Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
File: llxaucCRqzxFBQaKkv_LAZhJqng.mft (raw, json)
Hash identifier: Y63BJdByedxy7vMgpl46X6pfRBItn0gWho5TnwJna1I=
Subject key identifier: DD:03:F1:81:AB:D2:06:16:E6:D2:AB:2E:92:F1:E7:86:7E:92:E8:B8
Authority key identifier: 96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
Certificate issuer: /CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Certificate serial: 019D99996398F304BF4D18E24B92BB38B36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
Manifest number: 1827
Signing time: Fri 17 Apr 2026 04:00:59 +0000
Manifest this update: Fri 17 Apr 2026 04:00:59 +0000
Manifest next update: Sat 18 Apr 2026 04:00:59 +0000
Files and hashes: 1: 7Em6m0eOG2ORXVo2QzO-nLgQAwE.roa (hash: S5HUFhQEQs2JuXJGAn7o8orB6NiPPcNSTOFKC5UZEp4=)
2: llxaucCRqzxFBQaKkv_LAZhJqng.crl (hash: XKeXfARo/XMiQlXiNzWJPpoyy+xmg8EXjUBNzvX/Y50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:63:98:f3:04:bf:4d:18:e2:4b:92:bb:38:b3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Validity
Not Before: Apr 17 04:00:59 2026 GMT
Not After : Apr 18 04:00:59 2026 GMT
Subject: CN=dd03f181abd20616e6d2ab2e92f1e7867e92e8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:ad:ce:88:9c:d0:51:34:aa:ee:01:3f:44:
5d:f9:69:0a:91:58:c2:f7:f8:cd:0c:e6:26:01:a4:
e3:8d:44:7c:fe:a3:39:95:92:56:a1:d6:0c:f7:14:
5f:f0:e8:92:07:08:09:66:a9:4c:21:c0:bf:39:48:
96:60:94:d1:5f:55:7b:67:8b:a0:d4:5a:45:e3:94:
e9:de:e9:4f:b1:26:37:cc:a9:f5:ce:01:1d:bd:31:
86:1b:59:31:a6:91:3e:c9:0e:a6:cc:0c:f6:c9:cf:
bb:90:ba:24:c8:b9:5c:a3:c2:76:06:8a:dc:6b:76:
9f:63:3f:77:1f:fd:12:e4:ed:32:ac:77:e0:2c:73:
52:ba:ae:6b:dd:cc:9d:23:a2:a0:85:b4:fa:0b:27:
8a:73:3a:8c:ca:fd:ec:3d:b2:dd:0c:27:41:90:2b:
24:f9:b6:fe:f5:e5:0d:d4:a4:e1:6e:1f:14:7d:80:
50:1e:5f:47:c3:6b:89:cb:9f:7c:42:78:83:ce:43:
3c:53:9b:b3:e6:05:f7:b6:d4:56:c4:6c:aa:9f:8d:
08:e9:90:9f:2f:6f:29:af:a4:32:d9:2b:64:25:b7:
92:d0:db:31:6b:d1:d9:b5:f6:59:7f:1d:2e:7e:b7:
54:48:a8:4e:3e:8a:8b:1d:f7:82:d1:94:ce:ef:2b:
72:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:03:F1:81:AB:D2:06:16:E6:D2:AB:2E:92:F1:E7:86:7E:92:E8:B8
X509v3 Authority Key Identifier:
keyid:96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a2:9e:6a:1f:ec:b3:7d:8a:7d:05:67:d8:b4:6e:97:8f:7c:
5c:4e:67:d1:e4:29:cf:60:a4:bb:c1:74:1c:2f:e3:54:c3:68:
