Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier: p3gLt3UPqhr8hzWsdxvXUtJesiRh2EFbefbq4Szx8A8=
Subject key identifier: 3C:5A:26:4A:02:37:AF:5A:2E:01:74:22:DA:88:90:24:40:02:63:1C
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 019D27040F5D102027E4670F5FD8C0A2AEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:01:10 +0000
Manifest this update: Wed 25 Mar 2026 22:01:10 +0000
Manifest next update: Thu 26 Mar 2026 22:01:10 +0000
Files and hashes: 1: QGW4LwlvDICFL2rpJRW4EK0DFIc.roa (hash: dEh5JmMpZS30YtylfZQmdL8aaYHuh+kMQSbQLZPHa4Q=)
2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: /O+YrjQpt19TCHSudd1upJ0NNNYC3kMywnskeBVYc0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:0f:5d:10:20:27:e4:67:0f:5f:d8:c0:a2:ae:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Mar 25 22:01:10 2026 GMT
Not After : Mar 26 22:01:10 2026 GMT
Subject: CN=3c5a264a0237af5a2e017422da8890244002631c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:5b:e9:b9:1e:28:01:4f:b8:d8:0b:4d:49:
26:27:56:02:6d:24:f6:88:8f:86:42:64:b0:2d:61:
1b:36:9e:b3:1e:c8:f9:fe:41:72:85:93:d0:79:46:
a2:01:a9:dc:1d:95:95:77:e2:d9:d0:a8:d0:08:80:
1e:3e:89:c7:bb:4e:59:90:d9:37:cb:8e:ce:cd:9e:
50:4c:b2:72:30:62:81:a8:01:d2:42:8f:6a:2b:3a:
b1:e2:6d:d3:11:42:e5:d8:14:90:54:76:30:7f:d8:
5e:59:f6:22:13:70:91:e5:45:1c:fd:9e:b9:3e:d6:
69:5e:36:ae:9b:05:a6:32:33:a9:dd:a6:71:1f:52:
7c:6f:21:d4:67:f1:5f:ae:55:b5:b6:7b:43:33:ab:
74:d0:f9:00:73:00:ea:20:03:39:3a:14:0d:ad:c4:
fb:5e:9a:50:5b:fc:fd:80:ef:d1:e1:fa:30:dc:8f:
ae:ca:ab:04:83:c0:f5:0c:16:e3:62:b3:2c:f5:75:
81:8a:71:ce:54:d2:ff:08:29:22:04:58:4a:fd:dc:
ca:3b:59:a8:6e:59:94:97:1f:b6:e5:3f:31:86:b1:
10:8a:dd:b1:42:5b:5c:11:65:4e:52:62:24:8d:16:
d8:2d:5d:af:51:d9:aa:37:13:63:11:e3:ce:5c:ed:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5A:26:4A:02:37:AF:5A:2E:01:74:22:DA:88:90:24:40:02:63:1C
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8c:91:31:3b:8d:d7:18:cd:c7:af:80:1b:09:9f:0f:c2:f1:
ad:42:eb:96:9e:77:a7:a0:5f:bf:74:fb:7d:45:08:53:e7:48:
e1:6f:1d:c9:45:cf:37:88:7b:22:17:aa:91:66:01:53:03:2b:
4a:94:03:64:d5:45:78:af:c1:6f:69:45:06:37:2e:76:f5:37:
b4:f6:c5:39:a8:13:c7:c9:0b:9a:d0:2a:46:b1:a7:82:fe:5e:
16:e1:2a:28:a8:d2:4a:fb:20:0b:36:21:14:c9:f3:e7:2a:cc:
40:ef:c2:e3:16:28:19:f4:af:4f:55:87:3c:8f:60:ef:99:d7:
0f:3e:75:01:ab:0e:c3:83:e5:b2:b2:58:c3:d1:d9:37:09:da:
dd:81:7d:de:f0:d4:20:0e:3a:01:87:ed:fe:7a:7a:b4:ba:e9:
0e:81:a2:43:33:64:5a:8c:7c:70:b9:9b:ce:f3:3a:a3:71:25:
7d:b2:06:b1:a2:b3:9c:3a:c7:27:03:b6:f0:39:3b:96:21:d1:
6a:70:7d:23:ac:09:72:f5:94:7c:cf:b5:cf:59:c4:08:2e:8f:
a8:03:26:db:19:b3:43:26:c5:6c:0b:b0:18:7f:b0:bd:62:92:
fd:ac:ce:f9:25:84:bb:d7:e8:f3:d6:75:8f:80:02:bd:86:01:
53:03:10:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:47 2026 by rpki-client