Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft
File: Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft (raw, json)
Hash identifier: U396+jmRodj4rnehADexfX+AjHDjIewwKymfVcASJNc=
Subject key identifier: 62:9B:D5:18:4C:F9:EB:C1:C8:50:1A:D5:EE:29:8D:6A:4F:2A:4C:92
Authority key identifier: 2E:E7:65:F6:13:D0:F2:58:55:59:86:ED:8C:C1:8A:A2:D8:18:25:0F
Certificate issuer: /CN=2ee765f613d0f258555986ed8cc18aa2d818250f
Certificate serial: 01A08A8C2BE132615109C765D4C5788937FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:00:37 +0000
Manifest this update: Thu 10 Sep 2026 09:00:37 +0000
Manifest next update: Fri 11 Sep 2026 09:00:37 +0000
Files and hashes: 1: AtDiavwmONmfcR6PyPSX1Y3q72M.roa (hash: 645rqeq+3xwCJ+dLSr46LUrzfMC+zVPjHY0f0QIzQr8=)
2: Ludl9hPQ8lhVWYbtjMGKotgYJQ8.crl (hash: yTNqLiAZRC4IZwlSZFaxQUUGvzWI/UnIyiIOL4UnxvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:2b:e1:32:61:51:09:c7:65:d4:c5:78:89:37:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee765f613d0f258555986ed8cc18aa2d818250f
Validity
Not Before: Sep 10 09:00:37 2026 GMT
Not After : Sep 11 09:00:37 2026 GMT
Subject: CN=629bd5184cf9ebc1c8501ad5ee298d6a4f2a4c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c5:d5:06:51:4b:2f:51:1e:e5:23:a2:32:70:
9f:3d:32:1b:b0:93:fe:77:8b:05:d3:cf:ea:b5:55:
d7:70:15:fd:fa:5a:c0:63:30:fc:bf:21:99:cc:a6:
21:78:ee:d3:f5:88:d7:18:e2:03:3b:95:6d:6e:61:
87:52:25:c7:56:d4:ed:a8:46:d8:55:8a:39:ae:67:
8e:97:a8:bf:a3:0e:9a:21:11:c3:82:51:e5:9c:ae:
1a:5e:fe:63:f7:ed:66:35:db:f7:cc:ea:35:c0:28:
78:69:3b:88:14:fd:e7:00:81:d6:75:ea:c4:04:60:
ed:d4:49:94:d3:8e:dc:86:6f:d2:5b:81:50:aa:ce:
18:cc:8d:49:81:e5:a5:2a:c7:2d:58:95:3a:eb:4d:
d3:1b:26:ae:08:ee:ca:1a:01:c2:ed:f6:a8:a1:f6:
a2:76:37:78:94:43:89:3d:d1:75:fc:62:7e:fc:49:
fd:a0:14:f1:bd:69:ef:10:db:f9:84:f6:45:25:6a:
9f:1d:85:c2:7c:83:55:11:18:65:49:58:09:e1:05:
30:35:9c:71:9a:af:d6:f7:b5:77:9b:00:23:e0:92:
0f:6c:7c:a6:6a:94:4a:02:49:e6:a3:c4:ea:c7:49:
ca:b4:5e:35:96:1b:f8:e9:71:ef:ed:40:5e:b8:89:
d3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9B:D5:18:4C:F9:EB:C1:C8:50:1A:D5:EE:29:8D:6A:4F:2A:4C:92
X509v3 Authority Key Identifier:
keyid:2E:E7:65:F6:13:D0:F2:58:55:59:86:ED:8C:C1:8A:A2:D8:18:25:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ad:5b:ba:8c:ce:7c:9b:cf:01:29:a7:b2:ea:4a:6a:a8:8e:
cd:f9:b2:55:72:ed:cc:17:98:c7:72:36:0d:5d:cf:e7:e3:f5:
