Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
File: LdgAjePP9i0vrKENmf8gw-h43N8.mft (raw, json)
Hash identifier: nYw1Ntw5RvFvOFFFBkbYWbHC6o6G5FPp0YD8EWeCQ1Y=
Subject key identifier: C6:6E:4B:F5:BC:33:F1:FA:34:47:58:C6:0A:22:60:13:7C:F3:FC:8A
Authority key identifier: 2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
Certificate issuer: /CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Certificate serial: 019D38663839F28845026806AE8FF4C6A19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
Manifest number: 0750
Signing time: Sun 29 Mar 2026 07:01:56 +0000
Manifest this update: Sun 29 Mar 2026 07:01:56 +0000
Manifest next update: Mon 30 Mar 2026 07:01:56 +0000
Files and hashes: 1: LdgAjePP9i0vrKENmf8gw-h43N8.crl (hash: iV9lpSbu4Do2URcwXgVakwfOK8fG8pKv3pBLhm6CEzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:38:39:f2:88:45:02:68:06:ae:8f:f4:c6:a1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Validity
Not Before: Mar 29 07:01:56 2026 GMT
Not After : Mar 30 07:01:56 2026 GMT
Subject: CN=c66e4bf5bc33f1fa344758c60a2260137cf3fc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:55:68:33:5e:d1:c6:12:cd:a8:9e:da:7f:
8b:13:15:18:3c:d7:f1:c3:68:45:84:db:61:c3:fc:
df:5b:a2:ca:c2:89:6a:a6:b3:85:72:8e:3b:ff:da:
dd:f9:15:02:70:f7:af:b3:c6:0c:38:ac:26:e3:07:
4e:21:4d:79:d8:2a:6f:35:5a:d9:d1:d3:79:7b:6a:
41:10:83:57:1d:da:fe:8a:0d:a6:4d:3f:1a:1f:a5:
a7:9c:85:57:f4:98:c6:c8:43:94:22:e1:8a:5c:35:
56:e7:be:cb:1d:fa:ec:3f:1e:d7:c7:9c:33:fd:75:
33:06:50:28:49:5b:df:b9:d3:4f:43:02:27:ac:96:
7f:6b:0c:4d:e0:01:8d:a3:64:a3:b0:90:64:13:24:
4d:ab:d4:d8:5e:2c:48:c2:91:02:c5:48:6f:49:45:
89:ba:51:e5:41:b9:9d:a2:af:f5:45:c2:b6:ad:f0:
5c:06:b5:8b:f5:45:22:38:2b:9f:69:54:c7:6d:b3:
12:d5:59:5f:fb:60:21:6b:a1:bb:64:44:9d:f7:f8:
6e:ec:92:e3:e9:ea:73:3b:6f:18:a5:a3:42:95:c7:
bd:9d:58:81:6c:be:91:fd:ba:3b:09:c6:7b:90:16:
83:76:99:72:67:38:3a:a5:e4:46:55:51:98:39:bb:
92:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6E:4B:F5:BC:33:F1:FA:34:47:58:C6:0A:22:60:13:7C:F3:FC:8A
X509v3 Authority Key Identifier:
keyid:2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1e:93:4e:c5:2d:74:80:81:cf:4a:47:a0:b8:69:4c:e4:b1:
74:82:d6:56:7f:ce:b9:f7:a8:5b:dd:c3:2d:3b:d9:94:18:b2:
65:f7:c8:14:44:97:a6:d9:26:e7:f9:da:a8:5c:84:e1:39:2b:
48:26:a5:64:3f:7d:14:96:42:ed:37:50:79:fd:34:c0:22:e1:
da:af:11:66:8b:4b:79:0b:c9:20:3d:ea:96:dc:ca:a4:79:6e:
41:27:e2:5b:e2:48:de:40:91:31:73:46:b1:4f:97:71:1b:72:
4b:71:91:03:c4:9b:50:fa:4e:6c:b3:be:a9:d0:09:70:75:2a:
57:4e:ed:50:13:f1:4b:cc:78:8f:bb:12:cb:98:fc:b6:6e:88:
8f:3a:b0:09:f9:5a:c3:80:48:fe:94:55:d7:9b:b5:c6:2c:a9:
c7:55:a7:c5:22:2d:c5:a2:b3:82:0f:d8:41:5f:53:e3:05:e4:
cc:79:bd:fe:45:be:76:68:51:8e:75:c9:cf:7f:15:7f:e3:0f:
c8:06:d5:fc:d3:4c:81:38:a0:fe:29:3e:ad:bb:64:b0:0c:74:
cb:83:d2:94:d2:91:26:b0:39:43:99:ac:5d:59:66:07:17:ac:
1c:ed:04:09:7c:40:6f:4c:08:f5:83:36:64:fe:f9:77:f2:4c:
59:c6:e7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:17 2026 by rpki-client