Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft
File: Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft (raw, json)
Hash identifier: lNn0uAjhncmn9fuKomjndbiz9jRby7iQ6r6svU/j198=
Subject key identifier: 0F:BA:8A:F3:BF:EA:B2:0B:FA:B1:A9:A0:D2:04:CF:14:3A:18:C3:A9
Authority key identifier: 2E:E7:65:F6:13:D0:F2:58:55:59:86:ED:8C:C1:8A:A2:D8:18:25:0F
Certificate issuer: /CN=2ee765f613d0f258555986ed8cc18aa2d818250f
Certificate serial: 019F935B4C06417EEE299AF7E99C168063C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:01 +0000
Manifest this update: Fri 24 Jul 2026 09:01:01 +0000
Manifest next update: Sat 25 Jul 2026 09:01:01 +0000
Files and hashes: 1: AtDiavwmONmfcR6PyPSX1Y3q72M.roa (hash: 645rqeq+3xwCJ+dLSr46LUrzfMC+zVPjHY0f0QIzQr8=)
2: Ludl9hPQ8lhVWYbtjMGKotgYJQ8.crl (hash: tAnDCL3O4eCgSUZ7telllKI3OlOkLoBnJkfZu1ZRzrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:4c:06:41:7e:ee:29:9a:f7:e9:9c:16:80:63:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee765f613d0f258555986ed8cc18aa2d818250f
Validity
Not Before: Jul 24 09:01:01 2026 GMT
Not After : Jul 25 09:01:01 2026 GMT
Subject: CN=0fba8af3bfeab20bfab1a9a0d204cf143a18c3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b0:6b:34:d2:0f:69:bd:8f:f4:8f:2a:eb:21:
c6:7b:f6:6f:66:35:bf:df:b9:92:77:c8:7f:83:20:
90:fa:49:8e:cd:7a:22:29:bc:36:81:a5:2f:bc:ef:
f4:ea:b9:af:6c:19:a0:56:cc:9f:49:19:fa:b1:24:
fe:0e:55:40:c2:9a:17:23:02:48:90:c2:da:61:4f:
2b:6a:30:5a:98:89:be:ed:3f:c1:44:c1:1c:42:1b:
47:c7:f9:2c:1a:1b:96:ad:35:65:91:1f:6e:f9:ca:
9b:50:f1:11:76:17:00:7c:fa:94:71:07:df:5c:fe:
76:aa:c2:3f:b1:c0:3a:e7:14:a6:d0:a6:84:62:0b:
3b:80:fb:81:7a:58:94:bf:30:37:4d:7c:a0:bc:1f:
6c:57:f7:2d:c9:e5:62:a3:46:fe:38:5a:b9:28:04:
a9:78:cf:0c:1e:18:da:9b:1a:41:08:70:a7:99:db:
c0:3d:9e:0b:48:fb:57:dd:63:70:0f:36:78:64:58:
35:02:ff:75:19:a0:f9:5d:90:09:7b:da:4f:6e:05:
66:18:dc:09:f0:ce:84:0a:d0:9a:32:60:c1:dc:05:
f6:11:79:df:e5:66:a9:64:ef:fd:dd:2e:12:5a:13:
6b:05:1e:77:7a:8a:7e:03:4e:be:e1:8f:f4:50:70:
e8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BA:8A:F3:BF:EA:B2:0B:FA:B1:A9:A0:D2:04:CF:14:3A:18:C3:A9
X509v3 Authority Key Identifier:
keyid:2E:E7:65:F6:13:D0:F2:58:55:59:86:ED:8C:C1:8A:A2:D8:18:25:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:38:7a:57:17:2a:4f:78:9e:d9:4e:08:cb:8a:dd:9d:a3:c8:
28:d7:43:af:99:1c:20:ae:56:a3:fd:00:32:67:c4:98:68:3e:
b1:c5:65:99:e4:02:2f:35:9a:b7:8b:1f:99:f3:3c:c6:3a:f5:
93:26:3f:a2:04:c2:44:a6:44:49:c2:a5:3a:ee:24:a0:77:fd:
0b:08:a7:3c:0e:de:7c:73:09:c5:15:d0:ed:4f:cf:f7:af:ab:
fa:e3:12:79:e2:1a:23:5b:eb:f9:7a:dc:b1:91:9e:fc:98:48:
82:38:71:71:7b:47:ae:f8:2b:b0:c3:1a:5d:97:b0:aa:03:16:
18:ac:85:f3:42:db:03:fb:15:63:a7:e1:c0:90:7c:4e:57:aa:
31:cc:18:62:bd:24:2a:56:53:ee:c7:f4:69:5b:d3:6f:a4:9a:
96:4e:12:4b:e8:bd:2b:a8:56:0e:d8:8f:a4:5b:4f:5b:74:24:
d0:e7:e2:c7:99:79:71:30:0f:5f:0e:4b:de:9f:f6:69:fa:81:
31:be:61:1a:36:46:3b:d6:d4:ea:c8:97:cc:85:16:56:be:84:
0d:90:d5:c4:be:53:a9:6b:44:88:39:ed:f8:d7:86:ab:02:26:
bc:50:44:2d:31:89:27:0c:3e:14:2d:64:f7:1e:cb:9c:6a:35:
ac:38:ac:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:16:04 2026 by rpki-client