Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
File: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft (raw, json)
Hash identifier: V99YBeS3tEroNECHISgRjC/xQCEp/iMGve1csFXqzWA=
Subject key identifier: A5:E1:3A:44:91:5E:44:2E:1D:EC:9F:FA:BF:75:BE:4D:7F:07:5C:0D
Authority key identifier: 2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D
Certificate issuer: /CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
Certificate serial: 019D3909BFE18FA4DE55E841616C3554CECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
Manifest number: 09A7
Signing time: Sun 29 Mar 2026 10:00:33 +0000
Manifest this update: Sun 29 Mar 2026 10:00:33 +0000
Manifest next update: Mon 30 Mar 2026 10:00:33 +0000
Files and hashes: 1: JeFks6SyUKUdGcPpnRu7HceMVqI.roa (hash: fG7mhBWGrI11+SMkgosBLh6lyTzRJMTAZnL7F7NiLMY=)
2: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl (hash: O8D56DSDi6qxiF4cvtonhSSuO/yhJMp7GAOo4CdMY18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:bf:e1:8f:a4:de:55:e8:41:61:6c:35:54:ce:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
Validity
Not Before: Mar 29 10:00:33 2026 GMT
Not After : Mar 30 10:00:33 2026 GMT
Subject: CN=a5e13a44915e442e1dec9ffabf75be4d7f075c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:c6:03:8a:58:76:4b:9e:e5:a3:b9:c7:34:
b4:5d:13:f4:78:d1:80:b1:18:a5:22:e7:24:b0:b7:
ed:3b:cc:fe:5c:29:85:66:58:fb:0c:e5:b0:97:c4:
df:b6:6a:04:66:cb:b3:49:6f:a9:41:17:b6:d6:d2:
e5:54:91:36:51:83:29:42:cf:f1:53:97:5a:7f:69:
0a:4a:b8:ad:e3:ba:14:98:a0:3a:11:b8:3e:3a:19:
a1:92:9c:38:5f:76:63:94:08:a8:f4:f8:3b:18:e5:
7e:e4:b1:dc:07:1e:95:0b:f6:de:b3:af:5c:72:f2:
bc:23:38:f4:57:97:b8:89:bd:4f:07:95:79:1a:2d:
80:33:08:50:43:6b:b8:05:a5:91:c8:34:f5:41:19:
32:c0:c8:b9:d3:4d:81:ca:01:7a:de:16:d2:5d:39:
98:94:39:1c:97:b2:d2:2a:53:53:a1:52:b5:72:a1:
ef:cb:16:5e:c1:22:46:aa:67:c5:02:90:b3:0d:a5:
32:18:4c:c1:48:a6:e0:91:7b:34:23:4a:62:e6:3b:
e1:27:4f:4f:71:e8:56:98:cf:f2:e3:65:6b:83:64:
95:d8:94:6c:ab:96:20:5b:25:89:9c:0e:73:cf:ff:
a7:4f:12:68:5f:46:76:d4:5b:74:36:23:a2:9b:b8:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E1:3A:44:91:5E:44:2E:1D:EC:9F:FA:BF:75:BE:4D:7F:07:5C:0D
X509v3 Authority Key Identifier:
keyid:2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2b:82:d9:99:79:7e:6d:21:45:1f:2f:ed:7d:8f:dc:0e:65:
75:4e:62:4c:26:d1:16:bb:5c:0c:a3:6e:15:0e:76:54:80:2c:
77:08:cf:15:fe:5f:87:bb:66:19:3f:dd:d6:b6:ab:1a:4f:63:
98:47:5c:2a:d3:58:85:8c:0e:1c:56:94:ba:eb:9d:9b:18:3d:
26:48:d3:69:b0:dd:67:4c:d1:d5:5b:03:17:b0:3d:2c:3c:da:
b8:28:f5:dd:c7:8a:54:49:e1:a4:38:35:a8:1d:4d:03:f6:4f:
61:cc:95:a7:63:fc:ec:07:47:e1:dd:4f:e6:82:95:cd:5a:ce:
e3:7d:5a:9b:11:b3:d3:80:e2:07:98:e5:af:6b:15:0c:31:f2:
f7:6d:d3:eb:32:09:fa:cb:1c:2e:d9:9a:a5:bc:c5:b5:14:cd:
a3:d3:96:c0:ff:33:14:86:7f:36:fd:0a:a5:39:eb:d0:64:c3:
87:a7:c9:37:d1:27:57:71:3d:36:95:e8:f8:c6:37:7e:72:53:
91:7b:0f:39:8c:ae:72:4c:4a:4f:e7:8b:c1:1e:d1:e7:ae:9d:
a5:e8:04:21:83:33:b3:19:a7:19:03:f4:c8:31:45:0b:69:e3:
95:a0:1b:69:9f:f1:4b:8e:3a:4d:5e:d4:2f:1c:e6:43:5a:e5:
db:9f:c9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:35 2026 by rpki-client