3b:a7:42:fa:79:26:2d:e1:92:64:12:3e:4a:6e:ec:d1:b7:50:
77:a3:03:64:66:c6:55:a7:25:ad:60:ce:43:a1:77:17:d2:5f:
2c:c6:44:47:d6:3e:42:83:a8:39:ba:f6:c9:2c:39:6d:be:fb:
ed:08:c3:a3:f5:7f:1d:25:ba:07:20:0d:1c:9b:0a:9c:65:31:
c2:31:70:bd:b3:a3:9b:22:d0:44:1a:8b:00:de:9b:a5:c2:1e:
09:be:65:2f:d4:98:34:b0:db:10:32:b6:04:f9:5c:b4:23:71:
13:08:9e:cd:24:b4:8a:4f:af:5b:30:74:af:1d:3d:97:f0:29:
55:b0:b0:b2:13:2a:72:25:f0:a0:24:09:26:54:91:ff:e6:ea:
77:4d:da:7c:27:32:a1:d4:6f:c3:f7:db:b6:e5:cf:43:96:e1:
32:03:09:b7:fd:1b:55:25:bf:25:b7:dc:07:74:2d:05:c4:df:
7b:c4:35:c0:1c:d0:01:94:dd:68:81:38:73:0e:28:39:68:02:
07:1b:81:23:25:ea:9c:70:c5:c5:09:5a:93:ee:73:d1:db:f0:
06:e4:1b:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmWOY8wS/TRjiS5K7OLNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NWM1YWI5YzA5MWFiM2M0NTA1MDY4YTkyZmZjYjAxOTg0
OWFhNzgwHhcNMjYwNDE3MDQwMDU5WhcNMjYwNDE4MDQwMDU5WjAzMTEwLwYDVQQD
EyhkZDAzZjE4MWFiZDIwNjE2ZTZkMmFiMmU5MmYxZTc4NjdlOTJlOGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUutzoic0FE0qu4BP0Rd+WkKkVjC
9/jNDOYmAaTjjUR8/qM5lZJWodYM9xRf8OiSBwgJZqlMIcC/OUiWYJTRX1V7Z4ug
1FpF45Tp3ulPsSY3zKn1zgEdvTGGG1kxppE+yQ6mzAz2yc+7kLokyLlco8J2Borc
a3afYz93H/0S5O0yrHfgLHNSuq5r3cydI6KghbT6CyeKczqMyv3sPbLdDCdBkCsk
+bb+9eUN1KThbh8UfYBQHl9Hw2uJy598QniDzkM8U5uz5gX3ttRWxGyqn40I6ZCf
L28pr6Qy2StkJbeS0Nsxa9HZtfZZfx0ufrdUSKhOPoqLHfeC0ZTO7ytyCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0D8YGr0gYW5tKrLpLx54Z+kui4MB8GA1UdIwQY
MBaAFJZcWrnAkas8RQUGipL/ywGYSap4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGx4YXVjQ1JxenhGQlFhS2t2X0xBWmhKcW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMjYyNjEtZThlZi00ZmI3LTg3MjIt
MGFiNDc1ZjlhOWEzLzEvbGx4YXVjQ1JxenhGQlFhS2t2X0xBWmhKcW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMjYyNjEtZThlZi00ZmI3LTg3MjItMGFiNDc1ZjlhOWEz
LzEvbGx4YXVjQ1JxenhGQlFhS2t2X0xBWmhKcW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqKeah/s
s32KfQVn2LRul498XE5n0eQpz2Cku8F0HC/jVMNoO6dC+nkmLeGSZBI+Sm7s0bdQ
d6MDZGbGVaclrWDOQ6F3F9JfLMZER9Y+QoOoObr2ySw5bb777QjDo/V/HSW6ByAN
HJsKnGUxwjFwvbOjmyLQRBqLAN6bpcIeCb5lL9SYNLDbEDK2BPlctCNxEwiezSS0
ik+vWzB0rx09l/ApVbCwshMqciXwoCQJJlSR/+bqd03afCcyodRvw/fbtuXPQ5bh
MgMJt/0bVSW/JbfcB3QtBcTfe8Q1wBzQAZTdaIE4cw4oOWgCBxuBIyXqnHDFxQla
k+5z0dvwBuQb3g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:44 2026 by rpki-client