Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
File: LED81TmHsgn4rznKEhHycGCokC4.mft (raw, json)
Hash identifier: dbgq10LBu9/TWmAR5ryLWHg3PP/Bg5nD9i/X+lyMXUI=
Subject key identifier: 74:5D:80:7D:D9:AC:BC:66:9A:24:1B:17:BC:4A:EF:DF:D3:A7:08:D8
Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Certificate serial: 019D38655570381B4EEBE089644A63321BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
Manifest number: 1363
Signing time: Sun 29 Mar 2026 07:00:58 +0000
Manifest this update: Sun 29 Mar 2026 07:00:58 +0000
Manifest next update: Mon 30 Mar 2026 07:00:58 +0000
Files and hashes: 1: LED81TmHsgn4rznKEhHycGCokC4.crl (hash: Ta/gNDIJDb5ydtNpvmesDtbT75ZRDtlr7J9aS8c0ZkQ=)
2: TPBr4qhuEHbVrpx83N8QUJTDNdU.roa (hash: C2m3VR4l9I+Rc76oZzgGxywyrqTLMzeW3a0jSsQhw3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:55:70:38:1b:4e:eb:e0:89:64:4a:63:32:1b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Validity
Not Before: Mar 29 07:00:58 2026 GMT
Not After : Mar 30 07:00:58 2026 GMT
Subject: CN=745d807dd9acbc669a241b17bc4aefdfd3a708d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:1a:21:76:0b:be:5b:da:4d:be:1d:37:8d:
fd:de:36:50:06:57:9e:7e:dd:ad:8f:2b:90:c2:92:
af:6d:aa:eb:bb:4f:d0:ed:3c:05:7f:1d:6c:76:67:
67:00:b5:29:31:14:a0:a7:0d:61:db:02:76:f4:15:
15:92:83:60:8a:aa:04:5b:a1:88:40:c6:7d:8f:41:
21:9e:94:60:1e:98:0b:84:49:88:ee:6a:03:ce:32:
79:db:76:ab:b4:58:89:b2:34:db:1b:ee:93:80:4f:
e1:15:56:b0:45:ff:e1:ac:ed:78:cf:40:99:bc:f2:
50:32:91:78:83:94:8b:fc:5f:0f:2b:e6:af:0a:8a:
c5:81:60:a4:55:d8:47:76:6c:dc:bd:59:43:e9:e4:
a4:cb:2a:12:32:49:b1:35:df:ae:24:a8:5c:a7:0b:
6f:45:81:0c:b6:6a:72:2d:30:45:83:38:8d:a2:cd:
e5:74:48:04:ee:3e:db:eb:32:28:2f:f5:79:a5:3c:
d3:16:78:db:41:ff:cd:e9:47:63:53:63:f1:ed:1e:
82:88:28:ba:ff:ad:73:3f:63:84:41:bd:79:78:a6:
16:cf:eb:06:f8:f6:3f:0e:48:41:1a:3c:e9:ec:d6:
65:ef:14:7f:47:3c:df:ba:31:0d:51:42:ad:5e:a1:
0a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5D:80:7D:D9:AC:BC:66:9A:24:1B:17:BC:4A:EF:DF:D3:A7:08:D8
X509v3 Authority Key Identifier:
keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:88:34:0c:09:03:14:69:0b:6c:dc:84:b5:42:0c:c6:8c:b2:
e3:11:2f:bd:b7:2a:bd:5e:71:6d:72:ad:ff:c5:a6:c4:cd:90:
a4:62:09:4c:35:1f:38:ef:db:2d:23:ab:e0:3b:ae:14:2a:3e:
8f:27:62:21:b3:79:62:e5:71:e4:b9:72:65:bc:2c:fd:16:17:
a9:18:f6:d4:c3:37:03:8f:e4:b0:9d:f0:65:c6:d7:e5:28:57:
ca:39:0d:c4:be:11:6f:05:fd:93:7a:3e:3c:c9:31:be:51:5d:
e7:06:15:58:7f:06:19:03:b1:0d:a0:9d:c4:f0:2e:bb:9d:7a:
6b:5b:a8:ae:64:56:a0:19:c2:b0:dd:43:0e:97:3f:43:b1:a7:
16:17:ea:bc:36:6b:cf:e9:44:80:00:7f:5c:4d:2a:b9:14:98:
e2:21:5e:4e:cd:46:b5:ea:f9:2b:8e:1b:60:03:36:29:da:03:
2a:07:f5:dc:dd:18:07:b3:3d:7d:72:af:6b:65:21:71:4a:94:
49:f1:73:58:07:b5:b6:fb:50:a0:5e:ed:5b:c3:ed:af:70:a0:
d0:a2:c9:20:63:1a:da:6f:c0:d2:d0:20:a3:df:68:c5:1d:f9:
4d:09:fc:9e:e9:40:06:66:f5:53:f0:82:85:92:fb:8d:f0:c6:
42:ee:28:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:14 2026 by rpki-client