Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
File: LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft (raw, json)
Hash identifier: R5dSs2EDqI2e7n6i+xFTwtjYKkz0CMxBwRkP0+wfx00=
Subject key identifier: 49:75:4F:48:AA:92:1A:4A:25:EB:0A:69:4B:25:EC:A3:31:40:BF:DF
Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
Certificate issuer: /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Certificate serial: 019D9A748DC43EEF9A21355FE47DF9C2495A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
Manifest number: 0CED
Signing time: Fri 17 Apr 2026 08:00:22 +0000
Manifest this update: Fri 17 Apr 2026 08:00:22 +0000
Manifest next update: Sat 18 Apr 2026 08:00:22 +0000
Files and hashes: 1: LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl (hash: 5D9nxGJE8wYlm9b6MT7HjAb3hr5vN/69JcyrKaBsbxM=)
2: z_i2HLAe207eqqdf1Xix5ENRMe4.roa (hash: ztqjP6xacDo+JPNkJa5MSwjbXr7h1+BJzgwfqlxxQ4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:8d:c4:3e:ef:9a:21:35:5f:e4:7d:f9:c2:49:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Validity
Not Before: Apr 17 08:00:22 2026 GMT
Not After : Apr 18 08:00:22 2026 GMT
Subject: CN=49754f48aa921a4a25eb0a694b25eca33140bfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:86:44:c1:e3:ad:47:4d:bd:b8:ba:25:76:ce:
2f:03:07:2f:42:c3:e0:48:2b:fb:c0:89:11:c6:c1:
30:13:91:86:ee:bd:c5:23:4d:2c:a6:82:9e:d1:96:
ce:6b:de:47:3e:df:fb:ef:b3:ad:10:41:29:82:55:
82:10:7d:b4:19:ee:f2:af:9c:02:92:33:01:fe:e7:
ff:6f:76:3f:f2:83:ca:d5:5f:16:67:37:1f:2a:c2:
c8:5a:c1:0e:4a:d4:f0:3b:f8:1a:f4:0f:ac:e8:79:
04:d8:c1:97:6d:30:07:98:b6:77:e6:3b:46:ef:31:
71:20:44:d2:a9:71:8a:0b:94:3b:ef:0f:25:07:73:
9e:c2:d0:1a:df:5f:c6:be:1a:70:f1:92:02:ef:ef:
d5:bc:77:6b:e1:26:20:95:98:d5:79:68:64:e1:09:
1e:fd:74:30:aa:6c:28:ba:ea:0d:c8:6c:1f:2a:0f:
22:f8:f4:90:d8:9f:96:d4:b6:4f:a2:d6:e3:a0:8e:
32:2b:f7:e9:c6:9a:e1:f0:e8:43:3c:3a:5a:5c:ce:
59:7b:09:7a:6f:7a:b5:a3:78:95:c2:d5:a1:23:3c:
ed:eb:35:25:a7:8e:2b:50:14:97:61:a7:69:c1:7e:
99:38:ad:39:5b:db:65:a5:c8:a3:76:4e:d0:97:43:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:75:4F:48:AA:92:1A:4A:25:EB:0A:69:4B:25:EC:A3:31:40:BF:DF
X509v3 Authority Key Identifier:
keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:69:2a:d7:76:ee:50:b7:3b:6b:41:57:8a:95:9c:9a:57:98:
ef:15:84:5b:7b:98:15:0d:71:4e:2a:2a:96:d3:cd:f5:6c:2e:
