Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
File: LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft (raw, json)
Hash identifier: tQNsJ+osZ8ZvHp2sMfmrT7rl0HszgRIRUyx1OlrgGjc=
Subject key identifier: F7:6A:27:74:F8:68:07:02:AA:1E:3C:E1:4A:0F:C3:F3:E0:45:DA:D4
Authority key identifier: 2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B
Certificate issuer: /CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b
Certificate serial: 01A110E02196D048249AE5E86EC8A23998A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
Manifest number: 03A6
Signing time: Tue 06 Oct 2026 11:01:26 +0000
Manifest this update: Tue 06 Oct 2026 11:01:26 +0000
Manifest next update: Wed 07 Oct 2026 11:01:26 +0000
Files and hashes: 1: LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl (hash: vyhagMOwdOngyh4FUA4qp1ogrT1CemIyYSY47DFiIz8=)
2: RvsaGrjxAX5qao7RR21kXobUgQM.asa (hash: q+rjI9IVipp8g9U0y29NEz+jK3MT4WSsT58lpW7Qlh8=)
3: fQmtrzrbzw4gWBCIWX8LdJFiKEE.roa (hash: 0Cel+oB84KUJsE+NVR0+1YgTW5yxAFtMO6zocsewmpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:e0:21:96:d0:48:24:9a:e5:e8:6e:c8:a2:39:98:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b
Validity
Not Before: Oct 6 11:01:26 2026 GMT
Not After : Oct 7 11:01:26 2026 GMT
Subject: CN=f76a2774f8680702aa1e3ce14a0fc3f3e045dad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:1e:dd:af:7e:65:4a:03:24:cf:b7:3b:8d:
59:ea:db:09:67:c1:e7:4b:5c:62:94:38:ed:71:2c:
5c:d3:0e:76:83:c7:e8:52:a8:a2:06:68:b1:8f:e2:
a4:44:fd:4e:db:4d:22:bc:7b:fe:2b:48:1c:33:22:
14:2d:01:ce:bc:27:74:05:79:b0:7d:39:80:97:87:
d2:20:89:07:4b:55:52:bc:2f:04:66:02:06:88:35:
8a:5d:6d:4c:5c:97:21:ac:fb:8d:95:1a:33:ba:f0:
e0:b1:48:2e:02:ce:07:bc:52:13:ca:21:44:1e:01:
cc:56:a5:6c:6f:ec:bd:37:1b:2e:f8:4d:f4:3a:bf:
b9:4f:33:a9:67:e6:d7:c9:22:cb:2a:fb:f6:89:f1:
17:3a:94:cd:07:b9:37:2f:00:9d:74:20:42:dd:5a:
dd:b7:8e:3d:99:33:99:af:73:a9:a8:db:a0:f0:bb:
38:b5:db:32:70:3d:27:92:04:14:d5:77:6c:fa:91:
8b:d2:38:13:65:68:d0:35:c9:03:90:45:19:d6:e6:
46:3a:2d:14:c7:90:5f:e3:98:e8:20:53:08:89:32:
23:1b:42:49:3a:24:9b:ac:1f:67:22:5f:6b:18:b5:
1a:66:91:39:2b:d2:ef:4f:96:3a:c6:81:ec:6a:fe:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6A:27:74:F8:68:07:02:AA:1E:3C:E1:4A:0F:C3:F3:E0:45:DA:D4
X509v3 Authority Key Identifier:
keyid:2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:57:56:74:6c:94:cd:5c:1d:48:82:72:76:86:24:0b:11:0f:
