Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
File: llxaucCRqzxFBQaKkv_LAZhJqng.mft (raw, json)
Hash identifier: LGA5xk74qtu88gxY/I4EOPfWFcNH5y1O64fu/gROJCw=
Subject key identifier: F3:7D:F9:35:5B:83:E0:26:32:0A:3B:2C:11:6B:90:07:05:A5:BF:E5
Authority key identifier: 96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
Certificate issuer: /CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Certificate serial: 019CAA21E46E26FC12633D490E07431D3F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
Manifest number: 17AB
Signing time: Sun 01 Mar 2026 16:01:13 +0000
Manifest this update: Sun 01 Mar 2026 16:01:13 +0000
Manifest next update: Mon 02 Mar 2026 16:01:13 +0000
Files and hashes: 1: 7Em6m0eOG2ORXVo2QzO-nLgQAwE.roa (hash: S5HUFhQEQs2JuXJGAn7o8orB6NiPPcNSTOFKC5UZEp4=)
2: llxaucCRqzxFBQaKkv_LAZhJqng.crl (hash: tqUsvTGunEDdWWScaTkXJj641mUaiLd3IUODN2FCDRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:e4:6e:26:fc:12:63:3d:49:0e:07:43:1d:3f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Validity
Not Before: Mar 1 16:01:13 2026 GMT
Not After : Mar 2 16:01:13 2026 GMT
Subject: CN=f37df9355b83e026320a3b2c116b900705a5bfe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:7f:5e:46:93:9f:e3:6d:f9:10:08:f6:8c:
f6:3e:b0:b9:f6:49:29:e9:26:96:6c:64:18:1f:00:
b0:67:95:4e:74:45:b2:b0:96:61:b6:3f:94:cd:25:
67:51:eb:f5:bc:0c:2d:b7:4f:41:d8:36:ae:df:6b:
c1:fe:d5:83:90:05:11:14:b5:91:3c:7b:3d:92:51:
b2:f0:fc:3b:b4:d1:ab:76:fe:99:97:7c:01:09:a9:
b9:fe:f1:12:a7:21:73:67:65:5a:b9:07:eb:5c:ba:
b4:4d:4f:f9:c4:70:4c:eb:47:7c:38:0e:1c:64:d7:
ff:91:41:c8:d8:8b:7d:bd:4e:bd:30:fc:34:3e:5b:
48:57:43:73:f7:0a:90:78:8b:37:00:44:0f:76:30:
17:99:ad:61:e8:57:a6:74:f2:89:f8:9e:26:5d:07:
05:3a:af:23:8e:e7:b2:ca:79:b4:ff:ab:25:22:89:
f7:33:7f:e2:c4:62:f9:a4:02:07:10:68:cd:af:12:
95:fd:8f:c4:57:5c:88:91:a3:53:e3:1a:88:22:a9:
34:1f:77:dc:79:43:44:d8:61:48:d8:03:24:3b:5d:
2d:d1:56:2c:d2:0c:53:a7:b8:1b:17:09:89:4b:7e:
03:0c:4f:51:cd:4f:33:29:bd:a7:9b:fd:98:d2:df:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7D:F9:35:5B:83:E0:26:32:0A:3B:2C:11:6B:90:07:05:A5:BF:E5
X509v3 Authority Key Identifier:
keyid:96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8d:ef:78:40:f0:d3:4a:0b:a7:b1:10:63:af:bc:49:fe:77:
64:52:ef:15:9e:08:0a:c1:07:d3:1e:73:c8:ee:b6:f8:4f:be:
0f:e9:b0:1e:e0:e5:cd:94:0d:e0:ad:26:4a:e4:2b:9e:70:10:
6c:41:1a:6c:0c:ea:ba:1f:db:78:cb:0a:b9:ec:a4:14:ac:2c:
e2:1b:5d:83:ac:28:54:7e:d3:cd:02:de:56:13:95:d4:bd:a4:
02:8d:51:60:1c:a7:a7:5f:8b:87:1a:cc:9e:7b:7c:fc:74:4d:
cd:31:c4:31:c6:18:c5:28:64:38:f8:25:8f:0d:24:83:f2:1c:
5e:d4:25:9a:d3:38:c8:24:92:7f:e1:26:a5:44:ec:c0:67:d9:
3d:5d:1d:eb:fe:e3:9a:dd:44:6b:18:2b:29:ed:cc:d6:09:d2:
86:64:52:5e:9a:71:bf:9d:21:a3:28:23:64:f6:08:a7:75:c4:
70:ed:73:71:2a:9c:34:26:cc:da:48:de:a7:f2:14:d3:3d:be:
ad:eb:3b:9f:9e:0f:77:2f:a1:75:a0:7b:77:3c:cb:de:ed:0e:
07:b8:4d:6a:d2:7d:db:eb:bd:d5:84:6d:a8:6d:d7:e8:e9:71:
00:40:2a:97:9f:b3:b0:c3:39:b7:d4:28:c9:ce:60:e8:1a:ce:
4d:97:3e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:18 2026 by rpki-client