Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
File: llRbrTliWupnkD-Bg_n7uurGyI0.mft (raw, json)
Hash identifier: E2VCblEk9wUENTUgb7lkhaNVIHGQ5F6r1yBHCKGQ4mc=
Subject key identifier: 3D:AB:BF:13:AF:F9:39:CE:90:34:CE:A5:2D:E9:06:8C:02:60:F4:B7
Authority key identifier: 96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
Certificate issuer: /CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Certificate serial: 01A0D124DFA55C4CF5B65FBBC93427027A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 02:00:49 +0000
Manifest this update: Thu 24 Sep 2026 02:00:49 +0000
Manifest next update: Fri 25 Sep 2026 02:00:49 +0000
Files and hashes: 1: llRbrTliWupnkD-Bg_n7uurGyI0.crl (hash: GW1ghGXBqlEmuPHIJIKfh1zfdMXFJZoQ9J95R3pC5rE=)
2: xlcC7OzJncwz3-3fDqQVCRiRUuA.roa (hash: +tBbtDRSVVjOD+h/7bnuccyOYojgyYfukEn9rcwiF1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:df:a5:5c:4c:f5:b6:5f:bb:c9:34:27:02:7a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Validity
Not Before: Sep 24 02:00:49 2026 GMT
Not After : Sep 25 02:00:49 2026 GMT
Subject: CN=3dabbf13aff939ce9034cea52de9068c0260f4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:a0:f1:c9:eb:51:5e:10:7e:e6:d8:ae:f5:
2c:68:3e:e4:eb:eb:95:10:cf:7a:61:5e:4a:15:75:
44:a3:14:e3:4c:41:9d:7b:d4:dc:f0:99:31:e1:06:
63:30:78:99:81:db:0b:e7:88:a7:3a:d1:25:0f:21:
94:7f:12:fb:2c:80:2c:42:d4:9b:72:df:6e:4e:44:
24:1f:1e:5b:f8:10:69:90:98:04:cd:c2:8f:e3:71:
37:c1:e1:2b:0b:a3:6f:f5:1b:47:da:22:dc:03:93:
da:38:c6:1c:b2:4f:80:12:5f:27:e0:f8:8e:fe:75:
0f:65:f4:b3:15:5e:76:f4:65:99:84:01:44:cb:a9:
de:87:76:68:af:33:39:4e:78:5f:26:b8:b5:ce:4f:
22:14:31:4b:85:fd:20:24:c7:d5:7a:2c:63:2f:4b:
1c:ab:27:83:db:52:4c:05:64:af:32:16:64:66:67:
b4:61:0e:24:65:7d:13:f6:02:8c:f2:52:c9:72:64:
18:61:f5:6f:cc:27:df:82:13:2a:8f:7f:b4:99:34:
36:8b:61:25:60:4f:e5:e9:ca:9a:25:e2:26:7c:88:
ba:7c:57:5f:0b:78:9d:d0:9f:13:b9:db:40:c3:cf:
f3:6f:2e:92:4f:79:29:36:74:06:94:7a:a6:1a:9d:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AB:BF:13:AF:F9:39:CE:90:34:CE:A5:2D:E9:06:8C:02:60:F4:B7
X509v3 Authority Key Identifier:
keyid:96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:26:3b:92:86:76:10:52:54:0e:ff:c9:bc:8a:3d:f9:0f:93:
eb:08:ed:fd:10:26:65:21:7b:19:e7:c6:a8:d1:93:f2:98:e9:
cd:95:ed:87:88:6b:90:de:0e:f3:6e:62:26:49:76:ac:76:63:
fd:c5:99:10:9a:3a:4a:0b:27:16:bf:2e:c1:f6:4a:77:f1:fb:
39:3d:bd:01:b8:79:81:aa:23:37:9d:5b:85:a2:5d:f1:88:1f:
39:23:04:c0:a4:7f:ba:db:3d:3c:af:00:e6:8d:11:33:ad:7b:
69:0d:5d:f8:4e:85:a9:d4:71:13:01:00:22:03:0a:d0:e2:8b:
32:b7:2d:5d:7a:04:2f:19:1e:aa:74:16:68:77:7d:8b:41:fb:
3c:6b:58:07:21:95:1c:1d:78:dd:1b:e2:dd:9b:9d:ec:39:f2:
76:b1:c9:3b:4f:b4:cb:2d:f0:09:59:01:89:89:b3:75:e6:16:
70:e5:8f:26:01:fd:7c:1f:f7:c3:98:07:71:83:e7:b3:b0:0c:
76:4d:7c:96:f9:85:26:f0:f5:07:cc:33:98:d3:b7:07:81:6c:
0d:f2:f5:98:a6:30:b3:fa:4d:e0:ef:d4:d4:ce:8a:13:ae:5b:
40:f2:3f:0f:2b:1f:5b:b8:59:fd:a6:b1:47:70:d8:45:91:18:
b9:42:c7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:39:49 2026 by rpki-client