Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
File: llxaucCRqzxFBQaKkv_LAZhJqng.mft (raw, json)
Hash identifier: uq2yVI95+iiV0eNCMeAwfCahtmk7Cw9zRqQbjWOCsQM=
Subject key identifier: 0F:C5:84:1A:A8:12:47:70:AC:CE:B9:0E:4A:2D:D3:55:8C:BB:B8:E9
Authority key identifier: 96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
Certificate issuer: /CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Certificate serial: 019D299767C1CBA267D7DCF9B52DDFB1AF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
Manifest number: 17ED
Signing time: Thu 26 Mar 2026 10:01:21 +0000
Manifest this update: Thu 26 Mar 2026 10:01:21 +0000
Manifest next update: Fri 27 Mar 2026 10:01:21 +0000
Files and hashes: 1: 7Em6m0eOG2ORXVo2QzO-nLgQAwE.roa (hash: S5HUFhQEQs2JuXJGAn7o8orB6NiPPcNSTOFKC5UZEp4=)
2: llxaucCRqzxFBQaKkv_LAZhJqng.crl (hash: /dhQoVhKeWmx/37eqpC7mHbUoMHvc6Y3pQbGcXKJ1jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:67:c1:cb:a2:67:d7:dc:f9:b5:2d:df:b1:af:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Validity
Not Before: Mar 26 10:01:21 2026 GMT
Not After : Mar 27 10:01:21 2026 GMT
Subject: CN=0fc5841aa8124770acceb90e4a2dd3558cbbb8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:c9:71:c3:32:41:33:73:e7:27:49:7a:ef:
80:0d:5c:1b:3c:f6:75:19:3f:c2:e6:c8:d8:b8:02:
27:5d:a5:64:2a:42:c7:10:0b:ad:fa:5e:5a:29:f5:
9e:21:8d:b5:08:fb:e9:ee:b0:11:10:02:24:48:5a:
35:4d:fc:14:97:54:0e:d2:a0:63:7f:ae:3a:5a:d7:
50:c7:bf:3e:1e:8b:1b:83:a3:1a:81:db:81:04:c8:
87:02:6e:06:26:14:f1:de:49:cb:69:9b:c1:b9:65:
4a:39:69:d0:97:80:95:3c:af:96:64:b2:d8:0e:9a:
8f:30:15:41:fe:e3:2b:af:d9:a8:e7:e6:75:96:33:
1f:50:13:77:0f:c9:51:37:f0:fb:a5:a7:a2:6e:50:
6e:d6:10:d2:85:f8:13:3a:5b:2b:d7:f2:d5:31:bc:
b9:06:2e:38:b7:1f:9d:f6:2a:d5:f9:4d:90:56:32:
25:d5:a0:2d:2f:2d:6a:c6:36:3a:97:c6:39:76:4b:
ad:11:a9:3e:73:7d:00:14:a1:93:e0:8a:03:37:01:
95:f3:26:c5:27:b6:27:59:d7:31:40:ea:d5:1f:df:
58:3e:2a:18:84:48:67:03:28:28:0c:a3:f7:c4:d3:
bf:e9:55:9f:16:88:16:64:ea:e8:24:a2:d1:ac:58:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C5:84:1A:A8:12:47:70:AC:CE:B9:0E:4A:2D:D3:55:8C:BB:B8:E9
X509v3 Authority Key Identifier:
keyid:96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:82:ea:6e:3f:71:91:3d:bb:6a:e1:3d:83:02:3d:32:58:58:
fb:79:c5:b8:82:87:1e:94:cc:45:d1:6c:40:50:c8:58:13:30:
71:2f:77:aa:23:81:44:4c:d9:3e:9e:d5:48:74:f6:7c:b8:08:
e8:2a:a0:b2:16:27:e6:9f:53:53:b4:1f:18:17:a1:b6:f1:e5:
30:fb:d0:8c:d6:c4:f6:43:80:10:62:5d:b9:09:5b:60:a5:91:
21:f3:98:b3:0f:7f:e0:e9:30:c8:2d:71:f4:0b:20:f4:82:a9:
84:e5:5d:9b:7e:00:db:95:14:79:d6:60:6a:78:ac:7d:55:b1:
af:2e:07:cc:98:5a:23:d6:8d:91:a6:f2:da:31:f2:8e:63:de:
c0:c7:1f:62:93:ad:2b:24:38:ea:2a:32:b1:84:9a:cf:be:78:
05:57:1d:92:3f:1b:2f:5c:7f:e6:85:f5:89:0d:64:6a:79:34:
27:b2:4d:72:e3:e2:41:02:15:53:95:2f:98:95:00:d3:5f:42:
1f:bf:3f:95:03:76:6e:04:77:6e:f2:93:3a:0a:92:d9:b8:87:
5d:0a:7f:b0:a2:6d:43:0d:e3:d4:b9:04:64:b2:13:92:9f:aa:
7a:76:bd:a5:70:29:1b:35:be:11:ae:d9:09:1f:b4:98:78:da:
f1:85:09:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:17:26 2026 by rpki-client