
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File: LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier: XI/h7AuVyTEqeGUH+eZ1RiI9tFAZwbgmOTu1K70cIXI=
Subject key identifier: BC:F7:74:8E:13:58:C0:82:F6:A3:F3:FB:AF:07:F8:2C:12:C8:9C:34
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial: 019CE900A41311825475A46D69B8C608EB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number: 15B2
Signing time: Fri 13 Mar 2026 21:00:59 +0000
Manifest this update: Fri 13 Mar 2026 21:00:59 +0000
Manifest next update: Sat 14 Mar 2026 21:00:59 +0000
Files and hashes: 1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: CK6nrGWhn/z6++7saJCG4zEipwqe/oupou7aDwNS49I=)
2: cCc9EoKWn1mq3UkIpDhniuHoz_0.roa (hash: Bx7QtDc0qD0Q85lb0xP2V1a5BckVXkCIqQNEyBo+I68=)
3: jaTCzxQZwGVoMfE5pxy0Gbm9K_E.roa (hash: ULw0U4ZGmZtESpblMgYhOZZu7hCKbL/R7CwXeeGSDEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e9:00:a4:13:11:82:54:75:a4:6d:69:b8:c6:08:eb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Validity
Not Before: Mar 13 21:00:59 2026 GMT
Not After : Mar 14 21:00:59 2026 GMT
Subject: CN=bcf7748e1358c082f6a3f3fbaf07f82c12c89c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:0a:f5:ec:50:76:18:d6:62:ea:ec:54:d4:
07:de:01:0d:27:83:c2:5f:60:74:ae:cf:01:31:2c:
5f:c0:b8:74:3e:b9:9f:04:75:ca:46:a0:2a:fa:b7:
68:92:e3:a3:9a:51:f2:34:1b:03:06:93:ba:79:02:
a4:79:73:b4:57:73:55:ff:02:63:3f:9e:eb:05:81:
1b:72:cd:56:e4:26:84:08:16:25:fe:ab:d5:55:67:
a9:f9:db:c1:06:90:89:07:b1:e0:c2:72:d7:28:0c:
4d:98:61:bd:96:22:47:85:ec:98:04:6e:76:1f:d6:
ff:7b:5a:d3:f3:6a:e3:9e:95:9f:b2:8d:b4:c7:85:
a4:f5:f3:bd:48:11:9e:14:8e:e1:9c:6c:b6:11:c1:
0a:4d:16:7d:21:ba:88:02:b8:92:64:d2:38:98:a9:
59:c6:45:e1:ac:56:42:a5:c6:6f:71:32:e5:a9:e2:
f5:94:bc:ed:f1:94:ce:1e:84:30:66:e7:2c:c3:5e:
02:db:2e:88:9b:09:4d:93:5e:c8:69:b9:dd:0c:04:
82:31:08:6d:8f:bc:b1:37:13:d8:da:14:5e:91:b9:
99:09:27:29:50:c4:32:50:7e:19:8d:88:c2:ea:e0:
29:cb:9c:c9:f2:88:f5:e7:eb:24:a8:85:d0:ed:89:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F7:74:8E:13:58:C0:82:F6:A3:F3:FB:AF:07:F8:2C:12:C8:9C:34
X509v3 Authority Key Identifier:
keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4b:bf:10:18:9c:f0:28:29:a4:8b:47:33:3c:66:d0:59:96:
5b:b1:2e:67:0e:9b:ef:ff:cf:1a:05:00:ee:de:6c:c5:b8:d4:
a0:c5:43:79:98:4d:0d:49:cd:7a:00:16:07:e3:09:92:10:e4:
b1:5b:3e:4d:2e:41:19:8e:69:32:87:49:d4:15:b9:0e:c5:ff:
e2:18:50:05:7d:91:d0:00:5d:45:b3:e1:74:47:2f:e8:55:9a:
ad:30:00:d4:1b:2f:61:e2:db:78:35:ca:35:f4:4e:24:9c:e6:
7a:95:e0:6b:c9:9d:e2:18:f3:13:b9:c7:1a:e8:17:47:09:c3:
c9:f5:cc:1e:fd:03:4a:de:6c:95:18:bb:c8:8a:10:f1:e0:41:
d7:5e:54:ed:16:c0:08:f5:8c:6f:97:a4:11:73:ce:90:ca:60:
ab:7e:08:21:6b:7d:7c:40:24:e8:77:d7:12:fc:4c:58:99:63:
32:82:c9:6f:d7:21:0c:5c:7c:e2:67:af:2e:9e:bc:70:62:b0:
62:19:6e:69:b2:3a:bb:a6:1a:14:83:c1:b9:fa:dd:36:df:5c:
6f:5d:6e:b0:d2:f6:d7:f8:29:cc:60:59:eb:ee:3d:f1:74:9b:
8f:7e:dc:ba:0f:4e:93:13:10:ad:c4:d5:a9:e9:88:69:75:36:
ef:a5:42:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 01:48:04 2026 by rpki-client