Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File: llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier: qmHzO/O/AA9KGBv76EORs2ED71o1XKlj/29k1gXiSIU=
Subject key identifier: C1:6A:99:39:A5:A7:61:94:F4:F8:B9:CB:C5:00:17:BC:83:A5:64:1D
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer: /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial: 019CABD9F4E8388E3879E084177942F93CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number: 0FAC
Signing time: Mon 02 Mar 2026 00:01:53 +0000
Manifest this update: Mon 02 Mar 2026 00:01:53 +0000
Manifest next update: Tue 03 Mar 2026 00:01:53 +0000
Files and hashes: 1: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: AWT95NWhSy3+ZNnhATpFb8Em0AkXHTNyegzJ2WMeg88=)
2: vsmnrTln0FKIYbUICJTrn_gYJUQ.roa (hash: 8GWosWzTHZxxvdZfNNXEvhtfiz2Ewi4ZMP6/Lvtvauc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f4:e8:38:8e:38:79:e0:84:17:79:42:f9:3c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Validity
Not Before: Mar 2 00:01:53 2026 GMT
Not After : Mar 3 00:01:53 2026 GMT
Subject: CN=c16a9939a5a76194f4f8b9cbc50017bc83a5641d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:24:79:e4:71:68:52:28:b6:7e:cc:b1:cd:
dd:2c:62:89:91:0b:d9:3c:c4:52:ec:c7:6a:ca:43:
e1:fe:30:26:4a:2e:b4:d6:5b:c9:c6:33:3d:8d:7d:
db:9b:c0:77:a6:89:0a:3f:5f:80:82:e5:01:6d:8c:
3e:5f:cf:53:87:53:f9:02:6b:f7:e7:8c:e4:ff:cc:
a3:74:ab:f0:46:bd:8a:46:6c:1a:b6:3d:a2:4a:f1:
f2:8e:04:20:d0:90:4e:e0:2a:fe:3b:58:cf:ba:35:
44:16:2a:cf:db:49:95:55:d7:c4:ff:e2:50:cf:5c:
3f:9e:e8:79:0c:12:32:35:d7:e0:72:29:03:17:9b:
67:9d:04:45:9c:2b:d8:a5:ba:ef:dd:a7:e1:5d:1e:
9d:af:0f:8d:16:2b:d1:9e:36:7f:f8:bc:29:e3:11:
9f:1f:ad:88:b4:ee:06:61:bd:11:40:14:9a:dd:c5:
a4:f7:c6:ec:6e:6d:f6:e5:4c:29:8f:e9:f4:88:01:
5a:3b:d9:da:a6:f3:3c:91:60:ec:35:33:1e:08:26:
99:18:95:1a:ca:32:f4:a3:0f:4c:5b:0b:3c:c5:a5:
5f:4e:c9:5d:e6:1e:0d:28:29:b9:13:f8:6e:11:a3:
01:0d:ba:42:14:04:64:61:a8:f9:4e:b9:1c:29:26:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6A:99:39:A5:A7:61:94:F4:F8:B9:CB:C5:00:17:BC:83:A5:64:1D
X509v3 Authority Key Identifier:
keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:40:9c:5f:9a:cd:31:71:c8:70:b9:69:84:ca:d4:65:74:df:
a1:16:12:14:df:11:ec:0d:f6:d4:cf:38:bb:26:32:a4:6b:32:
26:8d:13:69:f2:c8:ed:08:d7:0c:34:6f:a6:c2:c7:34:a5:cc:
c3:31:b5:c1:06:a0:ae:a3:7a:02:3f:01:13:8c:f6:62:97:6f:
12:be:1c:df:70:8d:ae:fb:e6:f9:73:4b:4c:97:67:04:4f:53:
58:4a:3c:b4:4e:3e:ea:20:58:fd:de:5e:5b:b5:da:4e:4e:ed:
9e:6e:54:cc:e6:66:4d:87:aa:e3:ab:46:af:74:69:bb:ab:93:
12:9f:17:9d:9c:5e:4b:4d:47:e3:e2:ad:0b:d0:57:d8:c5:4f:
63:82:01:be:47:8f:42:8c:3f:7e:18:35:1e:44:d5:e4:a9:02:
c0:f7:b4:7c:16:1e:20:fd:e8:76:0d:d6:03:51:ba:fa:41:8b:
24:55:2f:d0:02:3b:34:93:e6:a2:f3:cf:3e:07:46:e2:97:bf:
30:d4:8f:28:e0:5b:1f:de:f8:8d:63:c8:24:77:cb:d0:f7:32:
7c:42:e5:ba:4d:d0:6f:99:a7:cd:51:63:69:58:5f:8f:64:50:
15:7c:20:96:39:30:8b:bc:57:3c:e0:d2:5a:06:15:77:e2:71:
8c:a3:c3:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2fToOI44eeCEF3lC+Tz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NWE2YWJmZGIwODc0ZjJmZWMyMjYyY2RlYTMzNzNhZGNi
MmRjNTUwHhcNMjYwMzAyMDAwMTUzWhcNMjYwMzAzMDAwMTUzWjAzMTEwLwYDVQQD
EyhjMTZhOTkzOWE1YTc2MTk0ZjRmOGI5Y2JjNTAwMTdiYzgzYTU2NDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf0keeRxaFIotn7Msc3dLGKJkQvZ
PMRS7MdqykPh/jAmSi601lvJxjM9jX3bm8B3pokKP1+AguUBbYw+X89Th1P5Amv3
54zk/8yjdKvwRr2KRmwatj2iSvHyjgQg0JBO4Cr+O1jPujVEFirP20mVVdfE/+JQ
z1w/nuh5DBIyNdfgcikDF5tnnQRFnCvYpbrv3afhXR6drw+NFivRnjZ/+Lwp4xGf
H62ItO4GYb0RQBSa3cWk98bsbm325Uwpj+n0iAFaO9napvM8kWDsNTMeCCaZGJUa
yjL0ow9MWws8xaVfTsld5h4NKCm5E/huEaMBDbpCFARkYaj5TrkcKSb7+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFqmTmlp2GU9Pi5y8UAF7yDpWQdMB8GA1UdIwQY
MBaAFJZaar/bCHTy/sImLN6jNzrcstxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xMjQxN2YtNzY2NS00MDk4LWEzMzgt
NDk0OWIxZTJiNjBmLzEvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xMjQxN2YtNzY2NS00MDk4LWEzMzgtNDk0OWIxZTJiNjBm
LzEvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0CcX5rN
MXHIcLlphMrUZXTfoRYSFN8R7A321M84uyYypGsyJo0TafLI7QjXDDRvpsLHNKXM
wzG1wQagrqN6Aj8BE4z2YpdvEr4c33CNrvvm+XNLTJdnBE9TWEo8tE4+6iBY/d5e
W7XaTk7tnm5UzOZmTYeq46tGr3Rpu6uTEp8XnZxeS01H4+KtC9BX2MVPY4IBvkeP
Qow/fhg1HkTV5KkCwPe0fBYeIP3odg3WA1G6+kGLJFUv0AI7NJPmovPPPgdG4pe/
MNSPKOBbH974jWPIJHfL0PcyfELluk3Qb5mnzVFjaVhfj2RQFXwgljkwi7xXPODS
WgYVd+JxjKPDSA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:21 2026 by rpki-client