Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
File: LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft (raw, json)
Hash identifier: t0g3k8VckQpjzpgY/LoEEhmYDuFcWDq+9vCkfSmz6r0=
Subject key identifier: 48:3B:1F:49:9F:F2:3D:DD:75:40:D3:76:79:A1:A0:BE:EA:9C:86:44
Authority key identifier: 2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B
Certificate issuer: /CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b
Certificate serial: 019EFC165CAD4CF05FF51B37B61C6CD92B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
Manifest number: 0292
Signing time: Thu 25 Jun 2026 00:03:04 +0000
Manifest this update: Thu 25 Jun 2026 00:03:04 +0000
Manifest next update: Fri 26 Jun 2026 00:03:04 +0000
Files and hashes: 1: LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl (hash: Vv1EVRt0KiducAOFV5OKe+sN58K+n3MKRGuR5JPiPus=)
2: RvsaGrjxAX5qao7RR21kXobUgQM.asa (hash: q+rjI9IVipp8g9U0y29NEz+jK3MT4WSsT58lpW7Qlh8=)
3: fQmtrzrbzw4gWBCIWX8LdJFiKEE.roa (hash: 0Cel+oB84KUJsE+NVR0+1YgTW5yxAFtMO6zocsewmpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:16:5c:ad:4c:f0:5f:f5:1b:37:b6:1c:6c:d9:2b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b
Validity
Not Before: Jun 25 00:03:04 2026 GMT
Not After : Jun 26 00:03:04 2026 GMT
Subject: CN=483b1f499ff23ddd7540d37679a1a0beea9c8644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:ed:fb:19:88:fe:96:0e:f3:e0:aa:0d:49:
f2:14:d2:cd:4c:b2:a5:fa:4f:f4:e2:ed:32:9b:60:
d9:ba:49:56:c3:9d:c6:0a:bf:f5:85:99:6d:6d:30:
60:2f:66:09:05:90:52:15:a1:ca:c1:bb:7c:64:ac:
14:21:49:89:07:da:23:07:4d:8c:86:c4:1f:1e:ea:
5d:5a:b6:40:e6:b0:83:b4:e5:9b:54:d7:2b:55:8c:
1a:20:3c:0b:90:0f:d3:34:bc:f2:88:4a:64:1c:9d:
63:63:45:75:37:1b:34:b6:ac:49:cd:ef:97:c5:45:
7b:63:14:25:1a:94:7b:e8:7d:d4:e3:14:a7:d6:31:
c1:37:57:ae:f3:da:05:d9:01:fe:ad:f4:2b:fe:95:
2d:8a:45:4d:02:73:49:53:cc:89:31:74:bd:54:a1:
c1:98:98:39:80:b5:93:4a:da:94:eb:5d:ab:7a:a5:
68:d3:1b:da:b6:b3:cb:8d:d6:c9:c5:30:a1:25:31:
dd:a7:e3:03:fe:ab:9b:aa:d7:e3:88:60:80:67:45:
08:71:db:e6:5a:50:d6:11:f5:1c:1d:14:6a:52:c7:
f4:f5:1d:35:68:91:52:5b:66:e5:f5:9f:b1:42:ec:
a4:4e:60:8e:01:56:41:fb:38:a8:53:65:3c:e6:bc:
3b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3B:1F:49:9F:F2:3D:DD:75:40:D3:76:79:A1:A0:BE:EA:9C:86:44
X509v3 Authority Key Identifier:
keyid:2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:02:bb:13:8b:ea:0f:a5:a1:31:d8:1a:15:ed:35:b0:f9:ce:
12:0d:d0:43:93:4f:28:69:ce:31:c7:a6:10:65:80:22:b0:6d:
82:52:ab:3c:63:e0:86:39:9b:10:29:ec:f0:79:cc:ec:e0:40:
96:53:d2:62:b8:67:18:0d:de:d3:50:e6:5b:2a:ac:a6:84:20:
75:c4:91:fa:b7:56:69:3e:21:f8:17:6d:23:76:28:8b:89:04:
4e:e3:20:b3:2c:5d:60:79:aa:ec:9e:ff:37:42:78:e7:73:23:
0e:c9:75:91:37:64:ed:33:59:72:9d:d5:13:45:a8:04:0c:53:
f6:c6:76:e6:86:4a:1b:7c:a9:1c:8d:ba:ee:7f:e9:1b:dd:f1:
2a:ed:66:9b:0b:c1:fe:2f:ff:27:d3:b4:25:27:5e:c3:19:e9:
98:f9:07:73:88:08:e1:97:fa:fe:86:99:0b:31:fa:0e:fc:3e:
c7:82:38:78:82:33:ce:80:af:ec:b6:15:b3:3d:69:c1:01:9b:
b7:3f:30:04:59:2b:85:31:55:8d:8d:0b:99:d2:ac:b8:26:20:
23:7f:1e:bc:19:ad:0b:ba:27:e0:5d:63:90:cc:81:8a:08:3d:
0d:a0:1c:fb:2d:5e:d9:9c:16:9b:71:ee:08:aa:8e:5d:59:98:
c0:5a:2f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:41:47 2026 by rpki-client