Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
File: LDe0vsl9YIq-I7xXujmCRszFd2A.mft (raw, json)
Hash identifier: 59fr691wegJ2DcXeWK3d776ml1OeN0kpLEErdAIq8p4=
Subject key identifier: BB:C9:0A:4F:5E:E5:A9:1A:44:E8:70:C7:07:E1:0C:30:0D:E5:33:51
Authority key identifier: 2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
Certificate issuer: /CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Certificate serial: 019D389BC3A452CC9BF6D0439325E3B4F1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:25 +0000
Manifest this update: Sun 29 Mar 2026 08:00:25 +0000
Manifest next update: Mon 30 Mar 2026 08:00:25 +0000
Files and hashes: 1: LDe0vsl9YIq-I7xXujmCRszFd2A.crl (hash: YKfm4gJYeLxpJQpjgB59oBkW1iRu3iHIK3J4E6fA958=)
2: ayl3vnvrrdmk5cZvehuS-xb9kOo.roa (hash: RrcMxnc59zE7RGrIC4ZPK4DT+x6V2IkZuo1eiCNAHss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c3:a4:52:cc:9b:f6:d0:43:93:25:e3:b4:f1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Validity
Not Before: Mar 29 08:00:25 2026 GMT
Not After : Mar 30 08:00:25 2026 GMT
Subject: CN=bbc90a4f5ee5a91a44e870c707e10c300de53351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f6:3f:45:ec:e2:e5:1d:07:aa:cf:98:2a:88:
41:1f:05:45:89:02:11:ce:99:2e:02:5e:d2:26:12:
d2:ac:fe:49:89:16:67:12:4c:6d:95:d0:f2:f7:a4:
f5:99:d9:2d:5c:75:9b:7e:d1:f5:66:1f:4a:11:1c:
e0:a2:3f:2b:91:e1:2b:d1:ae:6f:b1:f5:7f:15:60:
41:63:93:18:f9:9e:a6:17:a4:4f:6b:3d:76:f8:53:
ba:62:5e:5d:21:87:66:11:ae:13:2b:6e:7f:2d:ec:
a9:f8:6d:c0:e7:71:50:16:85:8a:1d:02:d0:7f:cb:
5f:0e:f3:00:e0:bb:fd:c0:2b:40:d3:ea:02:f7:84:
47:bb:d3:f7:00:ce:08:4b:75:49:84:03:44:d5:1b:
8e:7e:73:a3:31:e4:2d:3a:a4:25:77:30:b7:67:dc:
9c:06:a7:be:84:3a:d6:12:0e:1a:0e:83:2d:89:36:
70:87:f3:68:32:10:0e:69:2b:30:d2:24:25:36:58:
aa:69:2d:b0:72:19:4e:37:11:7a:e1:ec:46:2d:f0:
b7:dc:3b:6a:10:74:89:74:91:0a:fb:a5:ef:47:e5:
f9:eb:1a:c3:0f:ea:88:10:9a:19:b8:7f:52:ec:ba:
37:71:52:4f:20:87:87:74:4e:1b:79:83:5c:23:01:
7d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C9:0A:4F:5E:E5:A9:1A:44:E8:70:C7:07:E1:0C:30:0D:E5:33:51
X509v3 Authority Key Identifier:
keyid:2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e9:56:50:95:6f:ca:de:e7:6c:f2:8d:45:86:9e:c7:a9:dd:
8e:ec:d7:50:35:87:81:1b:29:07:0c:86:1a:62:dc:2c:08:d0:
9e:be:51:f9:5c:7c:30:ae:f8:9c:08:1f:e7:d2:48:dd:ee:ad:
ec:d6:9c:d4:d2:24:fd:87:69:a1:c8:ca:ed:a9:ec:7c:06:01:
98:09:d2:be:c7:fe:55:5c:6c:79:80:22:ce:b7:6d:d6:40:91:
66:9d:37:19:9c:ad:9d:32:62:2c:64:96:e9:17:31:1b:10:cb:
0c:8b:bd:2a:f2:a5:b9:df:c1:4e:44:57:19:27:55:3a:67:9d:
bc:62:fe:85:85:90:a4:56:0f:3c:8b:a4:d9:1a:aa:0f:62:48:
79:32:bc:0b:5c:5b:9f:95:cf:9b:45:ef:67:11:c7:f5:93:b5:
b9:3d:96:e1:88:b9:13:5e:c6:3d:d4:c7:ed:2c:7e:2c:7f:d6:
f0:39:92:6f:55:2a:ba:97:4a:86:4d:85:26:70:b2:bc:0f:82:
1e:84:d7:8a:67:f8:89:88:16:57:73:2a:da:56:3f:7b:48:85:
fe:53:50:86:d9:fb:a5:ed:37:80:5a:dd:df:49:40:8d:f9:2c:
e3:c5:bc:3f:e4:1d:be:62:5e:5d:6a:af:42:12:86:c2:89:18:
60:8e:59:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:54 2026 by rpki-client