Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File: LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier: SbVpqDIcPOT2J+EMzDmA81Gz4gS9s7r45xqYOyeKAw4=
Subject key identifier: 83:EC:60:11:75:62:65:7E:6B:45:59:86:A5:67:A0:DD:D6:D1:FD:A1
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 01A16EA520A29A54CA6157C78A63CE492084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number: 0A97
Signing time: Sat 24 Oct 2026 16:01:17 +0000
Manifest this update: Sat 24 Oct 2026 16:01:17 +0000
Manifest next update: Sun 25 Oct 2026 16:01:17 +0000
Files and hashes: 1: 2WFOqZZA2yIUnQ_6eth3jx2NPnU.roa (hash: z8D6G5qAyZtOctuyLt0W9PyzjKIioqDo4g6gtUqBJsA=)
2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: 7LtGzZKeLszgsrLwSRO76gu4IQdaKC4+1qfGH9j5PKk=)
3: ibmc9wsJZvcLnKLI-HoZNttO1zA.roa (hash: xpCzDqZRfT8zeb7gy3XI7XFp4/7LKgH6afs/PfJpe7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:a5:20:a2:9a:54:ca:61:57:c7:8a:63:ce:49:20:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Oct 24 16:01:17 2026 GMT
Not After : Oct 25 16:01:17 2026 GMT
Subject: CN=83ec60117562657e6b455986a567a0ddd6d1fda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:3e:f8:b6:de:aa:52:36:07:79:68:9b:da:
0f:31:42:05:a3:6a:f1:d8:5d:1f:33:17:de:76:1b:
7a:bc:82:c2:cf:15:7e:dc:bd:9f:ea:24:57:2f:27:
93:05:8c:62:8a:b0:cb:7b:b8:57:18:8d:10:80:5f:
19:40:35:79:e8:07:3d:f6:1e:7d:a4:dd:86:1c:62:
7f:6a:67:21:18:b3:4c:49:b4:3f:3c:1c:e8:f0:cc:
97:22:e8:fe:83:51:0a:2e:1a:46:26:b7:27:1c:54:
da:f9:15:c6:82:92:2c:3a:29:9f:e0:ab:35:0f:8a:
87:b7:71:c4:4f:c6:bb:3e:1b:08:1c:95:a1:45:67:
66:20:90:57:ca:45:2f:0c:38:78:d0:17:b3:c1:bc:
2c:2f:b1:63:ae:07:bb:67:3b:ce:2c:35:a6:56:ab:
b6:e5:77:f9:67:a9:f3:c9:f9:4a:18:82:93:8c:e1:
23:e2:b5:f8:18:e8:9e:74:62:a5:45:e6:6d:c4:95:
e3:7e:c1:71:2f:55:c2:ef:5c:9e:3b:1a:10:55:4c:
57:f1:24:4b:df:61:aa:d0:05:8a:85:73:2f:41:28:
ca:39:44:9b:58:fc:a6:31:9a:5c:0f:1d:35:9b:96:
5b:dc:d6:42:cb:e3:7b:44:67:9c:d1:13:b4:18:26:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EC:60:11:75:62:65:7E:6B:45:59:86:A5:67:A0:DD:D6:D1:FD:A1
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3c:06:0e:94:23:db:08:d8:7d:96:dd:7e:6e:d8:75:ce:7b:
d5:ae:07:21:1f:6b:85:59:97:db:8a:68:25:0e:b8:b2:40:a4:
42:ac:5b:98:21:79:c0:d4:84:b5:56:de:1a:d8:65:b6:65:9d:
e2:bb:ad:6a:f5:f8:75:26:b4:66:af:4b:bc:98:40:f9:e2:a4:
97:36:fb:8f:4a:78:0b:26:69:b3:af:c8:4f:bf:fd:30:63:f2:
7a:6c:ff:da:49:e0:5b:47:ca:2b:c4:f4:30:7d:11:b0:bf:cf:
b2:47:70:fb:11:68:38:8e:7a:3f:4b:cb:3e:98:86:f0:a0:27:
72:ce:45:c0:77:02:14:f8:7e:67:13:26:7a:11:11:f5:ec:9b:
53:20:7e:b4:88:b7:88:85:05:76:60:1c:1b:b7:28:da:e2:44:
a5:e3:4f:92:92:92:f4:b7:84:fd:27:6d:7b:c6:88:6e:da:60:
8b:5b:4f:52:d7:0d:8d:74:ad:3a:d9:aa:72:e0:40:8f:4a:3e:
b4:e7:c1:4d:19:5c:0b:78:43:0c:ae:ee:cb:ce:fb:fa:9a:c5:
fb:44:a7:d9:d2:fe:fd:10:ec:a2:c4:fa:79:3f:95:c3:fc:3e:
42:0d:77:d5:35:95:64:ad:d8:24:84:ca:19:75:cd:3a:67:35:
50:10:35:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:59 2026 by rpki-client