Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
File: LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft (raw, json)
Hash identifier: reeR/6mtoGFHbJEhKk74VO1g+n7tlOa1R0ccUS7aqeE=
Subject key identifier: BA:AF:9D:0B:61:60:5D:29:E6:96:20:5B:DA:83:DB:15:3B:0B:02:61
Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
Certificate issuer: /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Certificate serial: 019F946DE02ECB6E3F4DAB3814FCC240CC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
Manifest number: 0DF3
Signing time: Fri 24 Jul 2026 14:00:56 +0000
Manifest this update: Fri 24 Jul 2026 14:00:56 +0000
Manifest next update: Sat 25 Jul 2026 14:00:56 +0000
Files and hashes: 1: LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl (hash: SnT4c/B4CZFTHUj6JlpkJpE0tQouoEbW12GVCVjVDhY=)
2: z_i2HLAe207eqqdf1Xix5ENRMe4.roa (hash: ztqjP6xacDo+JPNkJa5MSwjbXr7h1+BJzgwfqlxxQ4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:e0:2e:cb:6e:3f:4d:ab:38:14:fc:c2:40:cc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Validity
Not Before: Jul 24 14:00:56 2026 GMT
Not After : Jul 25 14:00:56 2026 GMT
Subject: CN=baaf9d0b61605d29e696205bda83db153b0b0261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:61:ca:c0:14:24:6a:33:ee:8a:e8:47:6d:
72:87:ba:9e:7d:ff:ea:24:96:d3:a7:ad:2f:45:54:
ca:12:f7:1f:d1:ce:c6:e9:21:fe:65:ac:ec:2d:3b:
04:04:79:44:d0:d2:e9:ee:2a:90:86:03:4e:26:c3:
86:45:dc:05:f1:ce:8b:7a:15:73:0a:58:20:01:85:
26:c1:ab:6e:d8:68:95:9f:30:e4:bc:5a:af:97:49:
ed:2e:90:87:c7:c7:35:dc:7f:97:71:0b:a3:49:90:
2d:ae:59:b0:19:62:7a:09:2a:63:61:cf:51:bc:a1:
61:7e:35:c2:81:17:6c:1d:35:a7:dd:4c:56:ae:e3:
6a:0b:ae:9a:11:d0:83:05:29:40:98:61:82:40:45:
b1:42:5f:41:07:36:fa:89:de:63:2a:29:44:0f:27:
0e:c1:a2:e1:da:dc:c8:6d:07:eb:53:cc:81:3f:bd:
40:7a:0f:42:aa:f1:d2:80:87:1b:71:e7:03:d3:e7:
84:3e:bb:a6:57:a9:12:38:9c:a3:ae:21:75:26:5a:
95:df:46:28:fc:5b:78:63:1a:75:78:fa:41:ff:b3:
36:de:99:5c:c8:09:01:15:4c:9e:5b:1a:12:21:c4:
2a:77:e3:df:e4:61:7b:14:8f:b5:ff:2c:b2:95:61:
b3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AF:9D:0B:61:60:5D:29:E6:96:20:5B:DA:83:DB:15:3B:0B:02:61
X509v3 Authority Key Identifier:
keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:37:af:a7:8c:6e:f8:5a:07:f7:29:eb:50:7f:75:8f:64:a3:
02:ea:c5:57:68:3e:cc:31:b5:30:9b:85:3c:6c:a0:03:b0:60:
db:f4:d1:6a:66:f0:c2:cf:25:43:57:c9:e6:ba:59:52:ac:72:
91:1a:99:f1:fa:5d:57:50:98:75:5c:05:17:3c:3f:6b:7e:46:
f2:6a:e0:b5:11:42:49:5e:b5:ed:bf:42:3e:4c:c4:83:de:b5:
ba:a5:82:05:0d:37:90:b8:c7:97:2c:89:57:84:74:ed:47:89:
77:20:61:f5:8b:b9:db:f6:f3:d6:d9:75:db:34:27:5f:0b:45:
c8:68:c0:a1:4b:52:88:3c:e2:ad:8d:b2:9b:fa:26:80:f2:e4:
e6:d6:1f:a4:31:94:6c:77:74:1c:72:2f:60:3b:f6:17:f0:52:
bb:ac:89:a5:a3:8a:56:bd:a6:eb:44:d3:0c:47:55:4a:9b:57:
69:28:6a:92:04:23:33:08:b7:d0:fd:ec:4b:6a:cd:3a:bc:3c:
38:af:44:dc:4e:25:23:ae:3d:20:54:1b:8a:ee:86:29:81:61:
e6:7b:1a:8b:c1:10:e8:16:7d:00:f4:e7:aa:e3:39:0e:86:16:
b8:2d:75:c5:ae:15:47:c1:73:e7:f6:50:e5:0c:81:2c:23:61:
95:ac:a8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:08 2026 by rpki-client