Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier: WyDF10DZv3uOfYmO8pY1JWEoSsLmB+b3bdn1kEj2yKI=
Subject key identifier: 58:3E:71:20:BF:EC:07:9F:6A:36:3F:CB:43:CA:28:5D:17:CA:8C:63
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 01A139DB2B4876ABED5C9E96C4297F0F39AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number: 1AA2
Signing time: Wed 14 Oct 2026 10:00:27 +0000
Manifest this update: Wed 14 Oct 2026 10:00:27 +0000
Manifest next update: Thu 15 Oct 2026 10:00:27 +0000
Files and hashes: 1: QGW4LwlvDICFL2rpJRW4EK0DFIc.roa (hash: dEh5JmMpZS30YtylfZQmdL8aaYHuh+kMQSbQLZPHa4Q=)
2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: 8XLXAxFFNBr5m3YYCpA2ZFGu8Lwmo4gMKYn0m4HCS/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:db:2b:48:76:ab:ed:5c:9e:96:c4:29:7f:0f:39:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Oct 14 10:00:27 2026 GMT
Not After : Oct 15 10:00:27 2026 GMT
Subject: CN=583e7120bfec079f6a363fcb43ca285d17ca8c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ff:22:13:41:d9:95:40:e3:48:21:85:48:7e:
36:94:f0:ec:e2:40:61:fc:7e:14:f1:ce:37:69:99:
06:26:97:3a:e8:62:99:be:10:3e:04:7a:c3:55:b8:
33:52:f4:dc:08:59:6a:7c:52:28:33:47:6c:58:ff:
c1:a5:66:0f:47:96:77:0a:cf:85:5d:d1:6d:d5:86:
1d:1d:7d:b1:1e:17:2a:4e:0d:f9:f0:dd:d2:d5:d8:
cc:d2:c7:43:46:c5:7b:91:1b:89:24:88:16:de:ac:
3f:81:75:29:38:50:36:67:d0:fb:a6:79:10:65:16:
2a:5f:bb:69:52:61:b4:4f:2d:7a:89:84:13:15:37:
8c:6a:01:26:90:2b:a6:7b:20:5f:95:6a:0d:14:e0:
ba:76:73:ed:62:71:b4:f0:65:77:c5:68:fd:17:ea:
e9:dc:c8:e2:f3:2a:13:82:0d:c2:9c:ad:42:14:c3:
3f:f2:21:f2:5b:b1:81:ff:1d:92:8c:d2:1b:89:f2:
05:c7:fb:eb:90:d3:35:22:d5:80:91:f9:de:ad:ef:
13:3c:34:99:f7:d3:0a:f9:b3:d7:46:b8:9b:9d:80:
69:74:1b:58:b3:4b:76:7e:f2:65:88:a7:b8:91:72:
c3:86:a0:d7:e0:f4:cb:54:65:f1:6f:0e:fc:0a:34:
a5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3E:71:20:BF:EC:07:9F:6A:36:3F:CB:43:CA:28:5D:17:CA:8C:63
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:12:12:f8:b1:07:3c:b0:d6:29:8a:cd:ff:70:80:e5:d8:6e:
70:31:27:62:70:a2:f3:f2:17:67:f9:bf:bb:b3:4d:57:dc:74:
ad:0e:74:7c:f0:7e:cf:55:88:46:7e:d9:6e:a4:e5:ec:f2:34:
69:fb:e7:9c:00:e8:65:f7:8e:60:2a:92:cc:e2:c2:23:73:db:
c2:ff:1d:91:fe:86:6c:de:a4:d1:e1:ba:a8:f6:81:17:71:1f:
d3:2b:fd:6b:7f:2c:c2:f8:81:1e:ea:76:22:52:8c:f9:27:d4:
12:52:d1:9c:df:5c:b5:f1:6b:ce:3c:f9:45:77:28:f0:7b:88:
af:dc:ed:5c:2e:c4:7c:c6:03:ed:df:94:83:c7:d7:ce:b0:da:
86:86:e6:3e:be:a0:90:6f:d5:61:c9:ac:06:41:1e:e2:f0:e6:
2e:87:9f:f0:bf:fd:5e:7a:8d:ef:f6:e5:89:b9:56:01:05:a5:
7b:3b:9f:47:70:bb:61:06:46:b2:7b:89:ce:56:7c:ca:b0:d0:
18:be:29:32:4c:b8:76:65:c2:79:46:45:5b:8b:b2:dc:0e:40:
5b:b5:0c:df:a2:a8:29:b4:7d:d0:7b:60:79:42:58:86:88:d3:
ef:78:61:1b:93:8b:58:cf:c6:73:df:b6:c0:02:a1:53:2b:42:
1b:6d:23:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:48:26 2026 by rpki-client