Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File: LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier: 0ICVqGVSZWcJNypupmM/XE3XkUdEyFs+O7WWpErp6u4=
Subject key identifier: DC:03:59:CA:2B:8C:CE:DF:D9:73:CA:B4:0F:95:1D:83:C5:40:6F:C8
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 019E90CAB8F210139E8880E039B917EC7DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number: 091B
Signing time: Thu 04 Jun 2026 04:01:05 +0000
Manifest this update: Thu 04 Jun 2026 04:01:05 +0000
Manifest next update: Fri 05 Jun 2026 04:01:05 +0000
Files and hashes: 1: 2WFOqZZA2yIUnQ_6eth3jx2NPnU.roa (hash: z8D6G5qAyZtOctuyLt0W9PyzjKIioqDo4g6gtUqBJsA=)
2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: 3NKHtqWnWY1Un6Ov+IU7ctsPh3Xc8ynXcjbD4e3myKk=)
3: ibmc9wsJZvcLnKLI-HoZNttO1zA.roa (hash: xpCzDqZRfT8zeb7gy3XI7XFp4/7LKgH6afs/PfJpe7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:ca:b8:f2:10:13:9e:88:80:e0:39:b9:17:ec:7d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Jun 4 04:01:05 2026 GMT
Not After : Jun 5 04:01:05 2026 GMT
Subject: CN=dc0359ca2b8ccedfd973cab40f951d83c5406fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:00:34:b0:db:37:2d:ce:22:ca:19:a8:d7:
63:fc:19:1a:1f:1d:9b:92:8d:e4:8f:a8:82:7b:41:
a9:92:9c:32:9f:e0:8c:76:2e:b2:30:68:63:2b:d1:
90:ac:5f:99:50:08:9b:c8:52:67:d5:5c:39:5e:52:
46:f0:bf:00:7a:b0:f2:f3:57:aa:eb:77:f0:15:7d:
ea:58:64:9d:4b:e5:2e:49:fe:ea:fe:2d:d8:7c:4b:
f5:69:e3:6e:ec:53:c8:60:47:30:b4:9a:50:c4:51:
01:d1:27:a9:55:af:aa:f8:ab:c4:10:61:78:81:ab:
8a:99:c8:ac:48:47:c4:b9:74:84:16:29:a8:34:ad:
16:0c:4b:5a:90:b0:be:99:d1:03:80:6f:7d:87:de:
65:74:01:57:e1:5c:b7:2f:c5:0f:25:f6:df:ba:b5:
d4:2a:91:c5:fa:8a:05:a2:ea:06:ff:15:82:79:26:
e9:36:d0:d1:03:d6:ff:24:a5:94:a0:8a:5f:5e:a8:
d5:5c:0f:f8:a8:d6:7d:e5:0f:9f:b5:ee:6a:a0:37:
a6:81:9e:17:94:42:f9:d8:21:b3:4b:0d:4c:8f:67:
b1:c1:b6:6d:50:51:9a:7a:e6:51:1d:83:11:3d:3a:
0c:fa:df:25:6d:2f:01:d8:94:b0:02:47:77:d0:72:
a9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:03:59:CA:2B:8C:CE:DF:D9:73:CA:B4:0F:95:1D:83:C5:40:6F:C8
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:47:3e:0d:40:a4:28:f5:54:37:bf:16:e3:e9:b5:07:d4:6b:
4c:77:af:69:fd:38:07:44:30:bc:81:18:bc:d5:f7:00:bc:ee:
1e:cb:35:72:75:0f:cf:4e:e5:04:8a:d9:18:5d:27:a8:c8:4e:
