Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
File: LdrykZbO5YxjJjDwK-69C1p1qdk.mft (raw, json)
Hash identifier: 3pEVEBfRFalrlwzk9gHpKcaAiPkaRQAEbDjZnJzsMt4=
Subject key identifier: 11:3E:CE:0C:37:7F:49:76:1C:1C:EF:02:53:8F:06:59:4E:9A:91:8C
Authority key identifier: 2D:DA:F2:91:96:CE:E5:8C:63:26:30:F0:2B:EE:BD:0B:5A:75:A9:D9
Certificate issuer: /CN=2ddaf29196cee58c632630f02beebd0b5a75a9d9
Certificate serial: 019D3866367F507C26C006FB623458363B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdrykZbO5YxjJjDwK-69C1p1qdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
Manifest number: 031E
Signing time: Sun 29 Mar 2026 07:01:55 +0000
Manifest this update: Sun 29 Mar 2026 07:01:55 +0000
Manifest next update: Mon 30 Mar 2026 07:01:55 +0000
Files and hashes: 1: LdrykZbO5YxjJjDwK-69C1p1qdk.crl (hash: GLPOa514tInegoaPmZllADovJYrHotCxS0fNLCMtQv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdrykZbO5YxjJjDwK-69C1p1qdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:36:7f:50:7c:26:c0:06:fb:62:34:58:36:3b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddaf29196cee58c632630f02beebd0b5a75a9d9
Validity
Not Before: Mar 29 07:01:55 2026 GMT
Not After : Mar 30 07:01:55 2026 GMT
Subject: CN=113ece0c377f49761c1cef02538f06594e9a918c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:01:f6:ac:18:e5:f2:af:62:a0:67:72:6a:
1c:c5:16:90:ad:3e:85:d0:4e:55:81:2b:a9:1f:0c:
59:33:ae:75:4d:1b:82:b4:d3:da:33:02:a0:d1:ed:
82:a4:c1:10:aa:83:98:14:96:97:0c:76:c7:2e:be:
84:3a:7d:03:02:9e:a5:d1:8b:63:e8:76:5c:1f:66:
c4:cd:0b:c8:30:ac:ff:98:2f:c4:2a:be:f2:60:f9:
6b:7a:eb:b0:d7:5d:92:22:a8:e8:8f:30:74:f7:7a:
c6:4c:95:0f:8f:f0:db:07:47:6c:36:a6:bf:8c:a2:
e3:fb:5f:de:a6:d8:f4:dc:93:b8:36:11:97:5e:ab:
21:8c:5e:47:30:73:65:0f:4e:66:65:46:77:31:c8:
32:bb:6f:9e:cb:b0:65:04:3d:76:82:76:29:51:80:
00:33:ff:90:77:18:1b:cb:6c:f0:36:a0:c3:0d:84:
99:34:35:07:07:56:5b:1d:bc:ba:f1:0b:34:e4:2d:
a4:b7:99:7a:7e:de:9b:c2:67:17:5b:7e:22:4b:7f:
29:5c:31:93:6a:66:72:f2:0f:cc:4c:fe:73:d3:54:
a6:66:c6:e4:a5:87:ca:85:f6:14:b7:8a:f2:c8:00:
07:87:aa:d9:2a:83:cb:26:65:59:28:ff:b2:18:8d:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3E:CE:0C:37:7F:49:76:1C:1C:EF:02:53:8F:06:59:4E:9A:91:8C
X509v3 Authority Key Identifier:
keyid:2D:DA:F2:91:96:CE:E5:8C:63:26:30:F0:2B:EE:BD:0B:5A:75:A9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdrykZbO5YxjJjDwK-69C1p1qdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:70:5d:61:4a:5b:57:f4:80:a3:13:57:43:b6:73:83:82:6c:
d0:a3:bc:62:ae:35:d4:97:7d:8d:e6:d7:e5:36:f1:8d:e2:1f:
a4:53:cd:9c:94:8c:d8:e4:19:17:5c:f9:b8:00:9f:3d:e1:8a:
d7:49:ee:31:02:b0:93:3d:79:ca:e5:2e:d7:f2:ea:52:08:a4:
a0:84:5a:ac:64:a4:5d:da:9c:d3:1d:95:68:11:f8:96:e7:98:
df:62:53:09:92:ab:11:a3:9c:65:b2:80:bd:80:6a:9c:f0:7d:
bf:0d:e0:0a:ce:00:d2:1d:ab:92:47:69:e9:aa:be:9d:9b:d9:
f3:d9:8a:57:26:27:f4:b1:ea:8d:33:c1:7b:d6:28:7d:32:ad:
fc:30:5d:22:61:74:5b:93:2a:3a:47:bb:c5:58:27:a9:42:8d:
62:78:58:e4:55:c9:79:3d:9a:54:2b:0d:fd:36:d5:83:f1:4e:
40:31:02:92:18:59:a9:06:9b:77:74:f2:c7:c9:f2:80:6b:2d:
e9:0a:c1:3a:59:2e:d6:d8:fd:aa:91:82:c1:b9:11:1f:b5:95:
ff:bc:81:af:48:e1:e6:28:f5:f7:f6:f1:65:0d:1d:c2:54:3b:
c2:08:b1:06:26:c6:17:02:fc:41:35:6b:36:cc:58:d7:ce:20:
6a:27:b8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:50:56 2026 by rpki-client