Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
File: ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json)
Hash identifier: kGPN8ep6LKM2qYtUrAYAJQXDdH9LheN76EfCLiYTw20=
Subject key identifier: A3:10:57:CD:8E:63:A2:69:B0:E0:15:7C:64:45:7C:97:0B:0A:60:3F
Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
Certificate issuer: /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Certificate serial: 019D37C0025D9437410E21418DBDD51C31FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:00:23 +0000
Manifest this update: Sun 29 Mar 2026 04:00:23 +0000
Manifest next update: Mon 30 Mar 2026 04:00:23 +0000
Files and hashes: 1: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: CT7S5H+MHm8wrflRhmJx0Ny4QTr1zgeiytpXgqjsxEk=)
2: rMVZ8VNrAbOr1spmw2IgJ5BytdA.roa (hash: tTo1sNFXQgwbOz3Qzxrcjf5177mm498Fb+OqdLzuw6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:02:5d:94:37:41:0e:21:41:8d:bd:d5:1c:31:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Validity
Not Before: Mar 29 04:00:23 2026 GMT
Not After : Mar 30 04:00:23 2026 GMT
Subject: CN=a31057cd8e63a269b0e0157c64457c970b0a603f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e8:7d:34:1d:10:e5:c3:6d:ff:c3:57:76:d3:
37:1c:f6:2c:0d:02:b8:aa:a3:22:66:b0:a3:a5:d5:
00:b7:a8:ce:6f:e8:64:ef:8c:e4:9f:2a:70:bc:c2:
2e:eb:f8:7e:ad:3a:bd:a0:ce:77:a8:21:87:44:8b:
49:f8:b6:a7:6b:05:f0:2b:06:19:ff:44:c3:a8:8f:
83:2a:e3:66:fc:4f:d8:40:f7:09:18:f7:20:91:70:
3e:43:b3:c0:9a:31:6e:1a:b3:73:3b:1d:f9:c7:99:
a3:07:9a:83:6e:a7:31:79:2b:ca:93:8a:e8:7c:00:
2d:8d:cb:9f:48:5a:cd:36:54:0d:7e:c5:08:0c:ff:
d4:7d:83:d5:c2:67:70:c5:84:19:f1:94:b3:cc:db:
1c:f4:fa:5c:cd:b3:ef:50:e8:b2:8f:aa:b0:d1:ea:
0e:2e:dd:45:ec:7a:97:77:8e:66:b2:54:0b:c6:c0:
95:53:6d:8c:57:f6:59:e2:e3:32:d7:0d:dc:ee:3e:
eb:67:3d:d3:b1:cf:51:e3:1c:5e:82:46:80:a9:a4:
a1:e7:9b:65:c3:be:41:fd:0b:ed:ec:0d:bf:d5:eb:
08:28:6a:52:08:e0:5b:9d:0e:4a:ca:71:a2:7a:82:
3b:99:16:ca:9b:1d:20:71:f8:e1:6d:c9:b7:46:d2:
86:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:10:57:CD:8E:63:A2:69:B0:E0:15:7C:64:45:7C:97:0B:0A:60:3F
X509v3 Authority Key Identifier:
keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ea:89:3a:d3:18:97:40:fd:f5:8b:8a:3a:75:88:0f:89:97:
32:25:e9:15:0d:12:e2:28:57:5e:52:25:7b:37:c0:d1:e9:9f:
bd:b4:51:47:f2:e5:e5:8b:b2:d9:e5:75:9f:89:7d:96:a1:62:
b2:1f:ed:e1:50:f3:df:de:09:f9:b4:24:8c:f4:d1:34:fc:62:
77:90:de:f1:b1:b7:0a:c5:87:03:26:fd:12:06:d6:3d:68:89:
3b:a1:0a:c7:eb:52:4f:91:68:5e:4f:b2:9e:7c:17:b8:fc:34:
97:9a:ae:e5:90:ed:82:7f:40:88:65:1d:0d:a6:a7:1b:e7:d9:
ff:6d:f6:14:d0:e9:45:7b:2b:be:93:7d:83:ab:f0:6d:2e:64:
04:d6:01:a8:11:ff:e0:73:1a:ec:4c:36:fd:04:ec:21:e8:b4:
aa:05:59:1a:73:37:c3:55:59:a0:1d:41:0c:af:a4:bc:01:50:
35:97:36:2a:b0:43:1a:d6:72:ec:45:4d:dd:a2:a7:fa:d9:05:
37:09:ab:d2:5c:80:4c:2f:4c:e4:52:ca:6e:f1:cf:56:78:64:
ef:dd:86:48:13:6c:54:36:af:5f:48:fc:f1:d5:fe:02:a8:c7:
4a:20:ee:d2:07:8a:53:6f:2d:75:fc:0a:47:f5:0b:af:ee:e5:
15:28:2e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:14 2026 by rpki-client