Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File: LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier: ycdfDG2P9wqsPTZbbhBP8UuusHKKNdlCaPbK9Zxibj0=
Subject key identifier: 8E:34:3F:CE:08:08:91:A7:19:42:EF:42:28:4B:D9:AF:50:B2:8E:16
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial: 019DD68A55E3B0602449ED5A4832AA7C6238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number: 162D
Signing time: Wed 29 Apr 2026 00:01:23 +0000
Manifest this update: Wed 29 Apr 2026 00:01:23 +0000
Manifest next update: Thu 30 Apr 2026 00:01:23 +0000
Files and hashes: 1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: 4I883emBLw8RZJ/hxmMOOWlrjhaVXYonuLCNKlf/Vmo=)
2: cCc9EoKWn1mq3UkIpDhniuHoz_0.roa (hash: Bx7QtDc0qD0Q85lb0xP2V1a5BckVXkCIqQNEyBo+I68=)
3: jaTCzxQZwGVoMfE5pxy0Gbm9K_E.roa (hash: ULw0U4ZGmZtESpblMgYhOZZu7hCKbL/R7CwXeeGSDEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d6:8a:55:e3:b0:60:24:49:ed:5a:48:32:aa:7c:62:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Validity
Not Before: Apr 29 00:01:23 2026 GMT
Not After : Apr 30 00:01:23 2026 GMT
Subject: CN=8e343fce080891a71942ef42284bd9af50b28e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:c3:45:04:27:ca:56:4e:75:7e:07:a2:39:
0d:a4:48:fb:d5:77:ba:93:2c:82:ab:52:62:fa:a9:
6e:10:ad:ef:92:3c:c3:6b:42:36:77:8b:18:32:bb:
0a:9b:34:b3:dd:a1:83:b7:d7:68:42:c1:cf:8b:1e:
6f:3f:9a:71:b8:43:6f:ec:35:91:6b:11:ed:d0:82:
9c:d8:68:00:11:42:1c:ce:b2:af:80:dc:74:f9:4f:
c0:f8:1e:1d:e1:cd:8c:69:75:c7:1e:9a:eb:31:de:
87:db:88:b8:4f:b6:db:ee:03:27:b5:9a:87:8a:11:
cf:2d:b8:23:9a:2c:93:4f:64:92:10:f3:80:1b:af:
fa:e3:54:e3:f5:e0:f6:8d:e3:35:c6:25:d3:cd:49:
b0:ba:78:9e:8f:7e:30:a5:83:da:bf:20:68:a1:87:
b7:fb:b9:e7:55:20:5d:3d:6f:13:c0:07:73:14:ee:
fe:ff:69:9e:1f:4f:48:30:00:97:10:95:b0:a0:b4:
96:0d:bf:4c:fe:90:63:84:a3:85:99:a8:8d:65:6e:
83:08:a2:3d:97:da:c1:cd:6a:99:93:45:63:d4:03:
eb:b9:0f:ce:74:0b:4c:48:a2:59:e4:b2:4a:a8:56:
c3:9e:ba:d4:ad:8f:19:9d:7c:94:d0:9f:91:18:b7:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:34:3F:CE:08:08:91:A7:19:42:EF:42:28:4B:D9:AF:50:B2:8E:16
X509v3 Authority Key Identifier:
keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b2:f6:e9:5e:7c:ff:7d:90:bf:b5:6f:9b:b3:49:09:45:5a:
5f:a3:7b:ff:41:6d:82:92:9b:a3:5d:02:03:8f:4c:8d:42:60:
ae:59:16:fc:63:f7:d2:14:f7:19:9b:2b:e4:c7:75:e5:36:df:
4b:09:3b:a8:e7:a0:64:85:d8:ae:53:d0:82:c9:44:25:fa:ba:
39:a3:ee:b5:ee:ec:bc:5f:d2:f8:eb:f5:8f:a5:fd:e6:67:51:
ea:37:61:12:62:a5:e1:69:12:07:50:d6:09:e0:a8:6e:34:7d:
dc:96:3e:2e:0f:62:2b:9e:38:6b:80:cb:8a:de:91:8a:13:0c:
04:64:40:e1:cb:17:2d:60:93:57:23:1e:b1:b1:29:26:5b:b6:
b4:0c:5c:b3:88:e9:3a:27:44:7f:ea:19:ec:54:29:66:29:40:
d1:2d:5a:f3:6c:ea:b5:a1:1b:53:52:20:66:b3:6d:04:e4:a0:
4d:1a:40:59:16:a4:8b:80:24:c9:c6:44:72:86:d2:72:f6:4d:
b1:6c:77:e8:b1:54:e1:28:7e:3b:7b:5e:00:5c:34:57:7c:8e:
c9:cd:be:e3:d2:f9:c1:34:8a:ae:61:36:e8:aa:ba:40:01:94:
69:0a:01:50:4f:4b:55:bc:58:0f:80:09:13:96:db:90:aa:ed:
6a:6b:b8:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3WilXjsGAkSe1aSDKqfGI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjM2UxYzAzZWZhMmYyZDlmZmY5ZGJlYzMzMjViYzZjMzc2
OTQyNTAwHhcNMjYwNDI5MDAwMTIzWhcNMjYwNDMwMDAwMTIzWjAzMTEwLwYDVQQD
Eyg4ZTM0M2ZjZTA4MDg5MWE3MTk0MmVmNDIyODRiZDlhZjUwYjI4ZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT3DRQQnylZOdX4HojkNpEj71Xe6
kyyCq1Ji+qluEK3vkjzDa0I2d4sYMrsKmzSz3aGDt9doQsHPix5vP5pxuENv7DWR
axHt0IKc2GgAEUIczrKvgNx0+U/A+B4d4c2MaXXHHprrMd6H24i4T7bb7gMntZqH
ihHPLbgjmiyTT2SSEPOAG6/641Tj9eD2jeM1xiXTzUmwuniej34wpYPavyBooYe3
+7nnVSBdPW8TwAdzFO7+/2meH09IMACXEJWwoLSWDb9M/pBjhKOFmaiNZW6DCKI9
l9rBzWqZk0Vj1APruQ/OdAtMSKJZ5LJKqFbDnrrUrY8ZnXyU0J+RGLdlYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI40P84ICJGnGULvQihL2a9Qso4WMB8GA1UdIwQY
MBaAFCw+HAPvovLZ//nb7DMlvGw3aUJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kY2JkM2EtNzUyOC00OTllLWEzYmQt
YmYyODg3NWFiMjYxLzEvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9kY2JkM2EtNzUyOC00OTllLWEzYmQtYmYyODg3NWFiMjYx
LzEvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbL26V58
/32Qv7Vvm7NJCUVaX6N7/0FtgpKbo10CA49MjUJgrlkW/GP30hT3GZsr5Md15Tbf
Swk7qOegZIXYrlPQgslEJfq6OaPute7svF/S+Ov1j6X95mdR6jdhEmKl4WkSB1DW
CeCobjR93JY+Lg9iK544a4DLit6RihMMBGRA4csXLWCTVyMesbEpJlu2tAxcs4jp
OidEf+oZ7FQpZilA0S1a82zqtaEbU1IgZrNtBOSgTRpAWRaki4AkycZEcobScvZN
sWx36LFU4Sh+O3teAFw0V3yOyc2+49L5wTSKrmE26Kq6QAGUaQoBUE9LVbxYD4AJ
E5bbkKrtamu4uA==
-----END CERTIFICATE-----
Generated at Wed Apr 29 02:56:13 2026 by rpki-client