Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File: LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier: V89UwUnb2U11I0q3l8DlJdT3ErUHPb5IxvD3K7NvKLY=
Subject key identifier: CC:76:94:1E:FA:FF:92:F6:7A:3E:F8:4F:6E:EA:85:E8:6D:65:5E:28
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial: 01A15A79A3712ED22A8991CC6B50C1143477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number: 17FF
Signing time: Tue 20 Oct 2026 18:01:23 +0000
Manifest this update: Tue 20 Oct 2026 18:01:23 +0000
Manifest next update: Wed 21 Oct 2026 18:01:23 +0000
Files and hashes: 1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: MRC90CCxNfp4l2JaCtpGv7apxmXh11deAyLo6EB/4g4=)
2: cCc9EoKWn1mq3UkIpDhniuHoz_0.roa (hash: Bx7QtDc0qD0Q85lb0xP2V1a5BckVXkCIqQNEyBo+I68=)
3: jaTCzxQZwGVoMfE5pxy0Gbm9K_E.roa (hash: ULw0U4ZGmZtESpblMgYhOZZu7hCKbL/R7CwXeeGSDEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:79:a3:71:2e:d2:2a:89:91:cc:6b:50:c1:14:34:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Validity
Not Before: Oct 20 18:01:23 2026 GMT
Not After : Oct 21 18:01:23 2026 GMT
Subject: CN=cc76941efaff92f67a3ef84f6eea85e86d655e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:43:b6:0d:99:6c:85:43:8a:fa:6f:7c:79:
cb:6e:6a:6a:e8:5a:63:5a:ef:31:9d:4f:4d:40:81:
aa:44:c6:b0:31:ef:9a:95:11:b0:92:b7:fc:b0:ed:
d4:0a:0f:76:ee:17:43:1a:a3:35:f8:45:e6:d6:eb:
f7:3b:ab:cb:7a:4f:85:ab:d8:5e:77:d9:dc:df:ca:
8e:15:fd:90:cd:90:f8:a7:b9:89:3b:ad:de:c3:5e:
e5:be:a1:bc:cc:fc:39:8f:d1:33:e4:64:a5:3f:23:
22:de:db:fc:49:73:71:21:b6:48:68:64:a9:55:1f:
d7:dc:69:33:6c:b5:d4:9f:d9:b5:bd:8d:aa:64:ab:
3f:26:95:53:3b:1d:bf:34:3b:03:de:c4:11:40:86:
2b:a0:91:4a:28:73:82:62:79:4a:52:f9:fe:3e:60:
b6:70:2c:c7:97:39:65:cc:b4:a8:39:94:60:38:5b:
1f:8b:f5:b6:ff:6f:aa:5b:4a:4f:98:6b:b8:09:f1:
97:6d:be:9e:53:90:32:9d:07:0d:36:fc:71:eb:9f:
ee:c7:b9:c3:2b:68:99:89:7a:d9:88:3e:68:38:d6:
bb:1d:b9:32:d3:47:12:84:63:5d:aa:ba:8d:3c:8d:
84:21:25:f1:78:a2:02:21:fb:ae:91:d2:e4:bd:5f:
ec:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:76:94:1E:FA:FF:92:F6:7A:3E:F8:4F:6E:EA:85:E8:6D:65:5E:28
X509v3 Authority Key Identifier:
keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ef:a5:f6:27:20:27:14:f7:d9:2f:e3:11:67:ed:61:21:3f:
84:81:4e:02:c4:07:77:35:ce:74:1c:0e:97:cf:6e:37:5e:5e:
e2:06:07:85:7b:c2:fa:1f:e9:f4:96:98:f9:6c:e8:73:ba:6e:
a0:da:66:85:4f:2d:6f:02:1d:5d:b4:f2:f3:df:f4:46:4e:20:
66:b3:c0:f7:9b:94:19:ad:81:1a:f3:66:03:45:14:81:3d:b2:
9d:52:ce:98:e8:c7:e2:80:1b:d8:2c:3c:77:c4:3d:f4:4b:bb:
a6:0c:f0:26:36:8f:3f:0e:e1:97:df:f2:49:67:5f:27:04:6f:
a1:a0:08:dc:70:5a:d1:dc:f8:85:51:c0:15:92:b9:d3:a3:7f:
67:5d:4a:2d:d9:94:9c:80:15:e9:45:4f:bb:0a:e5:63:01:48:
43:2d:9e:bc:90:47:4e:f3:2e:26:b5:9b:64:3a:ce:a7:83:37:
a2:26:52:e1:97:df:35:01:a4:33:65:8a:6e:99:a7:85:90:96:
32:5c:47:9a:3f:18:09:33:98:bc:07:cd:75:39:9d:85:ac:c1:
de:8f:d5:37:f3:dc:e7:e7:f8:78:72:7d:a7:02:11:6d:3c:37:
3c:ab:c8:5b:00:54:4b:93:85:5f:1a:0c:a0:ba:cd:70:e2:30:
57:6c:a0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 23:21:46 2026 by rpki-client