Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier: 2Q9Sx9DGXCe4meVTurQlqnlkATfhLNADL1K3tjX3lmE=
Subject key identifier: A6:D2:8C:FE:06:35:49:DC:44:C2:D9:9D:9A:C4:17:BB:7E:7A:62:6B
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 019E24006D05BFEB275DC01996732EB5ED34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number: 1909
Signing time: Thu 14 May 2026 01:01:08 +0000
Manifest this update: Thu 14 May 2026 01:01:08 +0000
Manifest next update: Fri 15 May 2026 01:01:08 +0000
Files and hashes: 1: QGW4LwlvDICFL2rpJRW4EK0DFIc.roa (hash: dEh5JmMpZS30YtylfZQmdL8aaYHuh+kMQSbQLZPHa4Q=)
2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: HrTgjLxyh59VbqT4ofs3dFh1TtM0PlhS6FMSra+yn8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:24:00:6d:05:bf:eb:27:5d:c0:19:96:73:2e:b5:ed:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: May 14 01:01:08 2026 GMT
Not After : May 15 01:01:08 2026 GMT
Subject: CN=a6d28cfe063549dc44c2d99d9ac417bb7e7a626b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:f7:15:ea:2f:1d:8e:2d:d6:a3:90:81:18:
07:40:cd:1c:80:ef:b8:66:0f:29:0d:43:72:cf:cb:
6f:a8:45:81:86:3a:c4:1a:9b:21:f9:20:59:66:87:
d2:42:82:58:74:e4:cf:7c:71:85:db:6b:90:80:e7:
4d:d0:e2:54:0d:06:28:db:61:db:7f:85:e6:c8:30:
8e:4b:61:23:cc:11:8d:03:60:4e:a2:9b:91:76:6d:
df:e5:ea:42:a2:42:65:0b:6c:59:0b:6a:39:d5:63:
3a:b0:a9:6d:99:bb:70:c3:5d:a8:cb:8d:ff:d6:c7:
f7:dc:a0:bf:a3:78:e9:21:bc:78:47:6f:bf:56:bd:
ea:f2:be:ef:74:e8:a9:fa:f0:45:50:86:6a:be:13:
4b:c0:63:a1:85:af:d0:c9:e3:5a:e5:be:07:bc:51:
d8:9a:85:e5:2f:42:e6:bf:95:78:87:7c:49:10:2f:
e4:26:e2:99:ef:c5:8d:95:0e:c9:9c:4e:8a:29:90:
89:a8:42:7b:f5:7a:95:0a:70:af:c8:68:0a:cc:a8:
4b:a7:2c:5f:99:18:d8:d2:35:4f:30:ad:0c:32:35:
f8:e3:1e:e3:24:0a:48:7a:4d:ca:21:04:cd:01:4a:
44:99:09:b5:19:3b:6c:68:82:fd:8e:48:cc:a6:d4:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D2:8C:FE:06:35:49:DC:44:C2:D9:9D:9A:C4:17:BB:7E:7A:62:6B
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3d:eb:31:18:5a:96:e4:6e:94:41:5d:9d:21:a9:a7:77:ce:
4c:86:3c:f2:7d:cc:d9:f9:f5:93:4b:32:52:e0:58:c7:f4:05:
7a:e8:0c:8c:bf:e8:62:33:87:48:f2:d4:3b:5f:6c:4a:32:35:
a4:88:21:58:24:3e:e6:5f:35:d2:5a:fb:65:f4:4f:74:2c:5c:
d3:fe:66:05:28:b0:fa:84:8e:a4:bd:1e:a8:93:fd:ae:a4:9d:
2b:57:26:81:e6:80:85:36:1d:81:24:43:9a:ec:09:81:52:de:
0b:27:5f:d5:9d:b3:71:52:cc:7b:74:ad:d1:89:cb:b4:4e:31:
94:b1:89:05:88:d2:af:db:b1:cc:1b:d4:cd:ef:74:32:38:72:
bc:ef:7d:28:e7:6e:ba:12:5f:1a:a4:43:be:78:95:58:5f:22:
ee:f8:49:c3:c6:d2:db:dd:ba:e3:52:a2:49:59:02:cd:26:a8:
69:7d:ba:ba:c9:76:46:20:df:ae:a1:21:9e:d6:48:f9:26:8d:
55:07:65:28:fc:31:0a:4c:f1:b0:1a:7e:72:58:81:0c:58:b3:
4b:91:51:0e:b8:4e:34:86:2d:50:1d:bb:83:4d:9b:74:3b:54:
ce:28:33:bc:09:e8:b0:60:c7:5e:fc:76:9a:d6:ea:ed:c5:8e:
0d:cb:78:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 10:41:41 2026 by rpki-client