e8:63:53:81:10:68:7f:a5:5a:44:34:73:6f:33:16:a8:d9:a2:
16:ff:f2:7e:a9:dd:94:8d:94:a3:0c:42:c5:68:3f:5b:54:dc:
36:63:c6:c3:01:6e:b7:cf:cb:88:c4:37:4d:67:2a:d3:9b:34:
11:33:ba:cb:99:cf:89:34:4d:98:0b:bf:95:f5:13:fd:54:7f:
a5:4a:77:ac:04:86:b7:03:02:95:d5:10:f4:0d:23:66:04:70:
1c:b3:5c:14:2e:df:ae:40:29:d0:6f:04:ff:ab:a3:5a:86:75:
b7:15:6f:1e:b1:21:33:d8:45:ad:a5:5c:e9:fc:50:8a:a2:ab:
09:c7:c6:45:29:88:e2:b2:9e:ba:49:45:1a:34:73:ab:59:70:
93:f2:b8:45:53:4b:0a:42:41:41:44:b2:0c:06:90:9b:d1:50:
94:97:3a:5f:03:2d:0d:4b:47:c5:3d:1c:f3:e0:0e:d0:2f:c3:
14:4c:00:f7:97:40:f8:ec:64:12:95:3d:85:05:a5:5a:4b:ed:
bc:03:3d:c3:6a:3b:b9:c2:64:43:7e:28:64:b3:17:d9:85:03:
a8:1f:0b:34:36:21:d5:bb:a9:4b:e8:d7:f5:1e:c0:db:b6:8e:
ce:af:73:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEQ4CGW0EgkmuXobsiiOZioMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZDVlYTNjNzUzMGZkMDhjMjk5ZDgwODc1M2Y0N2I4ZGZi
ODRlMGIwHhcNMjYxMDA2MTEwMTI2WhcNMjYxMDA3MTEwMTI2WjAzMTEwLwYDVQQD
EyhmNzZhMjc3NGY4NjgwNzAyYWExZTNjZTE0YTBmYzNmM2UwNDVkYWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zEe3a9+ZUoDJM+3O41Z6tsJZ8Hn
S1xilDjtcSxc0w52g8foUqiiBmixj+KkRP1O200ivHv+K0gcMyIULQHOvCd0BXmw
fTmAl4fSIIkHS1VSvC8EZgIGiDWKXW1MXJchrPuNlRozuvDgsUguAs4HvFITyiFE
HgHMVqVsb+y9Nxsu+E30Or+5TzOpZ+bXySLLKvv2ifEXOpTNB7k3LwCddCBC3Vrd
t449mTOZr3OpqNug8Ls4tdsycD0nkgQU1Xds+pGL0jgTZWjQNckDkEUZ1uZGOi0U
x5Bf45joIFMIiTIjG0JJOiSbrB9nIl9rGLUaZpE5K9LvT5Y6xoHsav59fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdqJ3T4aAcCqh484UoPw/PgRdrUMB8GA1UdIwQY
MBaAFC3V6jx1MP0IwpnYCHU/R7jfuE4LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGRYcVBIVXdfUWpDbWRnSWRUOUh1Ti00VGdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xZmEwMzgtMzFjZS00YTJlLTlkNDUt
ZmVmMjRjMzk1ZjkxLzEvTGRYcVBIVXdfUWpDbWRnSWRUOUh1Ti00VGdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xZmEwMzgtMzFjZS00YTJlLTlkNDUtZmVmMjRjMzk1Zjkx
LzEvTGRYcVBIVXdfUWpDbWRnSWRUOUh1Ti00VGdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1dWdGyU
zVwdSIJydoYkCxEP6GNTgRBof6VaRDRzbzMWqNmiFv/yfqndlI2UowxCxWg/W1Tc
NmPGwwFut8/LiMQ3TWcq05s0ETO6y5nPiTRNmAu/lfUT/VR/pUp3rASGtwMCldUQ
9A0jZgRwHLNcFC7frkAp0G8E/6ujWoZ1txVvHrEhM9hFraVc6fxQiqKrCcfGRSmI
4rKeuklFGjRzq1lwk/K4RVNLCkJBQUSyDAaQm9FQlJc6XwMtDUtHxT0c8+AO0C/D
FEwA95dA+OxkEpU9hQWlWkvtvAM9w2o7ucJkQ34oZLMX2YUDqB8LNDYh1bupS+jX
9R7A27aOzq9zKg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:47:30 2026 by rpki-client