Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
File: ldcL-AoHyf_L7wzYRltFjWE9zIU.mft (raw, json)
Hash identifier: 2E3Za4K54wK1VL4xcK3sLb2cKjWcnCZMqIPhBU341TU=
Subject key identifier: 48:F7:06:5D:30:95:BF:D4:49:96:93:F7:F0:17:26:C7:A2:DC:21:A8
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Certificate issuer: /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial: 01A136A38CBB02251AE212AB19C317A716B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
Manifest number: 0D87
Signing time: Tue 13 Oct 2026 19:00:50 +0000
Manifest this update: Tue 13 Oct 2026 19:00:50 +0000
Manifest next update: Wed 14 Oct 2026 19:00:50 +0000
Files and hashes: 1: BvAkaqIQMJfGpSIttKYw6u69UsY.roa (hash: HljiF1YNJTd/GJX5JhDeq7KwVETiH5Pa6f/ONTU55h8=)
2: VjaB08Ql0W9-r77gR-3DY__Jy88.roa (hash: YVfg6l74ML3q0VN2MwFzeG3ePk+gbLJopMwK+Q2eXHg=)
3: ldcL-AoHyf_L7wzYRltFjWE9zIU.crl (hash: niI3g7G7PZYbTf30ipk3QKGL/BBBx9EPccPzqiVX2XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:a3:8c:bb:02:25:1a:e2:12:ab:19:c3:17:a7:16:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Validity
Not Before: Oct 13 19:00:50 2026 GMT
Not After : Oct 14 19:00:50 2026 GMT
Subject: CN=48f7065d3095bfd4499693f7f01726c7a2dc21a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:24:98:ed:fc:d5:63:1c:ac:93:4e:b3:c9:
6c:a5:5d:2f:0b:80:6c:81:45:b6:e8:57:e5:75:57:
81:6d:b5:7b:b0:84:f3:7a:ee:bb:2f:58:79:e7:65:
18:76:ba:f5:34:cb:ba:1e:ec:8b:9f:9b:2e:9e:82:
19:88:19:b1:e7:95:3f:28:f0:0c:35:b6:76:d8:28:
10:9e:aa:d4:8f:48:ea:60:c1:a1:a1:8e:8f:a3:b5:
2f:bb:ac:b6:3d:6b:5c:94:87:16:8a:34:61:45:05:
c5:bc:f8:7e:93:da:f4:32:8b:f1:56:89:f7:fd:b9:
f7:ad:f3:c6:27:8c:7d:e8:e0:e2:a2:09:ef:44:c1:
53:a1:c9:a0:5e:b9:0d:4d:c9:ae:6b:69:0e:97:69:
d2:d9:e0:e1:31:35:29:8c:f4:65:d9:1f:37:7c:49:
7f:f5:fa:34:c2:5d:62:98:ad:be:3e:cf:25:f4:70:
63:68:9f:46:46:52:3f:36:13:3f:cf:ea:58:23:a7:
d5:7a:14:10:c2:45:14:05:e0:22:17:93:55:3c:76:
f9:0a:a4:8e:bf:9c:64:ad:dd:0f:e8:9f:db:df:25:
89:35:5b:db:8b:b0:60:eb:74:61:b4:c9:3a:64:5b:
78:8c:c4:3e:f7:a6:3f:37:32:f0:a5:e8:db:10:23:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F7:06:5D:30:95:BF:D4:49:96:93:F7:F0:17:26:C7:A2:DC:21:A8
X509v3 Authority Key Identifier:
keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:85:7f:cb:06:8d:f8:d4:65:4b:0b:e7:fa:0e:60:44:23:17:
19:a4:26:d3:9f:a0:8c:5a:61:49:a1:2b:46:83:99:b4:43:9b:
79:08:36:a1:6b:97:2e:15:bc:83:f8:f8:64:92:e1:a4:a7:50:
c5:93:36:f1:23:d8:dc:ee:ff:9a:bb:14:fb:1d:52:5d:16:c0:
f4:ce:69:a8:3f:42:e1:43:cc:b5:57:73:87:ef:3c:9a:45:4d:
22:1b:d0:32:e2:f0:3c:24:cf:0f:a9:4e:d7:0d:e3:34:d4:8c:
28:90:fa:ff:74:e1:ed:0e:67:ed:bf:4c:3a:6c:0f:df:da:db:
9d:59:54:fd:0f:94:19:16:f7:f5:9b:f0:b7:29:f2:68:54:f9:
54:cf:d4:98:a4:8a:aa:76:69:15:09:3f:1e:25:cf:0f:9c:89:
4b:32:f0:7a:d7:b0:e4:23:86:77:b0:5a:54:20:ae:64:ae:f8:
40:8e:22:14:4b:f9:75:a2:9c:c1:76:1d:be:46:44:2d:d8:d6:
f4:27:f4:40:ab:49:b5:80:2d:49:7d:28:17:fe:54:1d:c9:23:
66:80:14:ae:45:9e:e5:a5:a7:e4:63:2a:1e:09:79:09:1d:4d:
28:ba:82:69:68:d8:30:3e:3d:33:c6:07:ca:d9:ac:16:f8:3e:
f5:40:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:08:03 2026 by rpki-client