Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File: LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier: 2YXn2K8ZTKbW/XHG1Z7p/ifTgjFC1QVChAEb16Es47c=
Subject key identifier: 83:85:3F:53:4C:E2:D8:86:D8:B7:31:4E:F8:94:E5:F5:ED:4A:55:9E
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 019F8230C93E331CA1A9ED95F373057DB2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number: 0998
Signing time: Tue 21 Jul 2026 01:01:02 +0000
Manifest this update: Tue 21 Jul 2026 01:01:02 +0000
Manifest next update: Wed 22 Jul 2026 01:01:02 +0000
Files and hashes: 1: 2WFOqZZA2yIUnQ_6eth3jx2NPnU.roa (hash: z8D6G5qAyZtOctuyLt0W9PyzjKIioqDo4g6gtUqBJsA=)
2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: cHfiYhIm3aIYuDrNQmXO6xJfmft6D/H/liQsjmN7V+Q=)
3: ibmc9wsJZvcLnKLI-HoZNttO1zA.roa (hash: xpCzDqZRfT8zeb7gy3XI7XFp4/7LKgH6afs/PfJpe7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:30:c9:3e:33:1c:a1:a9:ed:95:f3:73:05:7d:b2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Jul 21 01:01:02 2026 GMT
Not After : Jul 22 01:01:02 2026 GMT
Subject: CN=83853f534ce2d886d8b7314ef894e5f5ed4a559e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:e2:cd:76:83:79:20:5d:ac:3d:10:fa:fe:
39:6b:75:2f:a5:dd:35:8c:fa:58:ba:ee:a7:a8:23:
ab:33:6c:a1:5f:c7:44:9d:5c:85:c2:15:6c:d5:70:
26:ee:ed:66:5c:cc:ff:68:f9:7c:7e:94:72:86:1e:
ca:c0:bc:59:dd:94:c1:b3:20:7b:ad:97:c6:b0:bb:
95:90:5c:f6:df:d1:75:9d:9f:04:3d:aa:85:7f:1c:
a2:d2:14:88:51:47:2b:4c:3f:c5:3f:1b:4d:be:b6:
80:97:20:81:3b:bd:23:db:8e:03:09:25:8f:97:ac:
73:1e:46:d8:32:b3:3a:0a:5c:46:30:a3:8f:35:38:
4c:aa:f6:3c:02:30:d1:02:02:de:e7:b2:5a:60:c1:
b6:7f:e8:1b:f1:ea:cb:47:7b:bf:4f:d2:b2:34:be:
9b:5b:c5:14:0f:43:31:06:b4:06:8d:f0:63:12:6e:
e9:9d:eb:4b:cd:5b:e8:69:50:d7:64:cf:79:1d:79:
6d:b5:71:ae:25:44:ba:91:86:be:f9:ee:8b:75:17:
22:45:c4:2c:de:a5:cf:c4:5d:6b:24:77:ea:b2:7c:
8d:c4:36:36:e9:2a:bc:b7:12:82:af:26:2a:c0:86:
4a:bd:27:81:1a:8f:2c:6a:02:3a:ac:8e:f4:ca:eb:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:85:3F:53:4C:E2:D8:86:D8:B7:31:4E:F8:94:E5:F5:ED:4A:55:9E
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:12:28:01:18:61:09:f6:0e:8d:e0:7d:57:5a:5d:e5:41:d8:
47:d6:78:d6:10:b9:6a:72:69:92:21:8b:53:b2:22:aa:b3:12:
b8:41:eb:eb:67:86:19:b6:b9:e8:ee:68:e2:58:0f:1b:41:f9:
10:3a:ed:fc:63:43:4c:88:9d:ec:4a:b8:14:99:e5:a8:de:84:
f9:bf:bf:e4:62:73:00:14:76:f9:39:4a:12:0f:c6:b4:55:ff:
40:b9:d9:14:0e:2d:3e:a3:15:b0:78:b4:a6:b2:73:d3:68:19:
da:32:b1:86:46:85:8a:d9:29:2b:0f:e2:44:1a:82:eb:06:9e:
11:08:9d:b2:c1:01:f4:da:40:f2:49:59:b5:ee:31:fc:4b:f2:
5f:f4:68:1c:da:e0:9f:3e:1a:f2:81:03:3b:1f:1d:42:85:86:
a9:a7:17:ae:69:0e:d7:3a:1b:d2:57:9c:93:b1:ce:c0:d9:ef:
44:99:ec:f3:44:4f:f6:f9:a6:77:e4:df:bf:76:f1:b2:f0:52:
67:b8:c4:5d:54:f1:ac:96:ab:00:a6:1a:3a:41:7e:70:f3:21:
9b:cb:e0:92:ac:aa:b8:46:63:6c:ee:5e:48:b0:a6:9d:91:5a:
22:76:79:b7:8a:11:1d:fa:ab:00:61:56:d6:8e:5a:de:da:45:
79:79:57:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:44 2026 by rpki-client