Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
File: llE13UJRn92j3T_aqdszV4FfrXU.mft (raw, json)
Hash identifier: Qyg8aner6QXXKaJ7frFLpFvCjNUC8gTFinEh+VSue1w=
Subject key identifier: 8D:57:C8:29:52:7A:69:C3:8A:FD:B9:1B:69:AF:66:C3:FA:12:4C:99
Authority key identifier: 96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75
Certificate issuer: /CN=965135dd42519fdda3dd3fdaa9db3357815fad75
Certificate serial: 019D27A896AB36DA15B7AC6E1CD6D0419363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
Manifest number: 15EE
Signing time: Thu 26 Mar 2026 01:00:53 +0000
Manifest this update: Thu 26 Mar 2026 01:00:53 +0000
Manifest next update: Fri 27 Mar 2026 01:00:53 +0000
Files and hashes: 1: FwHHGDuiIFa52ARkZ9ESZ3au7NI.roa (hash: 3HUhYNCu5qpy7dP4zYZjir8YCzM2yFohiBtl0jP26zw=)
2: llE13UJRn92j3T_aqdszV4FfrXU.crl (hash: rG5vxaqTFznZhzkD7LQnBS7voxpr1JVaK8Khn8wY2rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:96:ab:36:da:15:b7:ac:6e:1c:d6:d0:41:93:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965135dd42519fdda3dd3fdaa9db3357815fad75
Validity
Not Before: Mar 26 01:00:53 2026 GMT
Not After : Mar 27 01:00:53 2026 GMT
Subject: CN=8d57c829527a69c38afdb91b69af66c3fa124c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:77:5d:37:1b:a1:6f:e6:ea:27:41:b4:40:
7a:9b:cc:3f:ee:ca:60:68:6f:25:a4:08:27:2e:75:
31:8e:0b:bf:71:f6:83:68:57:5a:2b:e7:98:8b:ed:
cc:e5:46:e5:ff:10:3d:dd:83:83:42:dd:2f:31:5f:
e4:e1:60:50:a8:46:da:dc:53:95:0b:85:06:4a:84:
1d:50:f0:eb:fd:fb:54:69:92:a2:ce:af:af:29:cb:
4e:39:12:37:6b:32:56:28:d7:e0:99:b9:ec:df:c1:
8d:05:75:07:f8:74:a6:ae:66:ac:65:33:eb:9e:98:
d1:c2:2e:6e:77:7a:37:15:15:d0:0d:5a:b0:1e:10:
83:d0:f7:a5:41:08:cf:46:f0:f0:d7:b5:d1:cf:b3:
70:bc:a0:1d:83:6f:b9:4b:72:f0:6c:31:8b:71:5d:
51:fb:42:4a:24:74:05:87:59:19:19:8a:84:0a:39:
2c:b5:e6:24:a7:7e:06:60:8c:62:b0:e4:ed:b1:f6:
ac:70:30:49:09:6d:77:eb:d6:1e:2c:92:96:1b:c4:
56:a1:be:e6:b9:e5:54:3e:bf:06:89:c4:78:bb:e8:
fc:9a:b4:47:19:ef:26:ea:ec:96:f5:8f:59:7b:5a:
93:e3:6e:c2:f9:9f:9a:a9:3c:30:ad:06:08:b2:52:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:57:C8:29:52:7A:69:C3:8A:FD:B9:1B:69:AF:66:C3:FA:12:4C:99
X509v3 Authority Key Identifier:
keyid:96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:78:c8:a6:c9:9b:ae:85:e5:86:09:16:aa:cd:d7:fd:31:a6:
99:fb:1e:c9:68:09:16:51:0a:80:99:0c:78:be:dd:dd:c5:88:
6e:7e:ed:14:75:79:c1:f5:1f:6c:02:72:73:9c:49:6a:42:7e:
8d:d7:f8:34:2d:21:28:04:4f:b4:a8:84:6c:7a:eb:d9:25:54:
da:3f:c1:0b:da:34:55:b5:3b:74:c6:57:43:d2:d2:e0:cd:ab:
e5:19:25:e2:a3:33:9b:e5:6f:93:45:22:21:46:78:e5:c2:a2:
33:30:d5:24:fb:dd:a9:c7:ee:9a:e9:5c:ed:4b:e1:10:32:54:
91:82:62:b9:d1:10:b1:87:11:55:2d:d0:a6:67:17:61:38:6a:
1d:80:1f:8a:dd:5d:ab:2e:02:26:fb:24:fb:ef:42:2b:60:5c:
c7:e2:77:18:f8:a3:6f:88:c4:2c:28:8a:c0:59:b1:a4:9b:f6:
f8:79:12:ed:a0:08:78:93:34:dc:7d:44:39:83:32:af:8d:1e:
da:4b:cc:8f:6a:20:20:1f:98:67:fc:67:d2:85:32:3a:e0:50:
42:c2:17:98:90:38:7d:1e:0a:c8:69:c3:bd:aa:a9:fa:a1:e5:
91:61:f3:8d:c0:28:43:52:97:a5:8d:d1:c1:51:99:ec:5c:a5:
bb:b2:76:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:56 2026 by rpki-client