
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft (raw, json)
Hash identifier: Yt3PtbyEkscfd5cjdOTTIZ0XjWynrN6FJ6M8afTvw3o=
Subject key identifier: 99:BE:3F:16:4B:78:52:F7:02:17:77:FE:AA:9F:D9:E3:D6:31:5E:7D
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019DCD18A8E6B932B1D66CB428AD260BB190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
Manifest number: 0527
Signing time: Mon 27 Apr 2026 04:00:38 +0000
Manifest this update: Mon 27 Apr 2026 04:00:38 +0000
Manifest next update: Tue 28 Apr 2026 04:00:38 +0000
Files and hashes: 1: 1-Boo50kngk4kJGoCOg2QDkNtX5E.roa (hash: 3+BBFqGEZbBoRjxfdp+gs4C5E0HbNx2NCgzd7yBrYgI=)
2: 1-zfvela3gTtSU0Zxk_qmMqiWGy0.roa (hash: OQAOpz82CSjUEMjy/IwaBDn+AK3uYtqBMtS2qxamScE=)
3: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl (hash: GKeBjmhyVkbO0Pzb9d2WSmcI9cMNnMqMjA/8W+kDEz0=)
4: 5n4uvrNtnkO4eGR8ZtmlT5JQXXE.roa (hash: 4cYHd40RL707GScqgxSvABvoDBiTFeHb4+nk74FKrXY=)
5: 8SAtM8IMR2YkrpygIGIpM4TdRCA.roa (hash: paNW3tKH+SaFHT3KIqEpy4lTXiy0sBoaMdBNqSt4tE8=)
6: BlYKNaebEqnJcG7MjHMYllll4W4.roa (hash: 5rOtsWwUTndJqNVTM18t297dcWOrG9S+X6OosQK/cJ8=)
7: BnHMfXgVzli6KeGQd5B5wI2n9-0.roa (hash: y+V9QXcIs3B9divyAKDL+I7ev3N/MtcnLMS1hWW9Vz8=)
8: KDJCV2KWqxqP4itFZc0vnyWHg-M.roa (hash: ZdQlom/XrmZVTovIG/Wu0KyZZPE8vYBX2PPuyHGQT0o=)
9: PpX6Lsph6rTaL76Tj2A4yQr961M.roa (hash: HFF+cIFVcNuSSJ91Ot+1zWOlMJiB1K2AUufg3nSBkcY=)
10: Q6S6DEWeTdaNo4RLFHSga5G24TE.roa (hash: /vqg99pETnOiWOT15E0Qy+efouY/dSqrRAnrIsKDpi8=)
11: QTJUWp8ElMdD6npRrAyhQLlPEac.roa (hash: EM2H6BAe5icZoKOObCoqZke3f1hZ2DBypi24AvEdyGs=)
12: SMUYHJGqPA3wQQI63UlSS2FCfUY.roa (hash: J7ZEbIf8CEpYVZLgafo0n+Ok/RB6jdMafFrTE9kMXrM=)
13: TRU3oQqpkjr58ESxJZ6f3EHSX4Y.roa (hash: JvYp5n0uta0ISmYEZ3kJV/1bGb6OC7ChxoATcmbzaLk=)
14: U1aab2MxbI-i9hTo8lZRAZ5efAU.roa (hash: APjZ82UUn6DyAQqo5G03W1Ri2QoSsmgGJvi9teJXAnw=)
15: VCw4N4Zs1DGjtZzf3wBgxZrel_k.roa (hash: 5kAoOyOQgv/RLB12MJcY8aU26UzS1uKwmDAxZLgrp74=)
16: VktbYjlefqpu29SjO1yJxvF-b0Q.roa (hash: H3AVJ4ctdSWTlP3EEmexkpARxHd5AlfrMOcP2H0qzAo=)
17: WrXo7eZXrLCYixM2GoSFLILnImI.roa (hash: aBAqoSrp2q5VuQZ6eatCiIBaYp9mu6cUyooOCZdewrc=)
18: XRpeo1hgYiwp4bqhBtHy8vKgFro.roa (hash: KpWSEc+iqgjcBLMAxea9v15WND9BIwwgPKkIhWFrsDs=)
19: Y7ayARvbYJBLfe3vp4W9v_P3rss.roa (hash: dUaJTBjjtSwH29cUEez0PnC9Q/Nyh4qAC0/yQk/Zo2U=)
20: bOGK-i6sQG7WCHvE4FXVJT58zlU.roa (hash: tayfvyx217Xws5KJCeCymFPS0aqS71FkBV3qyWTO9JA=)
21: cI-L7pef_AdHI_QGBFTE5PiVJ0U.roa (hash: jgu+5sRPCpckA/cZ1yBuc9ZXcWSw0y0C+/Lk+J+5CkI=)
22: g-Dw0lZsOsb9XuKWb3g0E47UyIs.roa (hash: nsgNEhjHAiGOzBMeJvhHNadyfL9YZc5PQ6L4B/Mp7pU=)
23: lIG1b91dGC5ndWbmzjIp_fubDNE.roa (hash: Bvl3uk2S1zwHFCA6eMLSAsz9eN2bKrsslaZc1w8UTMY=)
24: n2qaysiqOxYybG2o_t96d-JWP-0.roa (hash: eHISssRI0wVI8jcyz3iPD9ed/F8IfOhPuqU8QqlNado=)
