Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File: LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier: gcY/z/24qrvQMFl/0BOTNOfGquk4X7IThvYzJ/zkNAA=
Subject key identifier: 8E:DC:83:99:96:D7:0A:4C:86:06:41:76:D1:58:DD:94:00:A9:A6:62
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 019D99992BE50B927EE2263A7F155F28279C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number: 089B
Signing time: Fri 17 Apr 2026 04:00:45 +0000
Manifest this update: Fri 17 Apr 2026 04:00:45 +0000
Manifest next update: Sat 18 Apr 2026 04:00:45 +0000
Files and hashes: 1: 2WFOqZZA2yIUnQ_6eth3jx2NPnU.roa (hash: z8D6G5qAyZtOctuyLt0W9PyzjKIioqDo4g6gtUqBJsA=)
2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: gR+0YZ1VYmD5evsXBcSTwhlEqYhzM8bQ18XdSMiFzaI=)
3: ibmc9wsJZvcLnKLI-HoZNttO1zA.roa (hash: xpCzDqZRfT8zeb7gy3XI7XFp4/7LKgH6afs/PfJpe7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:2b:e5:0b:92:7e:e2:26:3a:7f:15:5f:28:27:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Apr 17 04:00:45 2026 GMT
Not After : Apr 18 04:00:45 2026 GMT
Subject: CN=8edc839996d70a4c86064176d158dd9400a9a662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:5a:4f:29:7b:4f:c4:ec:58:25:dd:29:3d:
9d:17:17:1d:13:ec:0d:23:64:a6:d6:dc:6d:30:ac:
10:fa:dd:c9:8d:39:31:28:0b:ba:04:2e:0b:9c:95:
a4:5e:82:08:cb:d9:6f:21:ac:bc:93:79:ad:10:b8:
db:ff:fd:f1:ce:f1:2b:d9:0c:ca:dd:44:7d:c9:50:
1c:d2:40:de:b9:f3:f8:1b:7d:0e:79:6a:a8:ee:6b:
a8:24:86:ef:75:3c:a5:92:68:ce:6b:d7:08:0d:4b:
24:69:64:69:04:64:c2:db:a8:e7:83:ac:a7:22:28:
e3:bd:bd:2f:e7:c9:9b:d9:8f:ad:d9:da:7f:12:c6:
94:01:71:0d:f0:59:33:a0:65:d7:53:d4:49:03:87:
96:29:0a:09:af:76:9a:71:c1:60:a2:0d:9c:85:15:
63:04:a7:63:52:da:3c:01:7c:a6:38:8a:00:3e:ac:
77:f2:8d:69:d3:8f:bb:f6:e6:c0:fd:a7:9f:c6:85:
5f:a2:f9:65:1a:47:31:45:4b:75:37:65:fd:dc:2e:
b0:93:d4:9c:58:0e:bd:4b:97:5e:18:aa:18:60:fc:
f7:85:6d:03:7f:8b:db:a7:ad:62:48:e0:33:59:cc:
83:53:19:0b:70:27:a5:38:bc:c7:ea:fe:b7:88:82:
51:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DC:83:99:96:D7:0A:4C:86:06:41:76:D1:58:DD:94:00:A9:A6:62
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3a:a3:10:69:66:28:ac:34:1a:51:3d:cb:88:96:5d:17:3c:
75:cc:e0:0c:cd:10:ca:b4:33:0a:74:a1:25:09:f8:c1:6b:30:
80:e5:67:3f:24:b1:04:0d:7e:d5:31:81:6c:fc:7b:02:c7:3b:
23:f6:22:fb:b7:89:26:75:12:d7:5a:6a:ee:d4:8a:5c:1d:52:
17:b5:7e:48:82:cf:63:0d:29:3c:10:7d:68:d8:73:06:60:57:
9c:cc:b5:b2:8b:ac:eb:55:59:38:52:c4:a1:7b:b2:4f:e6:e4:
f7:7c:9f:7f:40:53:d4:7c:0a:7a:e4:17:8c:e4:dc:b5:4a:cd:
2c:72:28:b7:07:fb:6e:96:fd:fa:16:30:18:98:b3:d0:b4:13:
c3:df:81:4e:56:11:cf:ec:cc:85:6f:a6:17:77:41:77:0d:48:
bc:d0:fd:c4:73:ee:54:c5:a1:5c:a7:64:8d:23:6d:d9:da:65:
26:41:c3:16:ec:d0:ef:8b:f7:0c:a7:26:8b:1e:57:71:38:68:
1f:fe:f7:07:e2:0c:b1:9b:49:a0:5f:80:31:92:64:f3:d7:3b:
c7:4f:8b:9c:9a:f8:31:3f:58:b3:0f:a7:bc:1f:c8:e9:b6:64:
30:6b:61:71:0a:ff:14:70:08:6b:86:52:5c:a8:a2:46:0f:8f:
7c:2e:e7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:11 2026 by rpki-client