Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier: pVwCa0Kapz53xe6nk+f/f1vRr3QLsuwXDczzdYkhoEE=
Subject key identifier: 1E:0C:13:C8:27:E4:91:99:FD:B8:3F:66:4F:91:C5:BA:EF:DB:0B:6B
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 019D9AE2CFBFB74C4632336CC9531E52EEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 10:00:48 +0000
Manifest this update: Fri 17 Apr 2026 10:00:48 +0000
Manifest next update: Sat 18 Apr 2026 10:00:48 +0000
Files and hashes: 1: QGW4LwlvDICFL2rpJRW4EK0DFIc.roa (hash: dEh5JmMpZS30YtylfZQmdL8aaYHuh+kMQSbQLZPHa4Q=)
2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: lAcbXvD1ceSkr1GtenGpOsv+6E33b7dFBvGrlh73/LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:cf:bf:b7:4c:46:32:33:6c:c9:53:1e:52:ee:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Apr 17 10:00:48 2026 GMT
Not After : Apr 18 10:00:48 2026 GMT
Subject: CN=1e0c13c827e49199fdb83f664f91c5baefdb0b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:72:91:8f:dc:74:a4:14:2e:30:38:2f:2d:
40:02:9b:14:6d:d9:b7:a7:a4:d2:e8:53:91:b1:d7:
e1:d1:c0:82:24:77:90:f6:27:ba:43:f4:51:fa:5a:
7d:01:6e:aa:4c:ab:20:c0:11:b2:4f:1a:37:54:c9:
12:63:8f:e6:2b:c8:d4:b8:fd:71:8d:94:96:37:f0:
da:b2:b7:c6:e9:cc:a5:54:10:f0:09:79:9a:1a:ef:
76:83:54:20:30:02:41:71:73:e4:76:a8:c2:b9:d4:
4c:d0:b2:76:c7:c9:16:de:52:e2:34:38:00:25:8e:
3b:fd:8e:18:14:ba:69:fb:dc:cf:d9:13:cf:99:50:
d7:53:02:ed:88:61:7e:df:71:a5:85:f4:ac:05:ee:
d9:c9:a6:50:84:9e:c7:8a:5a:23:dc:6d:2f:4b:c4:
f5:0f:ed:a6:6b:0e:3e:75:d9:5a:cb:d2:75:b2:59:
19:9b:5c:ae:03:52:f5:02:df:b4:77:97:cf:30:e8:
89:4b:6b:fd:1b:0b:2f:66:3f:81:29:52:3a:0b:80:
de:51:a5:72:b4:38:33:5a:39:84:c5:98:3d:25:44:
bc:f6:41:17:b6:34:25:ac:7b:90:58:0a:27:86:62:
c4:f2:02:c6:90:fe:57:5a:8e:6d:46:17:05:70:88:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0C:13:C8:27:E4:91:99:FD:B8:3F:66:4F:91:C5:BA:EF:DB:0B:6B
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3a:f6:a7:e7:3a:a6:da:0b:ca:7f:82:99:a0:07:5d:49:8a:
0a:01:b8:48:ad:7c:8b:08:4d:ff:af:c7:e2:2f:bc:34:45:0a:
17:5d:b3:38:a6:43:95:02:71:6e:b5:af:e4:d5:c9:ac:b4:d2:
6a:45:ac:b5:03:0b:db:a5:40:06:52:6e:93:f8:70:26:d0:5a:
dd:5f:55:e3:38:83:10:ec:a8:1a:f3:55:f1:ec:5f:f2:cc:95:
89:43:74:f5:12:7f:98:79:cc:ff:fd:d3:11:75:4f:03:f7:7f:
7b:5f:3f:3f:07:c0:34:a3:ea:4d:7d:c8:54:4a:14:12:d5:dc:
01:c2:7c:5e:dc:e3:37:27:e8:5a:ab:dd:55:33:60:b7:90:95:
8c:a5:2e:5d:d0:08:53:e1:0d:cc:85:6e:f6:04:37:bd:fa:cc:
72:03:29:40:fe:09:23:b5:d9:4b:91:48:ba:76:dd:c9:a0:c7:
e0:50:7b:d4:45:29:2c:cf:d3:58:9d:5c:8e:b4:ee:78:57:f3:
d9:b6:12:ee:a7:b5:d6:f1:cf:54:fc:c3:b5:84:c9:cb:62:1c:
ed:62:4c:ff:2f:49:53:fc:37:1d:e3:a1:3b:30:ee:2e:85:82:
46:d4:60:0b:6a:b4:00:68:75:7e:35:0f:80:f9:6a:70:ca:d2:
81:87:d5:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4s+/t0xGMjNsyVMeUu6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NTQ3M2Q2ODU3MmVhMjIzOGJkZDg3NWFmYTcyNWEwNDA1
ZGU0ODMwHhcNMjYwNDE3MTAwMDQ4WhcNMjYwNDE4MTAwMDQ4WjAzMTEwLwYDVQQD
EygxZTBjMTNjODI3ZTQ5MTk5ZmRiODNmNjY0ZjkxYzViYWVmZGIwYjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnxykY/cdKQULjA4Ly1AApsUbdm3
p6TS6FORsdfh0cCCJHeQ9ie6Q/RR+lp9AW6qTKsgwBGyTxo3VMkSY4/mK8jUuP1x
jZSWN/DasrfG6cylVBDwCXmaGu92g1QgMAJBcXPkdqjCudRM0LJ2x8kW3lLiNDgA
JY47/Y4YFLpp+9zP2RPPmVDXUwLtiGF+33GlhfSsBe7ZyaZQhJ7Hiloj3G0vS8T1
D+2maw4+ddlay9J1slkZm1yuA1L1At+0d5fPMOiJS2v9GwsvZj+BKVI6C4DeUaVy
tDgzWjmExZg9JUS89kEXtjQlrHuQWAonhmLE8gLGkP5XWo5tRhcFcIh64wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4ME8gn5JGZ/bg/Zk+Rxbrv2wtrMB8GA1UdIwQY
MBaAFJZUc9aFcuoiOL3Yda+nJaBAXeSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMt
NDVmODI5YzZkZDExLzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMtNDVmODI5YzZkZDEx
LzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDr2p+c6
ptoLyn+CmaAHXUmKCgG4SK18iwhN/6/H4i+8NEUKF12zOKZDlQJxbrWv5NXJrLTS
akWstQML26VABlJuk/hwJtBa3V9V4ziDEOyoGvNV8exf8syViUN09RJ/mHnM//3T
EXVPA/d/e18/PwfANKPqTX3IVEoUEtXcAcJ8XtzjNyfoWqvdVTNgt5CVjKUuXdAI
U+ENzIVu9gQ3vfrMcgMpQP4JI7XZS5FIunbdyaDH4FB71EUpLM/TWJ1cjrTueFfz
2bYS7qe11vHPVPzDtYTJy2Ic7WJM/y9JU/w3HeOhOzDuLoWCRtRgC2q0AGh1fjUP
gPlqcMrSgYfVtA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:08:36 2026 by rpki-client