Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
File: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft (raw, json)
Hash identifier: pxgVGEArN4jhauNqmUFTgi7E/JfmS4v4uWfLcjGWGmc=
Subject key identifier: 8C:7E:C8:21:FF:C9:1A:92:1F:9D:86:AB:1F:F2:CC:46:8A:7D:7D:16
Authority key identifier: 2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D
Certificate issuer: /CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
Certificate serial: 019F860DA3D209DCDCD3DA4A73F7C90E2F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
Manifest number: 0AD8
Signing time: Tue 21 Jul 2026 19:01:08 +0000
Manifest this update: Tue 21 Jul 2026 19:01:08 +0000
Manifest next update: Wed 22 Jul 2026 19:01:08 +0000
Files and hashes: 1: JeFks6SyUKUdGcPpnRu7HceMVqI.roa (hash: fG7mhBWGrI11+SMkgosBLh6lyTzRJMTAZnL7F7NiLMY=)
2: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl (hash: eht1CN0NOBTzIu8vjisKfFglqiy6JUi9Kg4790xq6vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:a3:d2:09:dc:dc:d3:da:4a:73:f7:c9:0e:2f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
Validity
Not Before: Jul 21 19:01:08 2026 GMT
Not After : Jul 22 19:01:08 2026 GMT
Subject: CN=8c7ec821ffc91a921f9d86ab1ff2cc468a7d7d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:0d:fb:c8:7c:b9:1d:de:a0:4e:0f:18:61:
de:9f:0d:d5:86:2d:9d:74:e7:cd:65:20:87:d2:52:
09:a7:e1:59:0a:f5:eb:0c:63:aa:ab:8f:bd:3a:18:
18:76:bd:6c:f6:d0:87:d3:dc:b6:80:b4:19:39:c8:
92:62:0b:15:88:8a:35:ad:fd:0f:f2:e5:bf:02:32:
34:f7:74:3c:e7:44:de:34:92:6c:bf:c9:eb:91:17:
c8:aa:a0:77:91:82:22:eb:86:b7:51:6e:54:53:80:
fa:e3:9e:e9:10:04:3a:35:7a:5e:86:5c:98:82:27:
13:b8:5f:17:36:21:95:3d:0a:4a:fc:02:ac:17:74:
cf:b0:24:9f:79:7c:0c:2a:e5:0a:4c:b5:86:5a:a5:
42:6a:ff:ce:d3:03:25:ad:d4:e6:dd:bc:c8:fa:8d:
34:81:ed:19:2b:80:ce:91:fd:cb:27:84:24:20:27:
9a:f8:2c:ef:b1:8c:1c:91:c5:2f:8b:20:23:e5:56:
20:5f:ea:2b:5b:1a:44:0e:0c:b3:d3:fc:fe:a9:30:
37:96:1e:69:1c:69:c7:de:28:bf:14:55:ed:2b:71:
a8:13:b7:20:42:c8:65:8e:33:60:2c:0f:86:d8:33:
8d:92:29:7e:79:af:45:d7:67:4b:ff:cf:d7:bb:d1:
12:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7E:C8:21:FF:C9:1A:92:1F:9D:86:AB:1F:F2:CC:46:8A:7D:7D:16
X509v3 Authority Key Identifier:
keyid:2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:31:21:76:e6:36:09:6b:19:7a:fc:4f:e8:3f:68:a8:b8:5c:
f6:41:3b:86:53:64:0a:bb:c4:df:94:df:27:0f:97:21:e6:cc:
8b:82:b8:74:30:32:26:8a:38:e0:04:0e:73:71:79:d6:ab:e8:
fe:51:3a:d3:9a:18:5a:0c:bd:92:b5:52:d6:1a:4f:df:83:c1:
1e:46:de:d8:bd:f2:ca:ea:77:b2:16:14:1d:c0:26:b6:e6:43:
8a:14:1d:49:ae:e1:c2:46:b9:42:a5:25:a2:b9:ad:30:69:1d:
75:77:db:22:cc:7b:bd:10:3e:ea:89:21:4e:68:4b:8d:12:ca:
db:eb:81:ec:9e:d7:ea:25:5e:99:4c:07:45:c0:e7:fe:7d:8d:
6b:02:79:9b:70:50:d7:6d:23:ae:cc:f8:03:8f:0e:5b:e5:54:
97:a4:fa:64:e4:c2:94:95:25:fc:bd:1d:b5:c3:52:09:b0:1f:
7b:50:e0:34:36:a0:89:90:fb:a1:9d:50:11:7d:02:aa:09:c1:
79:44:e1:e5:c7:15:ca:64:90:93:ec:13:c7:bf:c7:ef:9a:5f:
a3:18:73:30:d5:37:1e:b5:96:c1:82:6f:f8:56:e0:a2:9f:97:
23:78:f7:07:dd:14:c8:f5:93:52:0f:1a:e1:48:32:06:58:8c:
39:ff:33:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:41:48 2026 by rpki-client