Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File: llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier: pULKrHiPiyDMLEkeGUNLLOXT9dCe8ZeACgNW8xIGg3g=
Subject key identifier: 21:9B:87:DA:05:E5:FA:D7:40:9E:3D:6A:95:31:A5:D3:5D:82:45:82
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer: /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial: 01A0DBA8D209AD2D05CC517C2AA4A9D51366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number: 11D7
Signing time: Sat 26 Sep 2026 03:01:09 +0000
Manifest this update: Sat 26 Sep 2026 03:01:09 +0000
Manifest next update: Sun 27 Sep 2026 03:01:09 +0000
Files and hashes: 1: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: MdftW1s22HGckXOEEVNNuH7HRXz1MLyZLe9NcsxtmVI=)
2: vsmnrTln0FKIYbUICJTrn_gYJUQ.roa (hash: 8GWosWzTHZxxvdZfNNXEvhtfiz2Ewi4ZMP6/Lvtvauc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:d2:09:ad:2d:05:cc:51:7c:2a:a4:a9:d5:13:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Validity
Not Before: Sep 26 03:01:09 2026 GMT
Not After : Sep 27 03:01:09 2026 GMT
Subject: CN=219b87da05e5fad7409e3d6a9531a5d35d824582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:e6:fb:3a:b4:e3:c0:04:b5:fa:12:01:8c:
19:1e:27:f6:75:53:66:bf:3b:9a:04:5e:98:b9:07:
9b:16:6d:a1:5f:4c:50:54:eb:85:26:a8:20:93:22:
e3:e7:23:8e:f4:ce:e9:7a:c9:20:a7:43:62:26:7f:
6d:35:56:cd:5b:6a:53:b4:74:eb:70:60:c2:77:39:
97:77:ec:bf:77:f6:ef:fb:53:50:7c:1b:1b:f1:c9:
e7:dd:56:ba:b4:25:5f:a4:56:c4:31:be:35:bc:68:
f9:74:4a:f3:fc:56:49:6a:62:72:c8:b7:13:c3:27:
8b:ec:30:fb:db:13:51:38:c6:74:84:43:84:72:6b:
2a:6b:c8:fe:fc:f8:37:69:6e:cf:7d:6c:d7:2e:56:
49:a3:2e:0c:b6:b2:93:c1:49:64:28:21:10:0b:e3:
95:b4:31:eb:3a:a5:aa:40:f0:f6:50:4a:8c:a2:59:
2a:e3:15:c3:4a:65:8f:29:c8:98:d0:01:00:10:1f:
4d:44:2c:20:81:0e:8d:c5:2f:f3:fc:cb:0d:a8:80:
1e:fe:bd:c0:75:5a:e4:14:32:6f:aa:f6:8a:22:2e:
35:aa:23:eb:4e:4b:10:04:d4:6a:12:10:bc:a8:55:
53:ae:28:c6:8e:5f:17:ee:f1:6b:18:67:16:07:c3:
1e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9B:87:DA:05:E5:FA:D7:40:9E:3D:6A:95:31:A5:D3:5D:82:45:82
X509v3 Authority Key Identifier:
keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9b:b6:21:9c:95:e2:fc:06:89:f9:22:eb:40:6c:04:28:12:
35:18:78:a3:cd:c7:f4:03:e3:91:88:18:58:5a:19:8d:b9:be:
a3:40:71:c4:32:cf:63:9b:63:17:37:ab:9f:58:16:85:3a:f1:
1d:01:99:c0:da:0d:6a:79:fd:ef:0b:b8:17:4f:b3:1b:ac:3d:
33:a7:94:e2:d2:e0:ea:42:54:c7:c9:76:af:bf:24:51:83:c9:
3c:08:de:ab:bd:8c:d1:53:eb:23:73:9e:80:74:ce:69:8e:0d:
3d:56:5e:c6:2a:92:0f:2d:44:7e:ab:cd:df:5f:d2:88:7f:89:
44:b0:59:ad:08:aa:4c:69:7f:e3:0a:70:44:fa:20:fc:47:15:
18:99:64:45:78:46:b2:4c:d0:e8:7f:0c:75:4d:81:00:5f:8a:
41:7b:56:28:66:88:d6:cb:21:48:2b:24:84:cb:7c:ea:6a:f3:
d8:e1:8a:7a:7e:68:12:5e:0e:af:55:14:e8:49:3c:79:f1:a4:
13:c8:f8:1f:01:0b:f1:63:d1:5a:e4:59:ad:66:25:c6:ea:aa:
6a:7c:da:24:1c:e4:a8:3b:5f:50:d6:d8:a2:16:ca:f7:36:6d:
08:ff:58:93:0f:5b:94:58:21:3c:b1:b1:95:93:8b:73:cf:fc:
1e:80:d0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:03:02 2026 by rpki-client