Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
File: ldcL-AoHyf_L7wzYRltFjWE9zIU.mft (raw, json)
Hash identifier: OO0xz+xpULoPGvv6vzYE8AQbdsUrWIX4Dq+lwO4Jsus=
Subject key identifier: D0:71:95:92:EF:55:49:F5:4E:C2:5C:D7:23:2A:85:41:90:AC:E6:5F
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Certificate issuer: /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial: 019FA30507FE63B2DC05C4B0B12252C0E2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
Manifest number: 0CB6
Signing time: Mon 27 Jul 2026 10:00:43 +0000
Manifest this update: Mon 27 Jul 2026 10:00:43 +0000
Manifest next update: Tue 28 Jul 2026 10:00:43 +0000
Files and hashes: 1: BvAkaqIQMJfGpSIttKYw6u69UsY.roa (hash: HljiF1YNJTd/GJX5JhDeq7KwVETiH5Pa6f/ONTU55h8=)
2: VjaB08Ql0W9-r77gR-3DY__Jy88.roa (hash: YVfg6l74ML3q0VN2MwFzeG3ePk+gbLJopMwK+Q2eXHg=)
3: ldcL-AoHyf_L7wzYRltFjWE9zIU.crl (hash: 4ClE5bPDYnskszxxIp0o8Q3ka7nvkrTfVa5W8UWksbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:07:fe:63:b2:dc:05:c4:b0:b1:22:52:c0:e2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Validity
Not Before: Jul 27 10:00:43 2026 GMT
Not After : Jul 28 10:00:43 2026 GMT
Subject: CN=d0719592ef5549f54ec25cd7232a854190ace65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c3:e3:cc:46:87:15:e1:eb:80:78:14:0f:c1:
4c:a4:ae:63:ee:1a:c2:99:a7:c9:85:12:bf:ac:85:
86:8f:1b:42:89:23:6e:ae:21:ea:05:19:ec:b1:6a:
55:1b:1f:52:a7:d5:a7:13:8d:90:1a:bb:ed:2b:65:
af:c2:d4:33:1e:f6:be:b0:26:25:b2:d6:e1:25:8d:
24:3a:a9:98:a6:66:2a:53:92:15:e8:18:2c:92:66:
30:d9:70:26:a1:8e:66:5b:98:08:7b:26:18:59:eb:
d9:14:43:68:84:9b:f1:82:96:a0:85:63:95:b8:7e:
3b:4e:f7:53:52:8e:83:26:71:cb:a0:80:8c:7b:ba:
47:38:49:51:34:20:47:09:f6:06:0a:85:59:62:d4:
1b:6e:98:47:f0:7a:df:aa:51:02:41:be:54:0f:5e:
83:ca:64:7b:e1:d2:bc:8f:9a:25:cf:7f:e7:15:d5:
2d:35:4d:ac:b4:76:04:e8:2c:4a:32:20:8e:37:4e:
f1:7d:d8:74:bd:0a:84:14:34:b1:32:1f:af:4c:7c:
69:4b:15:0d:d0:2b:ff:20:a6:4e:61:66:55:22:e4:
c2:84:dc:16:7c:3b:37:ce:d4:cf:31:04:f3:1d:e0:
9a:b8:fd:06:6e:42:58:5f:b9:c3:7c:c6:d8:33:67:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:71:95:92:EF:55:49:F5:4E:C2:5C:D7:23:2A:85:41:90:AC:E6:5F
X509v3 Authority Key Identifier:
keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f6:a4:3f:c0:cc:75:0e:7b:6d:bf:ff:28:54:b6:0d:4a:34:
66:b3:22:20:5c:24:92:70:4c:3f:a0:9b:62:07:e1:25:11:e0:
b7:61:40:60:c0:fe:a7:6f:00:6f:12:cc:e5:ab:29:ed:9d:43:
3b:06:5f:18:d7:08:eb:2b:e8:c6:7a:4c:0a:78:2b:24:d8:f8:
a1:00:93:72:1f:1d:4a:74:bc:35:aa:27:51:93:d3:b1:8f:e6:
0b:39:fa:49:7b:2c:ea:38:4b:b0:7a:16:41:1a:35:a1:2c:78:
af:21:71:ff:1f:b7:c4:b0:91:f3:88:4a:3e:74:7b:4e:a7:e3:
2d:01:2a:0d:b1:ec:71:f6:e2:40:a3:2f:f3:8a:98:ec:30:9c:
c8:4c:44:87:fa:8e:09:77:42:a8:8c:12:f8:16:d2:e8:f6:c0:
05:6e:c3:73:ac:84:07:6d:ea:28:6e:61:95:91:3e:ea:04:8c:
c7:25:b5:be:90:20:2f:b6:73:00:d2:a9:0b:72:f9:c3:e6:24:
f2:bf:ef:be:61:50:6a:02:eb:98:52:40:f8:3c:01:04:17:24:
5f:78:3f:2c:08:c4:a1:83:7a:01:47:06:5a:42:50:d3:ed:2b:
9f:64:ca:92:67:03:40:3f:62:2d:35:9d:58:69:3c:32:13:cb:
74:26:a9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:57:59 2026 by rpki-client