Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File: llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier: fL4IR1Ik6ffsPIKqWlRp0MvXxsUUrVr8uKKjBbQ927Y=
Subject key identifier: 0C:68:44:A3:DA:70:CB:89:09:68:8B:EE:FB:52:DF:8B:98:B4:92:6B
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer: /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial: 019DCD874A63E4B5E94CC8640FE4821AC848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number: 1042
Signing time: Mon 27 Apr 2026 06:01:28 +0000
Manifest this update: Mon 27 Apr 2026 06:01:28 +0000
Manifest next update: Tue 28 Apr 2026 06:01:28 +0000
Files and hashes: 1: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: OsRp+dCgqhdLVL9BegQndGbmG3as4BeFTWtVThdcvow=)
2: vsmnrTln0FKIYbUICJTrn_gYJUQ.roa (hash: 8GWosWzTHZxxvdZfNNXEvhtfiz2Ewi4ZMP6/Lvtvauc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:4a:63:e4:b5:e9:4c:c8:64:0f:e4:82:1a:c8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Validity
Not Before: Apr 27 06:01:28 2026 GMT
Not After : Apr 28 06:01:28 2026 GMT
Subject: CN=0c6844a3da70cb8909688beefb52df8b98b4926b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:78:a2:2c:0a:28:64:a6:25:43:76:c5:5f:
ce:f3:7d:18:ef:c4:a3:a4:83:a5:97:23:02:2d:c5:
36:ff:75:eb:d4:5e:b7:f6:9d:6f:37:87:67:2f:41:
26:43:27:d3:d5:95:78:d8:fa:c5:2a:cb:ae:b0:6d:
49:0f:5b:f7:6e:ef:d7:ec:4b:44:9f:60:08:ec:cb:
5c:b9:4a:5d:4e:2e:a6:38:cb:6c:75:f5:05:fa:25:
a6:37:96:c1:c4:6f:00:3c:ef:b5:9e:7c:6c:07:bc:
93:4d:d6:08:08:b3:f3:12:bb:ca:63:42:c5:7d:9b:
92:46:5c:1b:22:e4:94:5a:d6:2c:25:10:1e:ce:bf:
16:40:46:ee:48:92:94:d7:34:47:af:cb:a1:8f:53:
ce:4e:36:7e:77:c0:1b:c9:aa:fb:8e:2b:47:91:41:
d3:df:53:bb:e3:f2:c7:7e:df:83:ef:54:e6:98:ac:
1b:b2:18:87:a8:43:d5:10:6e:59:80:68:eb:59:bd:
58:df:fa:be:f7:2e:d5:69:50:b3:14:01:83:78:2b:
b2:1b:66:0f:de:e3:72:5d:0f:0e:8b:3f:21:40:09:
10:00:51:b2:9d:fe:2e:02:3e:4d:f1:a0:2c:ba:1e:
e2:ef:1c:a6:7b:9c:e1:9c:06:69:33:68:17:25:10:
44:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:68:44:A3:DA:70:CB:89:09:68:8B:EE:FB:52:DF:8B:98:B4:92:6B
X509v3 Authority Key Identifier:
keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:60:54:58:43:f1:10:25:cb:d2:83:cd:5c:fc:c8:ed:6d:fa:
58:e1:a0:6c:6d:d1:f9:7d:de:2c:c6:c8:14:8f:d6:cb:94:e0:
2c:1d:b0:d0:2c:a2:aa:7e:09:33:10:0f:d5:86:7c:32:e5:fe:
97:14:e7:59:9d:36:57:f1:b0:ef:46:ad:64:0a:d3:60:af:b7:
c7:b0:49:c1:b9:4a:8f:13:ad:d4:7a:97:26:fa:a9:b0:c5:25:
23:3e:c9:8c:0d:15:fb:42:33:41:39:0e:f4:e1:0e:41:0f:ad:
d5:7c:c8:40:25:d2:e8:f8:ca:ee:c8:16:6f:3e:10:cc:92:bb:
73:5c:15:1b:2f:b1:32:08:e6:91:a8:19:0f:62:77:92:aa:52:
e2:4e:e0:fe:a5:8e:e7:4c:41:14:08:6e:2f:8e:2f:c4:11:91:
5c:0f:aa:cc:8d:2e:19:0d:3e:42:45:aa:22:db:65:49:83:6e:
71:18:2f:c5:1f:bf:5a:08:e3:ba:92:12:02:94:16:76:6e:83:
60:53:2d:1b:30:9d:f7:d9:a9:c5:a2:d1:2e:ba:f7:b5:f0:e5:
fb:e3:cb:e0:47:c9:bc:c7:55:5b:8f:6d:51:ec:49:9c:aa:17:
88:ba:59:8f:34:bc:11:01:5e:e8:50:71:93:b8:00:e9:2d:71:
79:83:21:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Nh0pj5LXpTMhkD+SCGshIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NWE2YWJmZGIwODc0ZjJmZWMyMjYyY2RlYTMzNzNhZGNi
MmRjNTUwHhcNMjYwNDI3MDYwMTI4WhcNMjYwNDI4MDYwMTI4WjAzMTEwLwYDVQQD
EygwYzY4NDRhM2RhNzBjYjg5MDk2ODhiZWVmYjUyZGY4Yjk4YjQ5MjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC14oiwKKGSmJUN2xV/O830Y78Sj
pIOllyMCLcU2/3Xr1F639p1vN4dnL0EmQyfT1ZV42PrFKsuusG1JD1v3bu/X7EtE
n2AI7MtcuUpdTi6mOMtsdfUF+iWmN5bBxG8APO+1nnxsB7yTTdYICLPzErvKY0LF
fZuSRlwbIuSUWtYsJRAezr8WQEbuSJKU1zRHr8uhj1POTjZ+d8Abyar7jitHkUHT
31O74/LHft+D71TmmKwbshiHqEPVEG5ZgGjrWb1Y3/q+9y7VaVCzFAGDeCuyG2YP
3uNyXQ8Oiz8hQAkQAFGynf4uAj5N8aAsuh7i7xyme5zhnAZpM2gXJRBE/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxoRKPacMuJCWiL7vtS34uYtJJrMB8GA1UdIwQY
MBaAFJZaar/bCHTy/sImLN6jNzrcstxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xMjQxN2YtNzY2NS00MDk4LWEzMzgt
NDk0OWIxZTJiNjBmLzEvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xMjQxN2YtNzY2NS00MDk4LWEzMzgtNDk0OWIxZTJiNjBm
LzEvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWBUWEPx
ECXL0oPNXPzI7W36WOGgbG3R+X3eLMbIFI/Wy5TgLB2w0Cyiqn4JMxAP1YZ8MuX+
lxTnWZ02V/Gw70atZArTYK+3x7BJwblKjxOt1HqXJvqpsMUlIz7JjA0V+0IzQTkO
9OEOQQ+t1XzIQCXS6PjK7sgWbz4QzJK7c1wVGy+xMgjmkagZD2J3kqpS4k7g/qWO
50xBFAhuL44vxBGRXA+qzI0uGQ0+QkWqIttlSYNucRgvxR+/WgjjupISApQWdm6D
YFMtGzCd99mpxaLRLrr3tfDl++PL4EfJvMdVW49tUexJnKoXiLpZjzS8EQFe6FBx
k7gA6S1xeYMh1w==
-----END CERTIFICATE-----
Generated at Mon Apr 27 15:48:59 2026 by rpki-client