Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft
File: Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft (raw, json)
Hash identifier: w6CPF2Rc+6ajoNfQr3f5bWaYY1R70RmILWLcyJPYh9s=
Subject key identifier: 13:CB:A0:5E:CF:E2:11:AA:FD:B6:B1:B8:D0:14:01:2B:95:C9:54:19
Authority key identifier: 2E:E7:65:F6:13:D0:F2:58:55:59:86:ED:8C:C1:8A:A2:D8:18:25:0F
Certificate issuer: /CN=2ee765f613d0f258555986ed8cc18aa2d818250f
Certificate serial: 01A183AC7BEF0084C9990ADE3E29BE231F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft
Manifest number: 0142
Signing time: Wed 28 Oct 2026 18:01:21 +0000
Manifest this update: Wed 28 Oct 2026 18:01:21 +0000
Manifest next update: Thu 29 Oct 2026 18:01:21 +0000
Files and hashes: 1: AtDiavwmONmfcR6PyPSX1Y3q72M.roa (hash: 645rqeq+3xwCJ+dLSr46LUrzfMC+zVPjHY0f0QIzQr8=)
2: Ludl9hPQ8lhVWYbtjMGKotgYJQ8.crl (hash: LmZWOf4FoPL4FFpJ5TA+TATKc3wCJgABaek8Z2ucy1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:7b:ef:00:84:c9:99:0a:de:3e:29:be:23:1f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee765f613d0f258555986ed8cc18aa2d818250f
Validity
Not Before: Oct 28 18:01:21 2026 GMT
Not After : Oct 29 18:01:21 2026 GMT
Subject: CN=13cba05ecfe211aafdb6b1b8d014012b95c95419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:43:ce:24:7b:d5:f5:8d:37:2f:a6:b6:56:fb:
cf:b0:05:ab:bf:c7:81:b0:5b:4f:dc:26:a8:36:7f:
e8:00:51:33:73:c9:10:ee:d4:6d:a6:5a:ce:c7:05:
cf:2b:07:fa:e6:4d:b8:fe:8b:37:af:31:36:91:71:
fe:ac:3d:ff:49:f5:13:9c:b4:89:a8:8c:15:f6:64:
ec:70:ca:39:eb:1f:df:37:bb:c3:9f:f2:b6:1a:dd:
1b:e7:c9:a4:d1:c1:05:db:2e:2f:89:9a:b1:ff:bb:
8b:55:c5:c7:9a:84:f7:64:30:60:04:d2:4f:44:07:
cc:a6:94:5e:0f:3f:f7:e7:00:46:05:d3:73:7f:89:
2a:b6:4c:c5:05:bb:fe:2a:1b:c1:17:57:85:0d:c0:
0c:90:3f:f9:af:9b:d2:27:f7:89:28:8f:80:b9:f5:
d2:cd:72:42:da:c0:1e:dc:99:dc:62:69:84:d3:22:
2a:5d:c7:ea:51:3e:66:0a:44:eb:5c:a8:9d:53:11:
76:d1:c0:dd:51:82:16:d5:93:7f:b8:03:7d:29:bd:
0e:d6:e5:61:17:61:5e:e4:6a:0c:b5:89:86:b1:11:
05:c8:da:e3:b3:27:08:85:a5:ad:cc:d0:32:79:ae:
34:fc:12:36:19:0f:7f:b0:60:85:28:ad:2a:14:4e:
3f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CB:A0:5E:CF:E2:11:AA:FD:B6:B1:B8:D0:14:01:2B:95:C9:54:19
X509v3 Authority Key Identifier:
keyid:2E:E7:65:F6:13:D0:F2:58:55:59:86:ED:8C:C1:8A:A2:D8:18:25:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:32:25:f0:a0:d6:74:99:f0:ba:2d:15:d6:1d:c5:e2:4f:30:
ea:5d:f7:cf:d3:03:54:f8:ee:4e:30:b4:17:5d:01:49:7d:7c:
03:4f:4a:3d:ed:2e:d7:7f:70:09:8b:a9:1d:bd:e5:c1:10:ca:
80:a4:06:ef:db:41:f9:b1:f4:a1:2a:41:17:7b:28:6b:11:a7:
a0:4b:54:98:dd:27:e8:8f:4a:c0:45:64:0e:74:48:06:f2:da:
4f:bf:a7:0d:09:9f:65:d8:7f:bc:78:16:61:dd:58:0d:15:10:
eb:ec:61:6c:fc:f9:b2:8e:3e:b0:4c:71:41:6a:96:84:ed:ae:
f4:5e:bd:ea:5a:fe:16:3e:26:15:73:1f:af:83:65:9f:32:c0:
ed:c2:87:d5:7e:62:48:b3:78:f5:f9:4b:58:63:dd:a8:37:8c:
66:e0:98:c8:af:ca:77:99:43:9f:e6:9b:b2:95:6b:82:ab:c7:
77:03:40:7a:00:be:a0:21:bb:da:c9:97:13:0b:80:98:5f:7f:
91:95:3d:3d:b8:91:7c:b3:24:c9:d6:38:7c:11:4b:05:74:a4:
64:f2:bc:b6:42:dd:22:0e:4d:32:02:3d:25:6c:af:49:cf:97:
be:d4:90:39:ad:06:26:06:6d:6c:16:6c:f8:2a:2a:05:7b:d5:
1d:6d:98:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:50:35 2026 by rpki-client