25: nOjA58wyDiQ_zRw7avoPEh5_s40.roa (hash: V7B/P97cRl0fsQwMRzVez4oDaZWFnkjVorYQBWfrtpg=)
26: pCxUrX3JS6C-vwjylp3PoHtHz9o.roa (hash: HU3ykSkKtwWdnQCYdZshRCL8vy57v9FukL0OXuPtRS0=)
27: rf9KTHpYwkkNInVQ5EifsWm0nxA.roa (hash: djP7Njwn08dcs5j6JOQWdwZwxz1jVEkhEi92YG/q5uQ=)
28: s7NOa3tdTv46yOJCv92uI2UB4zs.roa (hash: 5hs9AfN14zEIY9p9/O6GJm1GkUBmXkj+TK1asikXhNI=)
29: vBrQrstTdz8KPWHrbAtIIlp7oRs.roa (hash: /PbdoUBe87+zj3KdwFA/s9njRqMz7H7rkc1WIS7NqJA=)
30: yQZZyJ-guGbGAaz47oUguuGjfLc.roa (hash: o8aHjEfUbVkyklvg+YTE8nyjgPYwybI1TJcaTA9wb/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:18:a8:e6:b9:32:b1:d6:6c:b4:28:ad:26:0b:b1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Apr 27 04:00:38 2026 GMT
Not After : Apr 28 04:00:38 2026 GMT
Subject: CN=99be3f164b7852f7021777feaa9fd9e3d6315e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:78:56:84:0c:2f:79:04:e6:75:bf:19:af:
69:18:0c:34:33:03:45:ed:b3:43:5f:f0:31:c3:dc:
84:d7:22:dd:09:82:9f:8a:f8:80:3b:ef:f7:24:58:
cd:d6:93:9e:d4:73:7d:bd:c5:69:c7:25:49:0a:4d:
7b:02:e2:28:df:5c:aa:11:91:92:21:42:c6:df:b5:
cc:8a:5b:7b:0b:c0:23:c0:c3:48:af:fc:ce:7a:ea:
70:46:3e:38:f8:a9:9e:68:4d:8d:f7:25:1f:cd:df:
ae:d1:3c:37:51:b9:4a:52:cd:cd:a8:84:49:3a:d4:
d9:6f:f2:d5:8b:94:d4:8d:df:72:5a:37:85:ce:03:
a7:07:7a:98:4e:bc:b6:52:03:5a:2d:c5:96:99:4f:
24:1c:a5:3d:52:9e:e3:db:00:6c:14:36:d9:24:12:
c4:51:0e:78:ae:99:e4:94:ac:e9:52:d3:71:71:de:
1e:f8:cb:1d:a6:e2:6e:0e:e4:ad:80:e9:4f:31:1b:
0c:05:b5:d0:9d:f0:5c:c0:9b:47:7b:cd:e0:04:4b:
44:17:9d:f6:88:ec:8a:ab:41:2c:eb:79:96:be:0c:
20:d7:66:59:6a:17:11:26:ff:aa:99:3f:df:b3:76:
77:33:12:c9:a1:28:f9:58:f1:4f:96:05:59:c2:00:
ae:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BE:3F:16:4B:78:52:F7:02:17:77:FE:AA:9F:D9:E3:D6:31:5E:7D
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f2:5b:6e:8b:cc:c3:50:04:0b:23:7c:8c:4c:5c:d8:41:ef:
28:ac:4f:13:ba:ff:e8:34:83:dd:c6:01:2f:39:27:7f:0d:7c:
16:e9:ca:b4:e0:0d:6c:e4:5b:50:b0:dc:8f:a7:a3:8d:75:3c:
d4:31:0a:fd:58:8b:92:c0:24:88:2f:41:81:34:85:98:d9:e7:
16:0b:f7:8e:01:af:98:a4:e1:25:5e:b0:32:86:33:cd:be:65:
29:e2:b1:db:f5:4c:19:c0:82:5c:64:7f:35:d7:66:38:36:44:
ad:18:7c:30:98:b9:3a:19:53:7c:b0:74:3d:69:81:fb:eb:20:
b9:28:78:c9:b8:15:f7:ae:31:a1:85:7d:36:f0:ab:0d:9f:ea:
ff:d9:5e:ce:4f:4a:7d:01:c2:5f:f7:cf:70:be:94:72:47:da:
e7:d1:6d:ce:87:26:80:54:d6:cb:24:88:e9:1f:8a:f3:01:95:
08:51:d9:cb:6c:b6:68:ec:19:9a:e2:19:6c:b1:c3:6d:be:24:
15:97:dd:44:e7:e3:25:47:5e:6c:c1:bf:0d:a7:20:48:62:6f:
29:41:6c:05:14:f4:b6:30:60:3c:c2:53:9c:d9:2f:c0:db:16:
7b:03:f3:0f:65:88:c9:41:24:46:db:cd:3d:ce:13:20:4a:9c:
d3:90:01:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 08:29:56 2026 by rpki-client