Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier: 4sSpmWEDk7BbVO++Wyc+WaMhN6359GolcCQCLE6V/Q8=
Subject key identifier: 14:DB:97:F2:63:A7:63:29:20:70:24:18:09:2C:4F:15:B5:23:5F:2F
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 01A10B81DF17BEA776E78BBB74E768123ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number: 1A8A
Signing time: Mon 05 Oct 2026 10:00:22 +0000
Manifest this update: Mon 05 Oct 2026 10:00:22 +0000
Manifest next update: Tue 06 Oct 2026 10:00:22 +0000
Files and hashes: 1: QGW4LwlvDICFL2rpJRW4EK0DFIc.roa (hash: dEh5JmMpZS30YtylfZQmdL8aaYHuh+kMQSbQLZPHa4Q=)
2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: dDXRaUqBUX9kr0Nvm/OimXG8YDKDSuf4DbxKzCqh8h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:81:df:17:be:a7:76:e7:8b:bb:74:e7:68:12:3e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Oct 5 10:00:22 2026 GMT
Not After : Oct 6 10:00:22 2026 GMT
Subject: CN=14db97f263a7632920702418092c4f15b5235f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5e:ed:9d:e6:7a:fc:15:3c:7d:77:2d:68:0e:
c5:ac:4a:b7:d3:d5:08:1d:fc:48:de:18:1b:4b:c2:
5b:52:ec:98:e8:0a:06:97:83:d5:6e:12:3d:10:9e:
c9:77:fc:77:22:a9:bf:87:f2:d0:54:a2:d0:cd:a8:
ac:b4:51:7b:ad:0f:d2:a6:fd:7b:de:54:e6:00:03:
65:ca:e5:d2:37:2b:f7:c8:aa:cb:32:ac:e0:2c:01:
5f:8c:77:99:cd:0d:7c:31:3a:42:ed:74:c3:b1:34:
13:19:6d:58:61:61:61:ed:c2:03:14:4b:a5:47:10:
f0:fc:b3:af:ca:59:f8:4c:5d:fa:56:82:c9:aa:37:
0b:a6:3e:ea:2f:c1:83:f8:7a:08:2d:5a:19:1c:4c:
5e:af:f2:77:e9:ea:b2:0e:25:8b:c4:1f:b8:e8:22:
da:b9:30:85:84:38:c7:eb:12:0a:b4:09:79:08:10:
12:c8:23:09:46:8a:d6:fb:5c:42:44:e5:6a:5e:0d:
2e:af:df:1f:1f:f4:bc:40:75:7e:9d:35:ef:86:a1:
2b:e1:88:35:96:fc:bc:10:3f:0d:ef:e2:49:3c:ad:
e9:31:6e:15:af:d7:63:1b:ab:06:a9:6d:f3:47:03:
11:4e:f2:fe:dc:98:ca:d2:ef:ba:29:09:e0:d6:f1:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DB:97:F2:63:A7:63:29:20:70:24:18:09:2C:4F:15:B5:23:5F:2F
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c7:c5:a6:97:c3:bb:38:65:91:10:81:7e:97:85:b8:4b:e2:
22:01:51:d0:f2:47:66:c1:d5:dd:dd:0e:f2:a2:f2:4b:7b:08:
f3:f3:56:d5:cf:af:18:d2:cd:84:21:3d:38:c5:aa:81:f5:65:
9b:a4:95:a3:2f:1b:41:d7:9c:09:d2:95:f2:4f:fb:52:84:1d:
06:54:1c:18:14:04:a2:ea:ca:79:16:99:6d:ed:f4:2f:dd:bb:
bd:16:bf:02:b0:8a:6d:e7:b6:ea:44:34:63:dd:f1:55:38:8b:
41:50:f2:0a:46:cb:dd:51:8e:b0:4e:44:9c:14:d4:0d:33:c1:
0f:e5:12:25:0d:86:31:92:fd:c2:c0:44:df:06:c6:46:a8:ba:
fb:dc:6d:6e:ab:4f:70:b4:3d:4b:42:5b:19:91:d1:d6:68:22:
ff:f1:dc:8d:e1:e1:ce:24:8d:c5:67:69:df:a8:20:54:85:c4:
47:19:81:ce:c6:25:bc:b0:4a:de:04:1d:f1:65:9d:e0:41:9d:
2d:be:f6:1d:39:bf:f3:b7:82:39:b9:39:1a:84:2c:5a:e5:51:
e0:ef:fc:e4:8a:5e:02:d4:66:d5:38:7f:0f:a0:09:50:b0:e7:
d4:41:36:a5:6b:2e:ef:af:a8:8c:5e:52:92:ec:f4:70:d1:93:
5c:04:a6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:35:04 2026 by rpki-client