Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f87d88-4d7f-4898-a502-892d60bea225/1/LDAdTyasJ2x2gaz8_M2shjwcB_s.mft
File: LDAdTyasJ2x2gaz8_M2shjwcB_s.mft (raw, json)
Hash identifier: Td+D1SJhOMSC13j5Ov82QailCMrcj5VBSHb9+yN4/aQ=
Subject key identifier: 8A:A5:8B:DD:0E:0C:C0:FC:05:46:75:47:7B:F1:DD:81:FA:F1:02:4A
Authority key identifier: 2C:30:1D:4F:26:AC:27:6C:76:81:AC:FC:FC:CD:AC:86:3C:1C:07:FB
Certificate issuer: /CN=2c301d4f26ac276c7681acfcfccdac863c1c07fb
Certificate serial: 019D390A2619EBA266D0140B6402CBF2E2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDAdTyasJ2x2gaz8_M2shjwcB_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f87d88-4d7f-4898-a502-892d60bea225/1/LDAdTyasJ2x2gaz8_M2shjwcB_s.mft
Manifest number: 01A5
Signing time: Sun 29 Mar 2026 10:00:59 +0000
Manifest this update: Sun 29 Mar 2026 10:00:59 +0000
Manifest next update: Mon 30 Mar 2026 10:00:59 +0000
Files and hashes: 1: LDAdTyasJ2x2gaz8_M2shjwcB_s.crl (hash: e1O4whBqRb1Hc6RschVBrLNOhts1lKAJp6W2zS6zmkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f87d88-4d7f-4898-a502-892d60bea225/1/LDAdTyasJ2x2gaz8_M2shjwcB_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f87d88-4d7f-4898-a502-892d60bea225/1/LDAdTyasJ2x2gaz8_M2shjwcB_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDAdTyasJ2x2gaz8_M2shjwcB_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:26:19:eb:a2:66:d0:14:0b:64:02:cb:f2:e2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c301d4f26ac276c7681acfcfccdac863c1c07fb
Validity
Not Before: Mar 29 10:00:59 2026 GMT
Not After : Mar 30 10:00:59 2026 GMT
Subject: CN=8aa58bdd0e0cc0fc054675477bf1dd81faf1024a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:cd:63:bf:4f:2a:95:6a:b2:04:d5:af:5f:
eb:40:a1:b6:af:6e:db:eb:d1:c8:9c:ec:77:77:9f:
ac:de:35:f9:ee:c2:ae:48:b4:42:11:6c:26:8e:67:
6e:13:07:89:02:7a:41:8a:23:a8:23:08:41:d6:e2:
42:b8:72:42:c3:c2:1f:98:5e:87:83:2d:09:b3:a7:
44:c3:5e:03:09:19:fa:97:5a:20:7b:74:10:d0:d0:
49:03:1d:65:98:37:f0:07:82:40:ad:46:8a:91:fd:
a3:71:ac:53:06:f9:1c:6c:82:ff:c4:84:71:2d:60:
bf:c6:a2:29:c2:e6:84:9b:a6:e1:c7:6c:87:92:1a:
65:9f:9e:3b:7e:53:4f:67:6d:fb:78:9d:ce:92:7a:
4e:74:bb:bb:e9:c6:c5:75:c5:16:23:60:a2:d8:a3:
a9:e9:b2:5f:20:f4:be:20:70:61:01:48:d1:e8:bb:
6e:60:3f:11:f3:83:a1:72:5b:f9:8c:54:65:4b:7e:
59:61:df:0e:77:ad:39:75:21:1c:74:90:06:be:2b:
fb:eb:3f:17:86:f8:e9:4c:9b:28:77:8d:b3:59:11:
7b:1c:1c:ba:4b:68:f3:dc:be:45:2a:7b:fd:c2:58:
8a:4c:ca:52:af:3d:6e:b7:d1:6c:3d:e8:6e:1b:07:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A5:8B:DD:0E:0C:C0:FC:05:46:75:47:7B:F1:DD:81:FA:F1:02:4A
X509v3 Authority Key Identifier:
keyid:2C:30:1D:4F:26:AC:27:6C:76:81:AC:FC:FC:CD:AC:86:3C:1C:07:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDAdTyasJ2x2gaz8_M2shjwcB_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f87d88-4d7f-4898-a502-892d60bea225/1/LDAdTyasJ2x2gaz8_M2shjwcB_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f87d88-4d7f-4898-a502-892d60bea225/1/LDAdTyasJ2x2gaz8_M2shjwcB_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:77:e3:d8:7b:63:15:a2:e9:18:99:c9:e0:bb:7c:4a:45:50:
af:3f:be:af:a1:88:4f:5e:1d:ed:d2:a6:d7:f0:73:0b:52:73:
55:fe:fb:8e:1b:23:fe:62:8f:02:0f:75:ed:a1:1e:8f:7e:93:
41:45:98:4e:f5:22:d1:d2:96:83:19:4f:96:53:af:6e:83:bb:
ad:77:ef:c5:c4:af:00:22:ee:72:3a:dc:98:88:ca:39:89:1c:
9e:34:43:c5:40:76:0c:88:2a:d4:b1:8d:73:1c:07:db:5f:d7:
1b:98:fb:17:6e:1e:8a:53:20:e9:43:a8:b9:da:0b:23:37:4f:
44:d3:81:6c:88:31:d1:0f:17:05:55:6c:44:de:6a:25:09:ca:
17:75:9d:e5:c3:b7:5d:bf:0b:1d:0c:6c:94:cc:de:2b:41:da:
51:32:83:f9:3a:44:0f:44:12:be:b6:aa:d3:9f:92:16:cd:5f:
60:2f:91:be:85:0f:8f:5c:bd:76:3d:4e:4f:29:e0:b4:b8:bd:
99:cb:45:42:1d:4b:65:ab:07:3c:af:ba:09:4e:bc:87:94:fb:
9c:65:11:c8:0f:ff:b1:c8:df:b5:1a:58:9d:cb:1b:2d:a2:7c:
b7:ec:f0:66:51:fe:eb:b6:e6:09:45:8d:5c:e5:76:e4:9d:f8:
72:01:3c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:59 2026 by rpki-client