Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File: LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier: wcpySfkq8x/mnsI4o5eZoJM8QDmEiotRDeV2ijXovAo=
Subject key identifier: B8:57:4D:3D:35:24:F6:29:D4:9D:9F:9D:5E:E9:E2:8C:3F:41:EE:11
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 01A10E15503EFE42464806C30456CAA03261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number: 0A65
Signing time: Mon 05 Oct 2026 22:00:40 +0000
Manifest this update: Mon 05 Oct 2026 22:00:40 +0000
Manifest next update: Tue 06 Oct 2026 22:00:40 +0000
Files and hashes: 1: 2WFOqZZA2yIUnQ_6eth3jx2NPnU.roa (hash: z8D6G5qAyZtOctuyLt0W9PyzjKIioqDo4g6gtUqBJsA=)
2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: mIeLYLP5VzFsanNi+i4vSldsUYVVTnRQ45heh3NTczk=)
3: ibmc9wsJZvcLnKLI-HoZNttO1zA.roa (hash: xpCzDqZRfT8zeb7gy3XI7XFp4/7LKgH6afs/PfJpe7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:15:50:3e:fe:42:46:48:06:c3:04:56:ca:a0:32:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Oct 5 22:00:40 2026 GMT
Not After : Oct 6 22:00:40 2026 GMT
Subject: CN=b8574d3d3524f629d49d9f9d5ee9e28c3f41ee11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9b:d7:70:fa:fb:af:f5:b1:87:04:33:43:21:
2c:e9:ef:c5:c0:db:2f:28:e0:c8:63:2e:1b:b2:c9:
e7:45:bf:50:a1:31:7d:df:96:8f:80:5b:10:a8:62:
61:19:8a:e4:e9:93:3e:ce:fa:70:0a:e1:e4:fe:42:
d4:e2:3c:4f:e7:1f:c2:ad:84:e7:79:f8:b7:17:2f:
cc:48:4c:ac:d0:20:5e:a6:91:e6:47:a4:22:df:25:
b0:7f:34:cf:80:69:69:27:ad:5c:39:c7:f7:75:90:
19:62:a1:b1:77:93:3b:56:da:ec:66:02:b9:e0:6b:
8a:a3:50:05:b7:44:39:74:79:65:84:b5:87:b7:ed:
d1:16:c7:42:df:25:b4:87:5f:07:ba:14:4b:ee:c8:
40:71:b9:4b:88:27:10:ae:fd:d4:cd:0f:36:08:65:
bb:5f:23:af:7e:51:ce:db:29:41:86:f7:e4:0a:ef:
f4:28:11:7b:6e:99:ee:23:1c:99:94:84:04:4b:f7:
b0:8e:a3:27:95:c0:95:dd:8d:3a:88:51:f1:19:1c:
f9:ea:d1:5e:bc:0a:3b:3c:5e:cf:6e:58:ae:7f:37:
47:65:be:21:a2:f5:e4:f6:c3:f1:c9:25:75:21:36:
d5:01:b7:03:3e:85:f3:d1:9b:8e:66:81:fc:b1:32:
9c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:57:4D:3D:35:24:F6:29:D4:9D:9F:9D:5E:E9:E2:8C:3F:41:EE:11
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2d:44:d3:b3:58:aa:d7:d0:29:29:1d:e6:e3:42:4b:94:ff:
2e:ff:4a:84:d0:a5:57:ee:92:e5:4b:c4:db:7f:ee:4f:22:08:
c7:57:9e:b1:76:7e:25:5b:fc:d5:85:83:d7:a6:0a:98:be:1a:
15:7e:00:15:c7:6f:27:66:96:d6:3b:27:59:42:a3:dd:96:b9:
73:5e:0a:71:40:a8:b9:fc:69:59:82:b2:29:70:07:c5:8d:ee:
75:db:6a:06:d4:22:79:15:30:8e:2c:08:5d:dc:b6:3e:d3:06:
07:8e:98:96:64:50:ac:f8:48:46:18:21:75:8f:be:2c:d6:98:
c9:85:32:82:5b:ca:fa:e0:ed:ad:37:99:7e:50:6d:3f:85:a5:
32:41:ea:58:9a:8f:41:b0:d5:50:53:7e:59:33:ba:3b:24:56:
01:96:de:03:e5:13:5b:8b:82:a4:10:60:8e:0e:f4:ab:06:74:
c4:0c:eb:36:56:4b:de:94:b0:ae:30:6d:a7:e3:a1:9a:85:ff:
a0:5f:11:24:0a:d4:51:34:76:28:99:ea:fd:7b:55:30:64:85:
3b:c2:63:41:49:7a:c1:35:bc:82:eb:09:fb:77:aa:72:b6:ec:
db:c9:21:ab:e4:8c:c5:b4:61:5b:bc:d5:82:10:2b:6c:92:9d:
41:5e:00:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:02:52 2026 by rpki-client