2b:d2:ab:e0:01:80:93:a2:9f:8e:96:70:38:f9:28:07:d3:8c:
f8:0b:9c:df:e5:3a:60:97:92:ae:51:32:d8:c6:42:aa:4e:67:
af:ef:75:10:ec:69:da:fe:a4:b5:f7:e6:9f:82:28:ca:97:c0:
bd:c5:f6:1d:6c:64:89:74:98:3b:81:19:3d:3e:e4:4b:fb:2b:
b8:73:cb:1f:0c:4f:23:a1:c8:74:36:df:5a:20:f5:32:19:8a:
c5:0e:56:41:cf:1e:31:54:9b:10:8b:39:5a:26:22:2c:88:0e:
84:e9:96:3d:e2:c1:84:37:07:f2:7e:21:34:f6:a5:1f:36:31:
d4:2f:80:ab:5f:de:cf:14:b6:1e:63:cf:b4:88:aa:f4:83:c2:
84:bc:ed:d9:29:cf:5f:30:14:ce:8e:66:72:3e:e9:68:58:29:
55:e8:46:95:40:45:86:1f:22:f9:cd:ff:ba:70:8e:b1:7d:b3:
a9:06:23:5c:a5:7b:c8:33:08:7c:ff:36:22:38:3b:3e:c6:96:
b2:92:25:d0:31:6f:79:20:55:c6:d2:f7:77:16:0c:cc:1a:ce:
c4:1b:b8:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adI3EPu+aITVf5H35wklaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYjQyOTFkZjk3OTYzYzVhOWI3MzJiMTM5NmYwZjFjODg3
NTA0ZDYwHhcNMjYwNDE3MDgwMDIyWhcNMjYwNDE4MDgwMDIyWjAzMTEwLwYDVQQD
Eyg0OTc1NGY0OGFhOTIxYTRhMjVlYjBhNjk0YjI1ZWNhMzMxNDBiZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YZEweOtR029uLolds4vAwcvQsPg
SCv7wIkRxsEwE5GG7r3FI00spoKe0ZbOa95HPt/777OtEEEpglWCEH20Ge7yr5wC
kjMB/uf/b3Y/8oPK1V8WZzcfKsLIWsEOStTwO/ga9A+s6HkE2MGXbTAHmLZ35jtG
7zFxIETSqXGKC5Q77w8lB3OewtAa31/Gvhpw8ZIC7+/VvHdr4SYglZjVeWhk4Qke
/XQwqmwouuoNyGwfKg8i+PSQ2J+W1LZPotbjoI4yK/fpxprh8OhDPDpaXM5Zewl6
b3q1o3iVwtWhIzzt6zUlp44rUBSXYadpwX6ZOK05W9tlpcijdk7Ql0MLbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEl1T0iqkhpKJesKaUsl7KMxQL/fMB8GA1UdIwQY
MBaAFCy0KR35eWPFqbcysTlvDxyIdQTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTExRcEhmbDVZOFdwdHpLeE9XOFBISWgxQk5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mOTY4NGUtMDllMi00OWNjLTg1MWQt
YWY0YzA2ZjMxYWZmLzEvTExRcEhmbDVZOFdwdHpLeE9XOFBISWgxQk5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9mOTY4NGUtMDllMi00OWNjLTg1MWQtYWY0YzA2ZjMxYWZm
LzEvTExRcEhmbDVZOFdwdHpLeE9XOFBISWgxQk5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2kq13bu
ULc7a0FXipWcmleY7xWEW3uYFQ1xTioqltPN9WwuK9Kr4AGAk6KfjpZwOPkoB9OM
+Auc3+U6YJeSrlEy2MZCqk5nr+91EOxp2v6ktffmn4IoypfAvcX2HWxkiXSYO4EZ
PT7kS/sruHPLHwxPI6HIdDbfWiD1MhmKxQ5WQc8eMVSbEIs5WiYiLIgOhOmWPeLB
hDcH8n4hNPalHzYx1C+Aq1/ezxS2HmPPtIiq9IPChLzt2SnPXzAUzo5mcj7paFgp
VehGlUBFhh8i+c3/unCOsX2zqQYjXKV7yDMIfP82Ijg7PsaWspIl0DFveSBVxtL3
dxYMzBrOxBu4UQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:31 2026 by rpki-client