be:bb:da:db:fa:cd:7e:e6:c9:71:41:86:39:4c:db:f3:64:4b:
56:6b:e3:0e:ef:43:cb:de:e3:ee:51:de:44:1c:8e:3f:2d:23:
92:f1:12:5e:36:89:0a:99:cd:74:9b:75:6e:32:f5:e2:f0:9d:
02:b4:80:09:93:f9:3f:4e:77:e6:1a:d4:39:2c:20:e2:6e:91:
44:88:41:e1:62:df:31:b8:e0:ea:70:c3:c5:04:05:e7:ee:04:
f0:07:05:7f:df:0d:32:00:e9:fc:5c:b5:14:43:e3:5c:27:9e:
9a:e5:78:1f:fd:a4:ce:64:e8:35:a4:ab:ef:0a:c2:83:ea:83:
15:97:c0:24:f6:07:ef:e5:77:5e:80:a9:af:cc:3b:89:8e:c7:
ae:40:f5:40:f3:70:b5:2a:93:f3:9a:df:c1:b1:2f:ff:4b:f5:
74:6e:ff:f7:5f:14:98:67:6a:db:55:5e:57:63:0e:87:27:df:
2a:8f:ab:16:fc:e4:3f:de:c7:ca:9d:e7:8a:4a:15:f8:e6:7f:
8d:38:97:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6QyrjyEBOeiIDgObkX7H3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYmQ3NjY4OGI4N2MwMzkxNGFlMmEyZTE0OTBjMmYxZTkx
NDE2NjEwHhcNMjYwNjA0MDQwMTA1WhcNMjYwNjA1MDQwMTA1WjAzMTEwLwYDVQQD
EyhkYzAzNTljYTJiOGNjZWRmZDk3M2NhYjQwZjk1MWQ4M2M1NDA2ZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgsANLDbNy3OIsoZqNdj/BkaHx2b
ko3kj6iCe0Gpkpwyn+CMdi6yMGhjK9GQrF+ZUAibyFJn1Vw5XlJG8L8AerDy81eq
63fwFX3qWGSdS+UuSf7q/i3YfEv1aeNu7FPIYEcwtJpQxFEB0SepVa+q+KvEEGF4
gauKmcisSEfEuXSEFimoNK0WDEtakLC+mdEDgG99h95ldAFX4Vy3L8UPJfbfurXU
KpHF+ooFouoG/xWCeSbpNtDRA9b/JKWUoIpfXqjVXA/4qNZ95Q+fte5qoDemgZ4X
lEL52CGzSw1Mj2exwbZtUFGaeuZRHYMRPToM+t8lbS8B2JSwAkd30HKpJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwDWcorjM7f2XPKtA+VHYPFQG/IMB8GA1UdIwQY
MBaAFCy9dmiLh8A5FK4qLhSQwvHpFBZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEwxMmFJdUh3RGtVcmlvdUZKREM4ZWtVRm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82NmI5NTktNDcyZi00OTIyLWEyMjYt
ZTBmOTMwODA2YmRjLzEvTEwxMmFJdUh3RGtVcmlvdUZKREM4ZWtVRm1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82NmI5NTktNDcyZi00OTIyLWEyMjYtZTBmOTMwODA2YmRj
LzEvTEwxMmFJdUh3RGtVcmlvdUZKREM4ZWtVRm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkc+DUCk
KPVUN78W4+m1B9RrTHevaf04B0QwvIEYvNX3ALzuHss1cnUPz07lBIrZGF0nqMhO
vrva2/rNfubJcUGGOUzb82RLVmvjDu9Dy97j7lHeRByOPy0jkvESXjaJCpnNdJt1
bjL14vCdArSACZP5P0535hrUOSwg4m6RRIhB4WLfMbjg6nDDxQQF5+4E8AcFf98N
MgDp/Fy1FEPjXCeemuV4H/2kzmToNaSr7wrCg+qDFZfAJPYH7+V3XoCpr8w7iY7H
rkD1QPNwtSqT85rfwbEv/0v1dG7/918UmGdq21VeV2MOhyffKo+rFvzkP97Hyp3n
ikoV+OZ/jTiXuA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:25:16 2026 by rpki-client