
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft (raw, json)
Hash identifier: 8T6a+6uS6LlLKtQ3xgnkq316V/Aqzttdxqn2VFcAtgU=
Subject key identifier: A4:BB:5A:D0:57:88:AF:5C:DD:DD:97:F3:E1:F2:88:B7:2C:8A:26:C4
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019FA03AAF6D9419143886C405F865137159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
Manifest number: 0625
Signing time: Sun 26 Jul 2026 21:00:28 +0000
Manifest this update: Sun 26 Jul 2026 21:00:28 +0000
Manifest next update: Mon 27 Jul 2026 21:00:28 +0000
Files and hashes: 1: 1-Boo50kngk4kJGoCOg2QDkNtX5E.roa (hash: 3+BBFqGEZbBoRjxfdp+gs4C5E0HbNx2NCgzd7yBrYgI=)
2: 1-zfvela3gTtSU0Zxk_qmMqiWGy0.roa (hash: OQAOpz82CSjUEMjy/IwaBDn+AK3uYtqBMtS2qxamScE=)
3: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl (hash: 2PwO317tAGT3JpJA4YSmQKjL45Js31xNpGcPReqApGg=)
4: 5n4uvrNtnkO4eGR8ZtmlT5JQXXE.roa (hash: 4cYHd40RL707GScqgxSvABvoDBiTFeHb4+nk74FKrXY=)
5: 6_nEtbPOwnDXFy-8i5b9sl1ByGc.roa (hash: AMDpLbysh7NtuUVsc212fbCqdT4L3j/7tc3OE68YULA=)
6: 8QVX0SOrf06I6Hu1_Mi-GX-EXHU.roa (hash: bFKty8gyU326bAS/KciRgtFT8EYhzokt50KmaXXmn1M=)
7: BlYKNaebEqnJcG7MjHMYllll4W4.roa (hash: 5rOtsWwUTndJqNVTM18t297dcWOrG9S+X6OosQK/cJ8=)
8: H-cWC9ou8amcyDtm_Er5Ir2CAaY.roa (hash: qbj77jSjmLfyPcN2gS2PMgfbDV/QJ5wjcIJib5rjtjs=)
9: PpX6Lsph6rTaL76Tj2A4yQr961M.roa (hash: HFF+cIFVcNuSSJ91Ot+1zWOlMJiB1K2AUufg3nSBkcY=)
10: Q6S6DEWeTdaNo4RLFHSga5G24TE.roa (hash: /vqg99pETnOiWOT15E0Qy+efouY/dSqrRAnrIsKDpi8=)
11: TRU3oQqpkjr58ESxJZ6f3EHSX4Y.roa (hash: JvYp5n0uta0ISmYEZ3kJV/1bGb6OC7ChxoATcmbzaLk=)
12: U1aab2MxbI-i9hTo8lZRAZ5efAU.roa (hash: APjZ82UUn6DyAQqo5G03W1Ri2QoSsmgGJvi9teJXAnw=)
13: VCw4N4Zs1DGjtZzf3wBgxZrel_k.roa (hash: 5kAoOyOQgv/RLB12MJcY8aU26UzS1uKwmDAxZLgrp74=)
14: VktbYjlefqpu29SjO1yJxvF-b0Q.roa (hash: H3AVJ4ctdSWTlP3EEmexkpARxHd5AlfrMOcP2H0qzAo=)
15: XRpeo1hgYiwp4bqhBtHy8vKgFro.roa (hash: KpWSEc+iqgjcBLMAxea9v15WND9BIwwgPKkIhWFrsDs=)
16: Y7ayARvbYJBLfe3vp4W9v_P3rss.roa (hash: dUaJTBjjtSwH29cUEez0PnC9Q/Nyh4qAC0/yQk/Zo2U=)
17: bOGK-i6sQG7WCHvE4FXVJT58zlU.roa (hash: tayfvyx217Xws5KJCeCymFPS0aqS71FkBV3qyWTO9JA=)
18: cI-L7pef_AdHI_QGBFTE5PiVJ0U.roa (hash: jgu+5sRPCpckA/cZ1yBuc9ZXcWSw0y0C+/Lk+J+5CkI=)
19: g-Dw0lZsOsb9XuKWb3g0E47UyIs.roa (hash: nsgNEhjHAiGOzBMeJvhHNadyfL9YZc5PQ6L4B/Mp7pU=)
20: ibuOotCa1pQHC2BddXe7q1dCKhU.roa (hash: QLsHWD8zB1jsPoj6Ww3W3pc0/jw9TRBNYOmFoZnHhBI=)
21: ip1HgMBLpV6HRA3CGzQCwlEf1Ew.roa (hash: zcmr/7jDKb0S+FFTqUQsbTVuMEPwCDZtaORWkf2vldc=)
22: lIG1b91dGC5ndWbmzjIp_fubDNE.roa (hash: Bvl3uk2S1zwHFCA6eMLSAsz9eN2bKrsslaZc1w8UTMY=)
23: lngpM2e0tyT0IB2GwgkMDnDWeqg.roa (hash: 8gnkzoIk037jtu1NDdnwt3plBaCnMYoEG+xl9yx/O9c=)
24: n2qaysiqOxYybG2o_t96d-JWP-0.roa (hash: eHISssRI0wVI8jcyz3iPD9ed/F8IfOhPuqU8QqlNado=)
25: nOjA58wyDiQ_zRw7avoPEh5_s40.roa (hash: V7B/P97cRl0fsQwMRzVez4oDaZWFnkjVorYQBWfrtpg=)
