Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f87d88-4d7f-4898-a502-892d60bea225/1/LDAdTyasJ2x2gaz8_M2shjwcB_s.mft
File: LDAdTyasJ2x2gaz8_M2shjwcB_s.mft (raw, json)
Hash identifier: ePu9fjbItnS8PQ8dVESAW/TZI0aZE4Fho8G8mXWiFYU=
Subject key identifier: 61:A9:5B:E2:54:92:4A:86:50:07:45:28:56:38:B8:22:0B:D7:DE:DB
Authority key identifier: 2C:30:1D:4F:26:AC:27:6C:76:81:AC:FC:FC:CD:AC:86:3C:1C:07:FB
Certificate issuer: /CN=2c301d4f26ac276c7681acfcfccdac863c1c07fb
Certificate serial: 019D29976D8EC892D7C01F553A44138EF106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDAdTyasJ2x2gaz8_M2shjwcB_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f87d88-4d7f-4898-a502-892d60bea225/1/LDAdTyasJ2x2gaz8_M2shjwcB_s.mft
Manifest number: 019D
Signing time: Thu 26 Mar 2026 10:01:22 +0000
Manifest this update: Thu 26 Mar 2026 10:01:22 +0000
Manifest next update: Fri 27 Mar 2026 10:01:22 +0000
Files and hashes: 1: LDAdTyasJ2x2gaz8_M2shjwcB_s.crl (hash: qmo5rJagkBP9ZkWLZTqSuV2ityTrxt3k6y68hOTH8mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f87d88-4d7f-4898-a502-892d60bea225/1/LDAdTyasJ2x2gaz8_M2shjwcB_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f87d88-4d7f-4898-a502-892d60bea225/1/LDAdTyasJ2x2gaz8_M2shjwcB_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDAdTyasJ2x2gaz8_M2shjwcB_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:6d:8e:c8:92:d7:c0:1f:55:3a:44:13:8e:f1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c301d4f26ac276c7681acfcfccdac863c1c07fb
Validity
Not Before: Mar 26 10:01:22 2026 GMT
Not After : Mar 27 10:01:22 2026 GMT
Subject: CN=61a95be254924a86500745285638b8220bd7dedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:81:ae:dd:42:33:74:70:71:bf:91:75:8b:
cd:97:ab:3d:34:08:8a:62:57:6f:a8:8e:12:11:a1:
04:2e:ea:7b:84:d4:d9:68:fa:78:b7:be:a3:6b:7d:
2a:b7:52:93:a8:50:f1:2a:5f:54:96:c6:cd:1d:08:
2e:82:6f:01:6a:95:9d:0f:f6:9f:00:aa:d7:b7:5b:
15:23:19:51:6a:70:13:3f:6f:ac:f4:3f:7a:9f:2d:
73:9b:c3:a5:2a:a9:a1:d6:15:f8:17:bb:a8:a6:5c:
8c:36:28:3e:eb:d9:d5:1e:db:32:08:15:71:a8:97:
88:57:1a:8c:bd:a6:16:da:b0:9a:3f:f8:63:e2:57:
71:85:0f:9b:2f:0e:bd:22:b9:e4:59:43:74:df:e1:
70:49:36:ab:b1:6f:be:a0:0a:65:6a:4e:53:24:4d:
d8:4d:c4:36:b8:6e:99:0f:96:bd:ab:d5:41:fc:1c:
2a:5c:5c:74:44:73:36:62:84:09:9b:7f:fc:82:5e:
88:73:44:17:a8:ba:be:61:3e:35:f9:51:c7:b3:d3:
e2:6b:55:7b:05:68:b2:a1:c4:81:c2:68:d3:97:3f:
4d:a2:5c:eb:99:4a:5a:32:f0:b8:cc:b7:4f:46:6e:
d1:dc:78:4d:9d:23:75:71:c4:ba:79:40:54:57:bc:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A9:5B:E2:54:92:4A:86:50:07:45:28:56:38:B8:22:0B:D7:DE:DB
X509v3 Authority Key Identifier:
keyid:2C:30:1D:4F:26:AC:27:6C:76:81:AC:FC:FC:CD:AC:86:3C:1C:07:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDAdTyasJ2x2gaz8_M2shjwcB_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f87d88-4d7f-4898-a502-892d60bea225/1/LDAdTyasJ2x2gaz8_M2shjwcB_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f87d88-4d7f-4898-a502-892d60bea225/1/LDAdTyasJ2x2gaz8_M2shjwcB_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ec:98:12:79:fe:30:aa:ac:8a:78:98:2d:56:47:6e:7c:f9:
88:a4:c5:f3:54:f9:52:63:65:04:7d:50:7c:ce:6f:3d:b2:c9:
9a:aa:bf:82:34:f2:bc:dc:0c:f4:41:7a:e0:80:ec:90:c6:82:
4c:a3:3f:df:e3:c6:90:7e:50:79:de:30:b0:17:47:8d:7f:64:
1c:59:3c:66:a2:9e:da:2f:16:82:4d:e1:1e:16:02:22:cd:a6:
ce:b3:a5:ba:ed:db:47:f7:66:5f:d4:6b:4e:cf:7d:0d:a9:c0:
35:5c:76:b6:c1:9d:34:3b:58:20:24:aa:b3:4b:c5:57:8d:94:
1a:10:b0:a1:db:fe:53:79:78:72:fa:27:1b:ae:1c:89:7f:34:
1e:2c:a6:e4:9a:b7:55:1a:26:d1:aa:54:1b:00:a0:4e:1d:ac:
85:8c:e2:e3:89:fa:3a:08:8b:92:67:23:64:d1:46:dc:22:aa:
2c:c5:b5:65:60:d7:23:8a:19:85:b1:bb:9d:9c:33:91:ae:06:
e9:64:63:90:e5:bd:8c:5c:09:81:76:77:49:7e:ed:8d:5e:29:
5b:c2:23:73:8e:ac:6b:88:2e:7e:6b:c9:2e:2c:d9:e4:e6:78:
38:01:23:26:46:44:cc:8d:4d:22:b7:65:9d:02:ee:f2:5d:00:
ac:00:6f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:23 2026 by rpki-client