Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
File: ldcL-AoHyf_L7wzYRltFjWE9zIU.mft (raw, json)
Hash identifier: cBAsp2U47fevY4e0QkUxOgU4Avq4otpdKSOLwwzGwT8=
Subject key identifier: 76:48:F2:E4:8C:62:79:BE:DD:EF:2D:8D:85:1D:3E:81:4C:1C:54:8E
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Certificate issuer: /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial: 019D29CE95185A959BAC548148ACACB01F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
Manifest number: 0B68
Signing time: Thu 26 Mar 2026 11:01:37 +0000
Manifest this update: Thu 26 Mar 2026 11:01:37 +0000
Manifest next update: Fri 27 Mar 2026 11:01:37 +0000
Files and hashes: 1: ldcL-AoHyf_L7wzYRltFjWE9zIU.crl (hash: ZNHNxkPtpXYel++rRDWKf0ojRumfZ2WeRSKVAhlhoD8=)
2: u4ERWMg82PqTVt7Gef_SWK-cZGQ.roa (hash: RjVOex1KtOTitdhI4w1UNBYIq1OmgpAnHu9XT16yu5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:95:18:5a:95:9b:ac:54:81:48:ac:ac:b0:1f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Validity
Not Before: Mar 26 11:01:37 2026 GMT
Not After : Mar 27 11:01:37 2026 GMT
Subject: CN=7648f2e48c6279beddef2d8d851d3e814c1c548e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:0d:e5:85:f2:66:92:56:b2:66:66:ad:31:
26:62:c2:c5:85:1d:02:1c:d7:c7:1f:77:93:ff:7d:
eb:99:97:60:f9:57:59:e5:e0:5a:92:07:14:eb:2f:
3f:65:49:74:78:41:2f:3d:7f:af:1c:48:49:40:8d:
a3:47:bb:4a:7e:6e:88:45:72:76:11:c9:fa:4a:ea:
e2:1b:01:16:63:fe:f8:67:b0:55:86:06:c1:38:db:
87:68:9b:19:b5:31:b3:21:4f:ec:00:19:ae:67:e9:
21:67:fb:21:43:a5:53:f0:f7:ae:80:4a:b7:ea:ea:
de:f0:5f:f7:23:cc:f1:87:30:6f:df:b5:8f:33:52:
65:da:2c:45:23:87:83:87:75:b7:b3:55:27:8e:b4:
bf:3f:66:ec:10:8d:a5:90:4a:bb:fb:6b:ce:ac:1c:
9d:e9:63:95:a2:d6:e3:2e:87:70:80:6b:ce:e8:45:
00:63:db:c0:da:83:0f:7b:b5:48:67:ac:0a:a6:e0:
b2:c5:9b:b8:24:12:82:20:45:b8:ad:50:a1:bc:ed:
ee:7c:05:40:e9:87:e5:38:0e:e6:29:97:78:12:00:
a6:0d:9f:94:1a:89:22:66:8a:87:44:b8:82:6f:21:
6c:03:da:21:a8:72:0c:5e:3c:1f:f0:c9:bc:cf:37:
2a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:48:F2:E4:8C:62:79:BE:DD:EF:2D:8D:85:1D:3E:81:4C:1C:54:8E
X509v3 Authority Key Identifier:
keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d8:88:64:08:04:39:ba:0d:22:90:64:ef:61:a2:0b:5f:1d:
f0:08:9e:8e:c6:9e:ae:21:9b:c7:1a:43:09:a5:26:f4:3d:18:
65:c8:fe:df:df:a6:cc:b9:c1:7d:59:3b:77:59:c9:3d:7f:56:
b7:ca:05:62:20:74:f9:db:6c:71:4b:2d:46:ab:78:17:ae:29:
32:20:e0:e4:4d:70:ec:cd:a7:06:4d:30:a7:4c:01:7e:7a:86:
89:b4:67:59:c4:50:a1:7c:a1:a3:3e:df:d0:53:34:48:04:8f:
cb:ae:3b:65:7c:1b:44:6e:98:2a:53:de:d4:ff:ea:88:39:fc:
57:0a:1c:df:67:8f:06:45:da:53:71:1d:60:fc:94:62:49:03:
a8:bb:ca:e7:dd:fa:a3:da:9f:14:dd:35:75:93:68:24:b6:a3:
25:4f:15:f3:c7:f4:3f:06:84:6f:b6:b3:0b:83:28:c7:35:c6:
5b:4a:59:eb:9a:9f:86:0b:a5:c7:0e:e7:6a:c1:e2:6f:6d:b4:
fc:5a:70:18:08:fe:62:9c:82:73:3a:6d:21:8e:c0:da:91:16:
70:9c:cf:40:01:60:7a:9a:ab:66:83:72:06:c4:ce:5c:5b:2a:
84:26:75:b1:08:ff:2c:b1:4e:2d:27:1f:4e:24:2c:b2:f2:59:
04:e2:61:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:52 2026 by rpki-client