
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File: llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier: 37fTHL8+k5HUp+DjNQSQMsqOEX9ei0ejjCz2FsBq4rw=
Subject key identifier: 30:57:5C:31:21:C2:58:57:A8:24:A6:3B:CB:89:F9:44:D8:FF:DA:FC
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer: /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial: 019D9B50ED540658BF548A357873FF50563B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number: 1028
Signing time: Fri 17 Apr 2026 12:01:05 +0000
Manifest this update: Fri 17 Apr 2026 12:01:05 +0000
Manifest next update: Sat 18 Apr 2026 12:01:05 +0000
Files and hashes: 1: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: cpGEeyLoold1SH8cVzX7UCiFch6g5lhodzGxdBHoPco=)
2: vsmnrTln0FKIYbUICJTrn_gYJUQ.roa (hash: 8GWosWzTHZxxvdZfNNXEvhtfiz2Ewi4ZMP6/Lvtvauc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:ed:54:06:58:bf:54:8a:35:78:73:ff:50:56:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Validity
Not Before: Apr 17 12:01:05 2026 GMT
Not After : Apr 18 12:01:05 2026 GMT
Subject: CN=30575c3121c25857a824a63bcb89f944d8ffdafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ab:dd:ef:c7:af:00:7d:72:2f:27:4d:ef:59:
fc:a7:47:8e:20:92:a4:18:b6:ef:cd:0c:0d:6f:58:
e7:4e:89:a8:7e:31:02:1d:67:3c:23:b6:81:b3:57:
40:0f:f1:d8:5a:d2:da:31:f6:58:ff:6c:10:5d:ed:
01:7e:53:f6:42:6e:09:ce:c0:d9:82:fc:b4:ec:bb:
ea:ea:3f:a7:e9:cd:db:09:42:14:78:5e:64:83:e7:
6e:21:51:5e:2e:6a:9c:2f:f5:64:b2:f6:9a:c0:ad:
98:07:5a:9c:49:ee:3d:a2:c9:f2:1f:5c:ab:9d:2e:
f4:47:1b:b3:73:56:99:4a:09:88:9d:7a:2a:98:2c:
b9:3a:c2:17:fe:fa:f7:db:97:f2:12:fa:94:a5:6e:
9e:17:bc:5d:0f:b3:75:89:a7:5a:85:75:0c:16:48:
a7:a5:1a:5f:de:67:2f:87:1f:84:d5:f1:2d:50:bc:
e9:b9:64:f0:1e:ad:42:c4:57:6c:4c:dc:de:4a:08:
07:53:a1:c7:19:b3:2b:a9:85:dc:4a:bd:c2:09:9c:
d6:07:9a:d1:83:09:6d:c0:9a:36:48:d9:4d:29:25:
04:c3:f5:02:47:75:d3:6d:16:43:d4:c6:6c:3b:97:
3a:e9:6e:e8:9f:8a:68:cc:d3:89:79:0a:a1:e4:45:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:57:5C:31:21:C2:58:57:A8:24:A6:3B:CB:89:F9:44:D8:FF:DA:FC
X509v3 Authority Key Identifier:
keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ed:25:64:57:22:f6:0e:85:99:0b:ce:91:1a:8f:ed:54:31:
99:9c:ee:f7:b9:5f:9b:c9:49:4b:dd:71:d3:72:ab:8f:b5:20:
14:d8:ad:a7:c2:ab:2c:55:65:4b:31:30:a9:f4:c5:7d:7d:b2:
af:02:5b:46:a9:a6:c7:e1:52:0e:ed:50:c5:91:2a:0c:75:15:
94:88:cb:c3:5f:5c:78:3b:8e:7f:b2:39:ef:0d:bd:a8:96:dd:
13:c3:ac:c6:5a:f9:04:5a:15:1f:95:c8:20:e5:41:8c:fa:6b:
5e:43:80:7e:a3:0e:3b:05:24:53:46:d8:56:c3:3e:66:b8:b1:
0b:37:34:fa:a9:42:29:d0:d2:ec:c8:7a:6c:64:30:27:a5:54:
04:24:a3:36:f8:61:34:ab:59:2f:4a:51:9b:fd:6b:fa:24:0c:
81:bc:f1:10:13:90:53:8b:52:30:c0:74:8b:0a:0d:a0:3e:4b:
32:1c:7a:13:0a:3e:7a:8a:96:64:b3:ec:1f:1b:93:7a:e8:dc:
59:de:66:0b:24:c4:28:87:c5:b9:7c:35:7b:a0:f8:38:c9:6a:
da:18:be:98:40:00:00:76:cc:31:95:41:b9:27:09:c0:dc:b4:
04:ba:62:4d:9c:e1:2f:38:15:bd:9a:ff:3d:90:9f:73:23:d1:
84:85:ee:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:02 2026 by rpki-client