Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier: r3n3/UMltGuDkAKKMXIWRYEPeOAbpxgfHZXjBxTbNXs=
Subject key identifier: 19:FB:29:39:30:06:CB:78:00:3B:BC:91:4F:2D:D0:57:D6:00:C5:5D
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 019D38667FFC262FFD582C1DC978E3DF5DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:02:14 +0000
Manifest this update: Sun 29 Mar 2026 07:02:14 +0000
Manifest next update: Mon 30 Mar 2026 07:02:14 +0000
Files and hashes: 1: QGW4LwlvDICFL2rpJRW4EK0DFIc.roa (hash: dEh5JmMpZS30YtylfZQmdL8aaYHuh+kMQSbQLZPHa4Q=)
2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: hFAiawUj/HTASSHHGAJaTLUnE41b0nAekqnsevA0cq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:7f:fc:26:2f:fd:58:2c:1d:c9:78:e3:df:5d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Mar 29 07:02:14 2026 GMT
Not After : Mar 30 07:02:14 2026 GMT
Subject: CN=19fb29393006cb78003bbc914f2dd057d600c55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:a0:2a:ab:d6:9f:bb:fd:18:b0:58:fe:fb:
da:96:b7:02:cf:8f:ac:6b:bd:e9:77:5f:19:c9:7f:
58:38:d7:ae:c9:43:3d:64:15:54:a4:78:b4:f9:df:
e1:c3:77:ba:0a:d8:bd:d3:5c:42:cb:17:e5:25:08:
44:8c:b3:dd:8b:9d:70:4c:04:f1:80:3d:73:0f:c3:
5f:ba:37:24:61:15:7b:86:69:59:a4:af:44:b9:ce:
59:2b:26:fb:18:a3:51:80:45:85:dd:43:bf:31:72:
6c:1f:a6:c8:32:f6:8e:d8:c2:79:16:02:bf:0c:f0:
a8:49:be:4d:51:77:42:0d:94:02:65:3c:fb:72:89:
1d:a5:bf:54:50:99:ea:00:b3:86:59:fe:de:48:96:
17:e4:34:3d:76:4f:e5:a2:98:29:9d:1e:79:f3:48:
ae:dc:74:4b:72:1c:37:f8:ba:29:9c:01:40:a0:a3:
e7:86:17:64:a3:de:0e:3d:b6:34:a2:0f:55:32:82:
35:0c:60:2a:53:8c:fc:db:40:5c:b7:d4:13:45:73:
31:c6:ef:af:b7:f6:f1:63:87:9d:c8:d2:36:d7:ed:
0c:50:4f:6a:b4:ed:c0:7f:1b:3c:c7:12:24:04:65:
c6:aa:6f:6d:39:09:b0:66:9c:bc:cf:19:ca:05:18:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FB:29:39:30:06:CB:78:00:3B:BC:91:4F:2D:D0:57:D6:00:C5:5D
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e5:4d:e8:29:18:88:86:8f:b8:9d:df:f4:7f:b5:f7:87:df:
0b:b8:20:2f:32:1a:83:bc:ec:e9:b6:1c:70:30:3b:e8:76:1b:
65:f0:68:90:d4:a3:d2:de:60:aa:3a:9d:84:c2:07:13:eb:50:
e1:1a:13:3d:3e:2a:79:a0:8b:3d:88:03:a4:63:5a:2e:dc:1c:
b3:ef:f0:cd:ec:53:b7:44:a8:f3:45:d2:86:dd:aa:ac:88:29:
aa:6e:f5:fc:62:c4:52:d4:02:c4:fe:9f:40:98:71:2a:15:0b:
8c:d1:72:ff:14:10:8c:d5:4d:49:47:15:09:70:a9:91:6c:ee:
7d:b1:ed:31:4b:83:a6:fd:04:f4:7f:d1:c5:24:bf:ab:03:b0:
e3:2d:f2:9a:49:15:7b:78:94:7f:2a:39:e2:38:28:62:3d:66:
0e:7d:99:56:c7:02:05:47:3b:4a:38:56:e8:32:72:51:23:be:
d8:4f:fc:cc:ef:e4:68:48:66:e8:e0:71:d6:39:0b:d8:03:0b:
43:ba:ff:4c:0e:2a:70:e0:0c:1f:8a:6f:ee:81:f2:a9:ab:22:
f8:36:e5:56:ad:25:0a:be:e8:ce:d8:f0:50:4b:83:c9:86:d1:
9a:de:dd:4c:06:50:8f:cc:eb:e7:a9:b4:2d:13:77:81:87:25:
cf:6f:35:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:11 2026 by rpki-client