Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier: Eb8FY9nM+8M+x94B6Dmu04hKADIHLvUS5Z0+Wqxcw1U=
Subject key identifier: FC:31:83:BB:E7:C7:2C:48:92:BB:88:1D:F3:8C:21:AB:4E:79:4A:88
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 019CAD592B965D26535FCA673A06D96C6422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 07:00:27 +0000
Manifest this update: Mon 02 Mar 2026 07:00:27 +0000
Manifest next update: Tue 03 Mar 2026 07:00:27 +0000
Files and hashes: 1: QGW4LwlvDICFL2rpJRW4EK0DFIc.roa (hash: dEh5JmMpZS30YtylfZQmdL8aaYHuh+kMQSbQLZPHa4Q=)
2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: 52kp43pwsfgs5GETFeKuJnFfmdIcGA8YHNCA/povpL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:2b:96:5d:26:53:5f:ca:67:3a:06:d9:6c:64:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Mar 2 07:00:27 2026 GMT
Not After : Mar 3 07:00:27 2026 GMT
Subject: CN=fc3183bbe7c72c4892bb881df38c21ab4e794a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:40:6b:85:8c:9e:83:93:50:fc:7d:ed:8a:e7:
d9:d2:cf:97:b1:fc:ff:9a:5a:c0:58:7b:cd:96:37:
10:ff:42:33:94:26:f2:37:28:bd:71:c2:db:de:6d:
f6:92:56:d4:ca:bb:8f:0d:f5:26:e6:ee:c3:34:b7:
cd:3f:9d:40:74:3f:6b:35:69:54:de:bd:c0:a7:fa:
3e:f0:ba:f3:81:5e:32:38:23:d1:43:47:72:29:5c:
c9:27:09:60:02:24:f0:69:60:b1:a9:b8:83:3a:99:
91:fc:64:46:c2:be:23:29:d9:90:98:00:f1:5c:bb:
ed:91:d5:c9:b4:86:5a:e5:a0:26:27:63:72:64:74:
f6:c8:c6:f7:fd:6f:3d:b5:2f:ff:62:17:3b:09:0a:
66:5d:70:4f:5f:52:0e:bd:5e:f4:2c:38:46:e0:8f:
14:ae:2d:02:3b:c0:aa:b9:89:28:7f:f4:59:77:a0:
52:95:58:d9:22:4b:f9:60:64:67:af:79:58:9f:c7:
f2:82:83:ef:33:e8:01:a4:8f:01:f0:66:0b:88:76:
8f:79:fd:8e:e5:1c:fb:a6:d6:49:a2:d3:b3:fe:69:
9d:7f:51:ed:00:65:4b:7b:10:b7:7c:f3:00:d6:d1:
c8:d9:89:13:81:88:93:c1:08:38:09:18:96:03:2c:
e4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:31:83:BB:E7:C7:2C:48:92:BB:88:1D:F3:8C:21:AB:4E:79:4A:88
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:58:1b:a2:ff:7d:c2:8f:c2:2d:13:aa:fb:e9:17:14:e8:ea:
bb:bc:3d:b5:7b:48:9e:62:f2:d0:5b:af:dc:8e:c4:e9:6e:8f:
14:04:65:9d:86:cc:68:77:36:ed:de:2f:c9:ed:f5:26:5e:a4:
38:a9:8a:fa:94:9f:48:e4:ff:c2:b4:00:09:fd:90:d3:cb:f1:
75:99:2e:cb:31:56:c9:b1:77:ef:12:e6:03:8b:5d:e3:4f:be:
f6:6d:c8:3d:87:99:74:fa:ad:c9:79:b8:63:9d:00:20:cd:3e:
b0:54:78:d7:f6:69:39:10:3a:15:da:78:53:ff:ef:b5:2c:f6:
bd:09:1d:a6:68:b9:a7:d5:c6:bc:d9:74:a5:09:7d:00:40:9c:
9c:ef:e6:8a:fe:83:7f:89:3a:6b:6f:0b:e7:aa:a0:2d:f1:ec:
c6:8b:ba:20:c3:a5:2a:d9:67:4c:5e:7e:7f:3c:19:2f:d2:18:
f6:ba:0b:f4:de:89:b6:6e:90:a2:a9:fc:d0:29:e9:3d:72:ca:
20:98:bb:83:cd:72:ca:69:fd:99:73:d5:01:c3:e0:67:18:e4:
0d:7f:fb:1e:59:8c:4d:d5:c2:66:e9:f9:3d:a4:91:de:be:aa:
de:63:31:53:1c:35:ea:08:ce:2b:71:32:cb:67:89:2e:11:15:
41:d9:ab:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:06 2026 by rpki-client