Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File: llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier: +ZoRdLJa6T3Lbk/LBPIEBsprV0vkzxsW9dxeN+4OMIQ=
Subject key identifier: 4C:A3:F1:0F:6C:59:D3:00:09:5F:CA:E4:AF:AE:A1:19:7A:78:3F:49
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer: /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial: 019CADC80DADF959E02E3CE1871BB7A14534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number: 0FAD
Signing time: Mon 02 Mar 2026 09:01:34 +0000
Manifest this update: Mon 02 Mar 2026 09:01:34 +0000
Manifest next update: Tue 03 Mar 2026 09:01:34 +0000
Files and hashes: 1: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: 26IDAC+AlbniBiJ1n98pOhl+tY9oHB4Z0uKHmDluFvM=)
2: vsmnrTln0FKIYbUICJTrn_gYJUQ.roa (hash: 8GWosWzTHZxxvdZfNNXEvhtfiz2Ewi4ZMP6/Lvtvauc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:0d:ad:f9:59:e0:2e:3c:e1:87:1b:b7:a1:45:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Validity
Not Before: Mar 2 09:01:34 2026 GMT
Not After : Mar 3 09:01:34 2026 GMT
Subject: CN=4ca3f10f6c59d300095fcae4afaea1197a783f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:91:53:00:b3:77:be:42:23:aa:2f:c4:25:
ee:bc:6e:8b:a0:47:a0:8b:89:a7:a5:f4:2e:b4:50:
61:6a:dd:fe:a7:d2:75:8c:fc:7c:80:1a:e1:21:dc:
a2:15:a8:e7:43:a6:49:fa:02:45:01:98:63:2a:3d:
92:fa:93:17:a0:64:fb:36:b0:d5:65:e1:e0:e7:c3:
d4:1c:eb:c7:49:f9:de:72:c0:97:25:a8:26:d6:52:
a8:4e:ec:56:22:81:84:ad:b5:e0:50:78:c6:95:a5:
e2:cd:71:9a:aa:77:cb:02:cd:8d:42:27:6c:6c:25:
88:5c:50:44:4e:5e:90:ec:9f:44:53:62:b4:d8:c6:
3e:57:d3:1f:3b:65:b2:0b:f5:c0:d4:2d:d0:31:7b:
b9:22:cb:69:85:1a:82:5d:ee:41:3e:8d:7b:95:a6:
35:de:7f:a0:bd:60:55:eb:bb:ac:8b:6e:2c:ba:a2:
04:6e:0b:7b:a7:eb:87:e3:ee:25:3c:3f:3f:4a:4e:
51:53:79:a3:7c:79:66:e7:77:ab:fe:ba:4c:3f:5f:
ae:e6:0b:be:6f:c9:2f:c0:e4:17:f4:09:05:21:bf:
79:cf:00:48:21:23:94:ad:8b:08:2f:06:5d:04:34:
90:da:0b:61:73:a3:4a:ef:d1:37:cd:b0:4e:e0:cb:
1d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A3:F1:0F:6C:59:D3:00:09:5F:CA:E4:AF:AE:A1:19:7A:78:3F:49
X509v3 Authority Key Identifier:
keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:56:bf:7a:0c:24:8b:b0:9b:cc:66:ff:8f:ef:94:4a:8c:cb:
1b:eb:2d:ae:99:98:f9:aa:ae:9e:cb:ff:6e:27:8f:fe:eb:25:
a3:45:6c:d8:c5:c1:59:6e:cd:57:2a:97:2e:c7:0b:0f:4f:4d:
8b:d0:73:eb:99:3a:39:4a:e8:7e:4d:dd:c8:9e:ff:96:f2:55:
66:7d:a7:59:b8:7f:e9:cb:68:72:24:74:82:d5:3e:7d:73:b1:
25:80:d8:c9:41:e5:10:27:d2:79:be:81:b0:82:59:0e:b3:8b:
c6:65:9a:be:36:07:16:92:d2:0d:c7:9b:7b:da:17:0e:9a:b2:
ed:58:44:34:1a:2c:48:b1:72:fe:9d:22:45:96:fb:06:b8:7f:
1d:4b:d5:aa:0b:de:76:8d:0c:31:ec:96:a5:6e:6f:9a:f6:20:
8e:3b:fc:de:53:24:8e:5d:18:9a:af:7a:88:f3:a2:d2:a8:30:
af:8f:a5:6c:69:11:9b:88:3b:b5:0b:cc:cb:3d:02:35:be:f0:
bc:47:36:c3:6b:04:39:d4:92:14:7b:78:8c:9b:5b:a4:8f:52:
53:09:08:4d:70:61:b7:f5:16:e4:55:88:34:3f:95:1e:13:d4:
a1:49:fd:7c:5e:b8:2c:8e:00:f2:be:16:e5:0d:7f:94:d7:5b:
af:9d:15:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:07:26 2026 by rpki-client