Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
File: llxaucCRqzxFBQaKkv_LAZhJqng.mft (raw, json)
Hash identifier: hdhZDeYh7Xg9AFH3gXJx7q8vyfl54PPe58XVtR4kjYg=
Subject key identifier: 0C:7F:BB:3B:03:CE:9B:66:FA:6C:02:27:CC:E2:5F:FE:AB:30:AA:3F
Authority key identifier: 96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
Certificate issuer: /CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Certificate serial: 019D371BA67D83AAC265CCF9E5BEFBD5C4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
Manifest number: 17F4
Signing time: Sun 29 Mar 2026 01:00:52 +0000
Manifest this update: Sun 29 Mar 2026 01:00:52 +0000
Manifest next update: Mon 30 Mar 2026 01:00:52 +0000
Files and hashes: 1: 7Em6m0eOG2ORXVo2QzO-nLgQAwE.roa (hash: S5HUFhQEQs2JuXJGAn7o8orB6NiPPcNSTOFKC5UZEp4=)
2: llxaucCRqzxFBQaKkv_LAZhJqng.crl (hash: K0yWOauS/zchMwdZYB7HUzyu1owyNFpdU6d0evpCIFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:a6:7d:83:aa:c2:65:cc:f9:e5:be:fb:d5:c4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Validity
Not Before: Mar 29 01:00:52 2026 GMT
Not After : Mar 30 01:00:52 2026 GMT
Subject: CN=0c7fbb3b03ce9b66fa6c0227cce25ffeab30aa3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:4f:59:71:11:7b:b6:fa:ba:4a:9f:70:6a:
f6:5a:d4:b5:6d:62:e4:7a:8d:87:e6:01:7a:54:65:
07:db:ba:92:0b:e4:15:00:39:0c:51:9a:e8:80:dc:
04:94:c2:15:d6:23:9e:2b:bb:41:e8:51:4f:6d:f8:
ea:aa:88:6d:af:81:ad:6c:24:01:f7:96:44:67:ec:
2b:b6:86:3b:0f:f1:94:65:e9:3e:21:1f:91:51:0f:
b5:d1:55:f7:17:9e:e9:f2:7e:96:17:fd:26:7d:69:
b8:9e:e1:a9:b9:21:f2:48:0a:b2:13:0d:e4:95:aa:
66:a5:16:bd:99:5b:3a:d4:29:f7:ce:69:e0:35:3f:
3d:0f:b1:6a:ba:a1:12:03:0e:f9:ad:b3:47:08:7e:
bd:2d:6f:a5:ad:c4:dd:20:bd:7a:2f:b8:44:60:d3:
90:de:b6:99:f6:2c:63:e6:bd:e5:db:0a:a4:32:b6:
b1:7a:f0:40:36:31:14:87:f1:7e:2a:2c:d1:97:f3:
d0:67:a4:d3:d3:38:32:fe:22:68:c5:f9:19:37:f2:
f8:3f:86:17:bf:db:b9:ff:f2:24:90:26:14:36:78:
6d:1a:62:32:3b:4e:20:15:db:4f:96:3c:02:82:b6:
65:ac:0d:24:02:ab:af:2a:48:6c:49:99:15:55:00:
0b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7F:BB:3B:03:CE:9B:66:FA:6C:02:27:CC:E2:5F:FE:AB:30:AA:3F
X509v3 Authority Key Identifier:
keyid:96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:57:0d:13:28:4c:6d:7f:ea:c3:64:ac:ae:13:d8:6b:07:10:
e9:9f:da:67:d1:79:00:19:41:74:a8:71:36:c8:60:3f:03:9b:
07:63:99:a3:63:e3:f3:05:89:ea:83:2a:d0:38:5f:ba:c7:a1:
2e:e6:cc:38:5f:98:fe:e2:f6:dd:4f:bb:57:29:f5:f8:14:c2:
4a:90:4f:e6:5e:c0:ab:1c:bb:75:05:b3:79:e3:84:84:bb:fe:
6d:5e:52:38:a5:e4:c2:1f:ef:cd:6b:13:00:bf:d6:f3:ad:43:
81:cb:be:c7:9c:eb:e1:00:2b:a5:e5:39:ab:a7:e3:67:28:a0:
de:28:bb:a0:fb:2c:fc:10:63:41:68:9e:8a:8c:73:95:c2:ba:
70:77:ea:13:fd:e6:5d:cf:44:c8:4a:1e:0f:fd:4c:52:1b:c7:
da:d8:90:f3:33:86:60:b5:e1:8a:5f:4b:be:bd:9f:b1:f3:04:
2a:2f:06:a2:68:d0:b3:5e:50:6c:15:a5:43:cd:e9:75:99:47:
79:26:ab:ca:3b:00:cb:3c:da:2e:8c:0e:c1:00:6a:80:e3:bc:
5d:1c:fa:a3:a1:8f:17:ce:cb:0a:d9:83:c9:6c:02:4b:ef:57:
54:f8:8c:7d:66:93:aa:07:24:77:74:ae:63:16:28:75:c8:bb:
f3:93:16:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:15 2026 by rpki-client