Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File: llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier: Kvj0St/tyK+ZVE7se++FvlLWy8Ko7Y71g8PF0oleZBY=
Subject key identifier: 9B:0A:06:51:DD:F3:44:BF:05:B8:C9:3E:E1:6D:B9:D2:F1:44:5B:10
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer: /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial: 019D2583E3B81A63713D01CF9C44601B0BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number: 0FEB
Signing time: Wed 25 Mar 2026 15:01:33 +0000
Manifest this update: Wed 25 Mar 2026 15:01:33 +0000
Manifest next update: Thu 26 Mar 2026 15:01:33 +0000
Files and hashes: 1: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: qJjMzl6fqVfMxpy2Jmx1T/6hxfrVOgQE5pc3EK1n0vI=)
2: vsmnrTln0FKIYbUICJTrn_gYJUQ.roa (hash: 8GWosWzTHZxxvdZfNNXEvhtfiz2Ewi4ZMP6/Lvtvauc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:e3:b8:1a:63:71:3d:01:cf:9c:44:60:1b:0b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Validity
Not Before: Mar 25 15:01:33 2026 GMT
Not After : Mar 26 15:01:33 2026 GMT
Subject: CN=9b0a0651ddf344bf05b8c93ee16db9d2f1445b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:b2:ea:54:9c:8a:35:75:d1:53:ee:68:56:
77:0a:c6:87:f5:20:ce:ea:00:47:1d:dd:c0:49:fd:
74:30:f3:2f:e0:d5:8c:c1:8d:6e:24:a6:d8:86:ea:
7e:e2:2d:76:9d:06:36:f0:e0:26:b7:46:c0:df:85:
9b:72:05:8e:19:84:f5:b8:37:ff:d8:4c:a7:70:3f:
aa:58:fb:ab:32:03:13:a0:ec:cf:bf:11:2e:bf:37:
85:0a:ed:de:82:4b:65:79:c9:f8:4d:10:01:b5:cc:
ac:33:f4:1c:66:29:1b:72:c9:2e:45:74:3a:c2:60:
b2:47:ff:b0:3a:87:94:09:2f:da:90:c9:69:61:ea:
31:87:bd:f1:6f:16:a8:e6:ed:e8:48:b9:2b:f6:c5:
98:73:be:7f:db:f8:e0:f3:cf:38:90:46:1d:aa:29:
f8:5f:a1:74:a8:35:df:5f:d6:02:25:35:94:8d:1f:
9e:a7:b9:68:3a:e1:dc:ef:bb:50:ce:09:5f:4a:6a:
8c:c6:3e:46:93:ba:f3:f4:cb:4f:10:f7:4d:8a:01:
36:78:81:2a:28:fb:f1:86:29:56:9d:f1:29:d8:c4:
22:2d:81:5a:ca:74:30:15:45:1a:8b:5b:cb:2b:86:
7f:22:e4:04:d1:22:7c:df:b0:c9:a6:3b:10:cd:fb:
53:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0A:06:51:DD:F3:44:BF:05:B8:C9:3E:E1:6D:B9:D2:F1:44:5B:10
X509v3 Authority Key Identifier:
keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c8:26:b3:61:d4:e8:9c:b2:96:f4:56:01:82:ab:7c:f6:79:
5f:f6:ce:c4:7d:47:d3:34:78:41:21:05:b0:cf:55:d1:cb:b9:
4f:c2:2b:0b:21:f0:f8:d4:ae:a3:2e:eb:71:9c:68:c0:f4:02:
00:03:30:a2:72:c4:50:9c:bf:ab:cf:30:43:ea:ef:29:cb:c9:
07:46:ae:18:8e:02:56:b5:24:54:67:98:07:66:44:65:54:c5:
e3:e3:0c:cc:32:3a:67:ab:35:70:e0:5e:53:70:88:88:e4:90:
41:92:99:cc:ba:8d:68:4d:da:32:1a:f9:7f:6f:b1:99:1e:12:
b6:d0:4c:6b:79:17:e3:ea:df:d0:14:54:0f:c7:2b:a6:9d:14:
96:c1:2b:83:82:90:f4:31:f6:9c:05:96:3a:c3:27:4c:f6:20:
71:2a:de:0d:d2:29:b8:6a:00:a5:d8:83:a6:e6:b3:e1:b0:9a:
67:0d:8b:c6:bd:3b:c4:3c:40:18:67:c2:66:9d:44:8c:a1:54:
0e:dc:4e:ce:70:86:66:30:b4:ba:86:53:7d:0f:1e:d0:d5:9d:
23:ac:25:27:25:ca:6c:ec:d9:6d:19:78:05:09:9b:3f:87:7a:
c7:73:8c:7e:ba:e5:8a:d9:d6:6f:cd:49:c8:75:26:d5:fd:16:
22:94:51:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:23 2026 by rpki-client