26: oa1g3ktNX4K7mp_Br7eoXIxGsbA.roa (hash: vcXUPTsZXYoXJi0CFAVUhhZah02o7Zn+vOkwA8OCtpM=)
27: pCxUrX3JS6C-vwjylp3PoHtHz9o.roa (hash: HU3ykSkKtwWdnQCYdZshRCL8vy57v9FukL0OXuPtRS0=)
28: qWBQvxFFNTJ53h-JlbpSTrwH4TQ.roa (hash: D3v5rIT2QSfN5wowyofrOD0QNhYzT3/GdvEXdUnsujM=)
29: rf9KTHpYwkkNInVQ5EifsWm0nxA.roa (hash: djP7Njwn08dcs5j6JOQWdwZwxz1jVEkhEi92YG/q5uQ=)
30: s7NOa3tdTv46yOJCv92uI2UB4zs.roa (hash: 5hs9AfN14zEIY9p9/O6GJm1GkUBmXkj+TK1asikXhNI=)
31: wAh3byrbG5qTFH-wreezSyYJxYQ.roa (hash: lqNfCfyCdVnJd9aovIdmRjPOWg96LGGcKzYcw43Q9nw=)
32: z20v7NWXTSlyldOmDp1NQUYj6l4.roa (hash: G/tYDUVliHysO/VJFXRfx5UhmqtCQvAytpWjsJo8LB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:af:6d:94:19:14:38:86:c4:05:f8:65:13:71:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Jul 26 21:00:28 2026 GMT
Not After : Jul 27 21:00:28 2026 GMT
Subject: CN=a4bb5ad05788af5cdddd97f3e1f288b72c8a26c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:f6:b1:2c:83:1d:38:6c:b7:0f:69:7c:50:
2d:8a:af:99:6c:ca:b3:a1:ac:97:38:0c:80:d3:a8:
21:35:95:b1:e3:ca:66:43:c7:d9:52:c5:d4:2f:d3:
31:68:eb:5b:43:56:6a:8d:c1:20:92:04:33:9b:c8:
48:ad:4b:55:37:32:37:00:7d:33:c7:b8:59:5e:95:
19:69:d8:a2:2a:e4:ba:e8:86:03:55:d4:a5:72:49:
92:89:c6:15:d9:4d:fa:bd:db:61:89:bf:a8:7c:50:
bc:a1:bb:20:f6:33:91:db:a6:5e:84:d4:3c:99:2d:
bb:9b:d7:ed:27:f3:8e:1b:1e:eb:c5:62:82:b8:cc:
3f:52:7d:bc:34:1d:a0:a8:03:56:b1:38:e7:2d:11:
10:46:76:4c:59:30:22:c0:b5:5c:90:ab:8f:87:e9:
01:66:d9:ba:e1:36:00:4b:94:ca:aa:db:cd:4e:72:
26:50:41:a5:13:ce:d4:0f:53:f5:f2:b1:13:ec:bf:
15:ed:a5:0a:66:ec:86:63:37:f9:a8:cf:cb:5f:75:
bd:2f:5c:4c:bc:cc:4a:b1:71:95:64:5e:b4:a9:79:
a8:55:d9:06:20:7c:4f:03:94:24:2e:db:78:dd:89:
ef:25:fb:b3:e2:e4:df:a7:8d:36:73:bb:ac:be:12:
70:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BB:5A:D0:57:88:AF:5C:DD:DD:97:F3:E1:F2:88:B7:2C:8A:26:C4
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ac:22:00:fa:48:96:8c:53:35:c2:b4:79:7f:95:59:b3:c9:
9b:2e:6b:54:b1:0b:15:00:77:4d:00:18:ac:d5:1e:4b:a8:34:
c0:3f:ec:d2:7c:73:41:64:fb:0c:9a:01:43:fc:73:7f:6d:71:
7b:a1:17:91:e4:a6:cd:4f:8e:b3:fd:5b:2d:ff:9f:fc:42:9e:
e9:b7:71:d2:3a:a2:e2:9e:34:7a:0f:b8:b7:dc:32:ec:f7:48:
ab:cf:e3:34:7e:9e:79:a5:d9:65:6c:73:f4:91:bb:30:8f:88:
f9:de:b7:21:b0:57:c7:49:f5:92:36:0c:93:69:03:2d:d5:3f:
60:e2:02:83:56:ab:b8:fd:4b:20:55:d7:98:be:89:44:d5:e2:
b5:19:bc:d4:c4:8f:c0:f3:d8:cf:6d:12:17:ba:50:ca:4c:58:
0f:66:b1:24:2b:aa:0e:a5:f9:53:6f:e1:c1:6d:23:49:ff:f8:
29:38:f4:5b:91:c2:43:7c:ef:46:78:9f:33:3e:d9:43:ab:08:
f2:af:d9:af:65:04:a5:17:da:2c:c9:db:09:e3:fc:55:84:fc:
95:c9:7d:24:02:d7:4b:99:fa:d0:f1:dd:68:14:da:03:26:65:
ee:d1:48:ff:12:84:b1:bd:cb:29:c3:1f:6c:fd:f1:ee:d8:aa:
58:e6:f8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:42:42 2026 by rpki-client