:a4:93:da:44:45:e3:52:9d:76:ee:aa:bc:01:e4:
1b:02:6c:8e:21:5f:de:84:ed:16:1c:f8:34:16:5d:
31:d7:64:2a:32:3c:cc:64:bb:fb:be:37:d0:89:ea:
e3:d0:c3:3f:3d:1e:0d:49:9b:5d:8b:6c:9e:9d:59:
9a:d2:be:94:53:f9:fa:bb:2f:4f:0d:9f:26:d6:09:
06:1a:c9:30:8b:8f:28:50:4d:1e:9f:eb:10:9f:20:
e4:75:b0:02:77:22:20:b9:9b:cb:f7:d3:76:38:07:
8f:65:c7:8a:ab:9a:12:12:85:f1:09:2c:b0:51:2b:
41:7e:cf:31:cd:56:c0:81:53:cb:27:70:b0:32:b4:
fb:0c:f1:51:00:24:98:3c:55:43:44:8f:79:1f:2a:
7d:fb:df:1b:de:3f:85:fb:d5:f0:c6:13:94:5a:e3:
4e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:83:A0:11:F4:58:1F:1E:1F:99:DF:94:95:B4:21:75:B0:82:86:F1
X509v3 Authority Key Identifier:
keyid:2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c6:07:ff:3a:cf:e0:fd:44:a2:87:4e:6d:c2:5b:34:09:1c:
76:4c:2d:58:6f:3b:f3:02:07:2e:84:9d:09:19:fb:15:05:59:
99:18:c0:9e:68:0f:0f:a7:70:09:42:7a:19:f6:dd:f6:ec:a7:
91:42:46:25:86:b6:7a:12:a6:5b:ea:aa:d2:42:7d:cd:be:13:
12:05:32:b3:e7:f3:92:b5:8f:3b:2b:51:f3:22:a5:73:77:c1:
6f:22:77:f3:72:66:a4:b2:73:7d:53:61:50:79:43:6f:5d:7f:
06:04:a9:f8:b4:6c:32:b0:e6:08:73:c1:dd:14:1e:fd:dc:5b:
de:3d:f1:b5:8d:f0:18:63:e0:d8:f2:78:36:a9:32:d0:f6:ca:
e7:ee:1c:fd:eb:2c:bf:f4:33:5d:06:b3:1d:a4:0c:92:ac:17:
14:6b:94:b4:55:d7:43:a5:65:e9:79:10:8f:0e:5c:05:95:b4:
ac:e1:73:6a:16:41:dc:be:10:58:0e:ee:ff:02:0d:bf:03:ad:
53:10:67:5c:a9:e7:4d:00:45:86:fe:36:00:e5:11:83:fd:02:
1e:dd:7e:cf:a0:54:06:93:c7:aa:a0:21:34:d6:08:e8:1a:b0:
39:8f:d0:4b:9f:c9:30:27:d8:ad:bf:e3:32:e6:9a:65:92:86:
30:42:ac:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:46:10 2026 by rpki-client