
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
File: LDsK5bf3gRIscJomUK35cpGH4eE.mft (raw, json)
Hash identifier: eVS0bTpF6nUrGex/lMVlgkYZFYiQkxbAoNZI/8tAGto=
Subject key identifier: D1:F4:C8:35:9A:D8:75:8C:87:EA:51:44:7E:7E:F8:6D:C9:89:AD:E0
Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
Certificate issuer: /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Certificate serial: 019CE6DAF9FDAA2619F155C7F9AE6682246E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
Manifest number: 1868
Signing time: Fri 13 Mar 2026 11:00:36 +0000
Manifest this update: Fri 13 Mar 2026 11:00:36 +0000
Manifest next update: Sat 14 Mar 2026 11:00:36 +0000
Files and hashes: 1: 84vd5jFW7nOmlqfDw_xa2JGg7Bg.roa (hash: rNTsCrnkBSEotffzabMsfyCIf6z9oVHssU96RenS0Ts=)
2: LCzOtBHmWZH3LMf19Tv6iZ3PyAA.roa (hash: ok1BqU/j817hL0rg14Y5eXLHkWWn2Jj6wQeonBm4dcs=)
3: LDsK5bf3gRIscJomUK35cpGH4eE.crl (hash: BynRmMupS3haoIYlc5h55Wah+UyykVN+9+WjlLdHoh8=)
4: MBwRKSHfxRIenZ6VTtp6s77mU-g.roa (hash: ZUftLriouLT0rVggX9Wl5+VKJOkkEmSY4zXobVbg1VA=)
5: XIo_9-qFy5wjas20w7MdEaNT8T8.roa (hash: mjSD46sU4dPzZBYqQEdjYI8aGEpVPeI7VUJMRwMVNGY=)
6: aZBPshcpYuW3uiPNklELJKpWxB0.roa (hash: FDs/jppjg3SFmpeDxF8pcdK8smBMdmkqoES9cLDqS0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:da:f9:fd:aa:26:19:f1:55:c7:f9:ae:66:82:24:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Validity
Not Before: Mar 13 11:00:36 2026 GMT
Not After : Mar 14 11:00:36 2026 GMT
Subject: CN=d1f4c8359ad8758c87ea51447e7ef86dc989ade0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7f:04:53:71:94:36:fc:27:f2:cb:fd:78:da:
4f:19:21:32:1e:1d:3c:5c:72:a0:6e:06:22:f7:80:
20:4c:9c:b5:20:d9:dc:13:05:36:39:d6:8d:43:fe:
36:1d:1e:f9:38:ef:59:bf:a2:da:bb:3e:8a:36:de:
cb:c5:9f:8b:73:4b:db:0d:8a:6a:83:4d:c6:d9:5d:
db:62:74:97:c6:0e:1f:31:38:19:b8:67:d6:78:23:
d6:1b:fc:7c:b9:5b:6b:80:17:df:cd:21:b1:4b:96:
83:4d:39:b2:d0:d7:04:73:fe:9b:e1:27:f2:7e:1a:
49:4d:83:f7:8f:35:8f:c8:ce:47:f6:ed:6d:c3:5e:
7d:47:09:42:e6:44:c9:b0:0e:8a:d8:17:f1:76:9e:
4d:cb:2f:75:2a:86:f1:07:c0:3d:f5:00:a6:bb:b8:
e5:dd:5d:d1:da:94:b0:8b:37:55:aa:7e:ac:c4:21:
18:64:7e:a3:94:78:11:6c:d8:be:62:81:01:a2:90:
a8:78:dc:c0:03:32:9d:8f:8c:c8:da:44:e4:8d:f7:
5f:b2:99:46:99:92:ce:2f:6e:9d:48:2e:63:49:f4:
cd:75:37:c8:0d:76:79:e1:77:68:ea:00:2c:04:1a:
24:43:e3:20:da:86:fb:38:2f:e3:bb:52:28:2b:b8:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F4:C8:35:9A:D8:75:8C:87:EA:51:44:7E:7E:F8:6D:C9:89:AD:E0
X509v3 Authority Key Identifier:
keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8b:6e:1d:80:28:dc:12:8a:09:4c:5a:a0:d3:91:da:2d:85:
7b:09:61:0b:a1:16:bc:ec:42:43:19:a0:48:5f:c1:51:68:57:
71:6e:64:3b:fd:05:da:06:2c:d9:bf:fb:e9:d0:ff:db:39:10:
7d:57:72:99:00:fa:7f:ad:b5:60:84:96:2e:30:4b:95:12:b9:
88:ab:c5:d9:20:2f:47:16:fa:36:cb:be:c5:de:88:6c:9a:61:
e0:c9:16:7f:55:bf:11:a1:c0:bb:f5:9e:01:64:9b:0d:12:5f:
0c:d1:15:7a:eb:01:a6:21:50:50:2b:3d:aa:e5:98:e2:e3:59:
91:38:a9:70:1c:32:ed:1b:ca:dd:1d:a5:df:b0:17:b4:82:a8:
9b:98:6e:4b:87:74:79:4d:52:1a:b6:dc:9b:cb:91:bf:71:e5:
08:65:03:72:8d:e5:88:3c:26:dc:29:bb:a5:bc:e6:1e:d3:e0:
52:38:a4:09:c4:d2:6a:7a:c1:be:8a:2c:eb:53:5a:80:f3:5e:
df:01:77:06:8b:a3:c7:cb:c3:19:23:e7:f2:6e:6d:6d:35:11:
d9:13:bb:c9:a1:85:bf:02:75:b3:81:64:7b:bc:ff:78:98:60:
0d:20:45:1a:53:1d:dd:a9:33:31:9a:d3:e7:d0:88:a6:0a:f0:
c3:32:8e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:44:36 2026 by rpki-client