ee:a8:76:7f:88:2d:c4:dd:c8:c9:a2:ff:0c:32:cb:a4:9f:73:
ce:84:35:ed:db:08:1c:6d:6c:f6:a3:2f:2d:2a:53:b1:f1:93:
7c:66:1d:69:92:dc:2c:dc:b5:7a:6d:0d:82:c6:f8:7e:9d:36:
cf:0d:81:f9:bf:54:48:f8:e2:95:7a:f9:a0:1f:46:23:9f:b9:
29:9a:bb:03:70:71:f9:97:89:dc:a9:df:d9:98:4d:42:95:47:
d5:49:eb:99:bc:55:dc:b0:4d:fa:f7:3d:49:0a:27:7d:ac:58:
94:d8:56:17:99:2a:49:9c:9c:25:6a:1f:c5:05:7a:6a:bd:77:
35:44:d0:54:30:41:45:cd:17:f9:99:65:f9:38:f9:a4:5b:3f:
a1:95:85:76:9e:1b:7a:54:1a:39:5c:e5:98:12:6a:64:6b:47:
73:38:02:f7:ea:f6:fc:97:f2:a0:25:cb:06:0a:f3:5b:8e:17:
93:7e:3d:df:78:0a:e6:fa:ea:28:1b:4c:98:6b:9c:73:cb:b8:
da:4f:46:f2:8b:3e:b5:59:38:7c:3d:87:b4:4b:0c:5b:14:e2:
12:8e:03:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjCvhMmFRCcdl1MV4iTf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTc2NWY2MTNkMGYyNTg1NTU5ODZlZDhjYzE4YWEyZDgx
ODI1MGYwHhcNMjYwOTEwMDkwMDM3WhcNMjYwOTExMDkwMDM3WjAzMTEwLwYDVQQD
Eyg2MjliZDUxODRjZjllYmMxYzg1MDFhZDVlZTI5OGQ2YTRmMmE0YzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8XVBlFLL1Ee5SOiMnCfPTIbsJP+
d4sF08/qtVXXcBX9+lrAYzD8vyGZzKYheO7T9YjXGOIDO5VtbmGHUiXHVtTtqEbY
VYo5rmeOl6i/ow6aIRHDglHlnK4aXv5j9+1mNdv3zOo1wCh4aTuIFP3nAIHWderE
BGDt1EmU047chm/SW4FQqs4YzI1JgeWlKsctWJU6603TGyauCO7KGgHC7faoofai
djd4lEOJPdF1/GJ+/En9oBTxvWnvENv5hPZFJWqfHYXCfINVERhlSVgJ4QUwNZxx
mq/W97V3mwAj4JIPbHymapRKAknmo8Tqx0nKtF41lhv46XHv7UBeuInTCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKb1RhM+evByFAa1e4pjWpPKkySMB8GA1UdIwQY
MBaAFC7nZfYT0PJYVVmG7YzBiqLYGCUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVkbDloUFE4bGhWV1lidGpNR0tvdGdZSlE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9iNDUwYWYtMjA5MS00ZWYyLWI1ZjUt
MmI3YzFlZGYxMTZhLzEvTHVkbDloUFE4bGhWV1lidGpNR0tvdGdZSlE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9iNDUwYWYtMjA5MS00ZWYyLWI1ZjUtMmI3YzFlZGYxMTZh
LzEvTHVkbDloUFE4bGhWV1lidGpNR0tvdGdZSlE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMq1buozO
fJvPASmnsupKaqiOzfmyVXLtzBeYx3I2DV3P5+P17qh2f4gtxN3IyaL/DDLLpJ9z
zoQ17dsIHG1s9qMvLSpTsfGTfGYdaZLcLNy1em0Ngsb4fp02zw2B+b9USPjilXr5
oB9GI5+5KZq7A3Bx+ZeJ3Knf2ZhNQpVH1UnrmbxV3LBN+vc9SQonfaxYlNhWF5kq
SZycJWofxQV6ar13NUTQVDBBRc0X+Zll+Tj5pFs/oZWFdp4belQaOVzlmBJqZGtH
czgC9+r2/JfyoCXLBgrzW44Xk34933gK5vrqKBtMmGucc8u42k9G8os+tVk4fD2H
tEsMWxTiEo4DiQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:40:15 2026 by rpki-client