Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File: LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier: OZK9dx+p/pqQU1Uq3Ba9Md0t6c+02ZWoTxhMlvOh1Gg=
Subject key identifier: A2:D0:D8:33:3F:6B:84:E6:61:74:2C:1F:47:59:52:4A:06:6B:E9:C7
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 019CEBCAB0948AF89D93A440373CB6DAC5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number: 0841
Signing time: Sat 14 Mar 2026 10:00:55 +0000
Manifest this update: Sat 14 Mar 2026 10:00:55 +0000
Manifest next update: Sun 15 Mar 2026 10:00:55 +0000
Files and hashes: 1: 2WFOqZZA2yIUnQ_6eth3jx2NPnU.roa (hash: z8D6G5qAyZtOctuyLt0W9PyzjKIioqDo4g6gtUqBJsA=)
2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: Eiqq2MMFTXAsQnOnDRpLO26lGcEcVV5ANnQ01QGVRbA=)
3: ibmc9wsJZvcLnKLI-HoZNttO1zA.roa (hash: xpCzDqZRfT8zeb7gy3XI7XFp4/7LKgH6afs/PfJpe7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:ca:b0:94:8a:f8:9d:93:a4:40:37:3c:b6:da:c5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Mar 14 10:00:55 2026 GMT
Not After : Mar 15 10:00:55 2026 GMT
Subject: CN=a2d0d8333f6b84e661742c1f4759524a066be9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:72:99:5b:bf:a8:83:29:87:97:3e:e7:a5:
f5:9e:6b:e0:42:35:e6:a6:b5:bc:5f:e0:73:88:80:
71:58:26:b8:23:49:3d:79:65:1c:9d:2b:af:08:be:
b1:77:a8:97:9c:c4:d2:7d:c8:03:b1:70:49:c6:31:
cb:ff:1e:35:8b:0f:f0:43:19:d6:98:44:1d:97:aa:
23:75:3c:dd:ae:ab:06:b9:53:4b:72:6c:f7:65:d8:
46:58:85:bf:bb:9b:67:2a:39:ee:f9:de:4e:ff:b2:
1e:22:ae:d8:70:c0:89:41:2d:c3:74:a1:6a:62:26:
50:30:48:f8:f2:b4:65:38:24:7e:83:ff:20:df:66:
a8:28:cd:df:29:71:fb:48:24:78:29:ed:35:a2:a0:
a5:59:b4:65:9e:f5:20:b2:10:60:94:d5:3f:64:37:
2e:1b:6b:4f:01:47:a3:4e:59:3c:11:eb:f6:1d:72:
d5:42:ae:10:61:df:a4:15:dd:df:59:f6:3b:33:8f:
b4:bc:0e:00:fb:8c:bc:d5:cc:27:db:d8:81:83:bf:
c0:fd:12:fe:81:47:36:01:cf:bd:0c:21:1a:0d:38:
c4:57:47:e2:f7:83:a3:5d:a8:f3:fd:d0:d8:22:f3:
80:6e:a7:d3:59:41:b6:0b:97:65:6c:f6:73:0b:94:
d8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D0:D8:33:3F:6B:84:E6:61:74:2C:1F:47:59:52:4A:06:6B:E9:C7
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1c:a2:9a:a4:f8:6c:85:21:87:e8:3c:d3:4f:59:1a:71:ce:
86:c2:bd:ab:55:c1:70:7e:96:b2:2c:33:30:f7:da:c2:44:f1:
43:c8:cc:f9:c3:90:ee:1e:af:17:26:d2:a1:62:0d:2a:45:f8:
70:1f:2c:62:1b:9b:6f:1e:98:da:29:03:76:6a:00:93:ea:04:
a5:09:a9:7a:5a:ab:e1:45:43:c8:d8:05:5e:e6:71:cc:0e:47:
37:8e:88:1b:83:b2:31:87:8c:c5:a2:b8:96:ca:4d:f8:ae:6a:
1a:64:3e:bb:b5:59:09:f5:6d:da:80:64:aa:43:20:cd:73:50:
ba:00:4a:29:03:ea:02:b7:57:10:f7:f2:29:4d:cc:1d:2a:dc:
1e:99:cc:23:f2:d6:77:f3:a0:28:e7:af:33:83:03:6a:34:4f:
9e:26:c0:fd:96:a3:c4:a6:b6:01:53:4d:10:29:24:1a:b7:be:
89:92:71:c2:71:0d:b5:1a:f3:b5:8d:83:6b:54:14:d3:7a:24:
78:ab:32:bd:3d:ca:35:74:a6:4a:de:9e:6b:b7:ed:18:d3:66:
e6:72:bf:cd:51:ff:9a:8e:da:ae:ac:16:7e:e4:b7:dc:bc:2b:
ec:c8:7a:95:72:4e:dc:28:80:17:17:68:b9:1c:90:3b:9a:3f:
1e:97:27:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:22:09 2026 by rpki-client