Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier: tVMgO2Pxaj757rOwwuwKeHHLFM7fNX5hz7dw2oYDft4=
Subject key identifier: 0A:A0:9C:16:96:88:58:40:91:67:21:33:3E:65:D6:AC:B6:07:2D:EE
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 019F94DBA5D0A041262015D64B3D705A1B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 16:00:50 +0000
Manifest this update: Fri 24 Jul 2026 16:00:50 +0000
Manifest next update: Sat 25 Jul 2026 16:00:50 +0000
Files and hashes: 1: QGW4LwlvDICFL2rpJRW4EK0DFIc.roa (hash: dEh5JmMpZS30YtylfZQmdL8aaYHuh+kMQSbQLZPHa4Q=)
2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: x52E4aFR8D5Xn37aVOT/e1oyx/OF1aBICPlC6tmdOZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:a5:d0:a0:41:26:20:15:d6:4b:3d:70:5a:1b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Jul 24 16:00:50 2026 GMT
Not After : Jul 25 16:00:50 2026 GMT
Subject: CN=0aa09c1696885840916721333e65d6acb6072dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:9c:61:5b:ab:e2:62:cc:12:ac:2f:a8:5b:
4f:b0:50:fa:18:8e:c6:8c:9e:83:41:2f:84:81:92:
9d:8f:da:7e:79:03:00:c8:ce:d8:93:3b:09:36:28:
cb:de:74:83:38:99:92:ee:7d:99:f0:e1:05:8a:9c:
f1:f6:d4:4e:52:d0:c4:b1:a0:25:ba:19:e7:38:83:
b3:dd:87:af:6f:59:5f:aa:87:7f:ec:4b:84:cd:40:
c0:16:d4:99:03:6a:a4:35:4d:bc:5c:fc:ea:d4:6c:
70:ec:a3:6e:10:69:f9:06:37:29:ea:d7:d5:50:9f:
50:d5:a4:79:e7:68:a1:cd:69:ac:ef:fe:84:9b:6f:
8f:cf:c3:5c:f7:ea:1c:9a:9c:64:8c:c3:f8:1f:a6:
76:af:89:0f:96:69:76:4f:e8:c7:a5:98:b5:58:d9:
ac:5b:72:b5:f1:04:c0:c9:a7:99:fc:78:e2:18:e3:
e0:44:e6:d5:15:d9:3a:ad:c7:c1:7e:3e:7b:9c:38:
1c:c9:ea:39:b9:3b:c3:b5:08:78:b6:27:dc:78:ed:
7f:44:b0:6f:2b:7b:33:da:13:6e:50:b5:04:3c:82:
71:4b:a7:a9:51:92:a2:20:20:31:09:89:19:0d:b4:
41:79:79:cf:6e:10:b2:a4:e2:96:af:02:d1:7e:b9:
e4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A0:9C:16:96:88:58:40:91:67:21:33:3E:65:D6:AC:B6:07:2D:EE
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:74:29:db:c3:8a:63:91:66:94:a9:92:5e:f1:c3:2a:ab:43:
85:d0:45:79:ed:0e:a6:62:20:7b:da:75:a9:c5:54:47:b6:f9:
9f:30:02:60:82:79:7b:34:5a:64:3d:49:b6:09:0e:d2:52:e8:
43:1f:39:53:08:ca:4e:7d:83:3e:7a:81:49:a7:08:7a:4e:ac:
51:b2:2a:9d:e2:ed:b7:f8:b5:18:e9:91:6e:e6:79:62:5a:d8:
3e:6f:52:ca:4e:d2:c2:2c:8b:94:48:38:cf:cd:3c:c9:17:74:
12:7c:e6:60:9b:ec:56:fd:d1:80:8a:75:27:f3:8b:3f:45:ad:
48:04:aa:43:4e:c8:28:ee:33:58:a9:d8:f0:fb:6a:1e:f0:3c:
a6:79:e3:d4:23:8a:4b:78:e1:3a:08:a2:f6:c0:ab:96:97:84:
eb:17:ef:e6:9f:bd:0f:b0:cd:8a:25:b3:60:52:66:01:aa:f4:
40:4a:6c:af:68:05:2f:c0:b9:b0:7f:0a:20:4d:c2:ce:44:ee:
3d:9c:3d:f8:5e:55:5b:a8:c5:8a:61:da:07:e9:c1:55:0f:b9:
97:d4:9c:46:ee:41:83:ac:70:2b:df:e9:6c:e5:63:bb:ab:ce:
e8:5b:5d:41:9f:f6:93:9a:63:86:bf:67:ba:1c:e6:f9:05:8b:
ba:55:66:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:05:58 2026 by rpki-client