Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File: LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier: ayI6zz+oXulvgUOUbJB5Giut/ASoJoou+KF9+jaMENg=
Subject key identifier: 9E:11:4A:20:AA:86:50:43:BA:5D:55:98:3D:9F:41:63:7D:AC:C8:EB
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 019FA8D07090F09C268E264AD7C14D0DD7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number: 09AC
Signing time: Tue 28 Jul 2026 13:01:00 +0000
Manifest this update: Tue 28 Jul 2026 13:01:00 +0000
Manifest next update: Wed 29 Jul 2026 13:01:00 +0000
Files and hashes: 1: 2WFOqZZA2yIUnQ_6eth3jx2NPnU.roa (hash: z8D6G5qAyZtOctuyLt0W9PyzjKIioqDo4g6gtUqBJsA=)
2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: V2wKOCNUAmrS92PrvAZRWiUxLsQF6EwEY3esaZjvCUo=)
3: ibmc9wsJZvcLnKLI-HoZNttO1zA.roa (hash: xpCzDqZRfT8zeb7gy3XI7XFp4/7LKgH6afs/PfJpe7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:70:90:f0:9c:26:8e:26:4a:d7:c1:4d:0d:d7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Jul 28 13:01:00 2026 GMT
Not After : Jul 29 13:01:00 2026 GMT
Subject: CN=9e114a20aa865043ba5d55983d9f41637dacc8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:7e:96:ae:af:a7:74:8d:bb:46:2f:0b:c6:
a7:0d:48:31:2a:6b:bb:f7:dd:f0:c6:78:51:56:b8:
3e:c6:72:9e:18:d1:32:d7:b6:a0:4c:16:b3:7d:68:
16:fa:0a:58:0a:84:af:98:6f:2e:54:41:1a:47:cb:
c8:1f:98:69:55:a3:9d:5d:84:f6:c6:33:9d:47:68:
90:b5:c6:f6:a6:b0:70:14:fe:3e:c8:ad:ff:c2:81:
ee:08:52:2b:8c:4b:d7:e0:30:fd:7a:44:fa:3a:f8:
46:10:67:45:40:eb:5a:ea:92:2d:d4:57:d8:48:34:
83:ac:f0:47:69:7a:f3:b5:2b:7a:54:c3:79:30:29:
36:c5:39:4c:91:11:4a:56:9e:72:aa:dc:1b:44:59:
e0:1e:70:a5:b2:0b:58:9b:2b:9d:74:63:86:54:d6:
c0:76:d4:59:90:a5:d7:9e:23:89:71:98:20:e4:28:
b8:96:bc:8b:94:04:2e:83:9f:a8:9f:04:9c:1e:e2:
99:c9:ad:8f:82:29:eb:cb:b7:6e:9d:8d:f2:e2:54:
09:4c:4d:2d:dd:b3:cc:b9:26:af:fc:96:b1:6a:ba:
1d:0d:f5:99:93:b7:52:a3:b9:bd:11:49:aa:67:1a:
3b:39:31:32:0d:d1:61:d7:88:bc:cc:a6:9f:2e:b4:
b9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:11:4A:20:AA:86:50:43:BA:5D:55:98:3D:9F:41:63:7D:AC:C8:EB
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c0:74:f7:a5:a1:e7:dd:2f:58:bd:b3:e8:f4:fb:45:5f:c3:
37:12:0d:3a:ae:63:d1:6b:4a:20:11:97:20:c7:bd:f8:c9:a9:
00:76:3a:4b:9b:88:7f:83:fd:28:b7:fb:cd:43:08:29:72:0c:
4e:0e:bd:b8:19:60:0e:d5:e1:10:6a:57:6a:cb:20:3e:7f:a4:
32:8f:ba:6f:73:e5:2b:19:31:2a:47:c7:59:38:0a:96:49:ad:
f5:91:82:cc:31:49:f1:2d:0e:b8:41:9b:ca:50:ba:f3:66:8e:
f4:a8:98:3c:d5:56:72:d0:1b:3b:52:c6:14:8c:69:33:41:bf:
52:01:e7:61:9b:29:65:0b:63:28:e4:8a:29:3d:28:39:44:35:
cc:b7:63:82:fc:d6:b4:df:5d:cf:6d:de:19:2d:60:5a:39:2b:
93:2a:70:32:2c:3a:e4:06:56:bd:12:c9:3c:e0:71:22:45:fc:
6d:2a:0e:c4:d3:fd:89:07:85:06:a1:ec:d3:63:50:1b:33:d5:
b7:f7:00:27:38:b9:24:8b:e4:02:4a:f0:79:45:8d:6a:e8:1d:
10:bf:a1:1c:97:c3:3d:ff:64:79:ef:49:87:7c:db:3a:c2:cf:
a8:c7:5c:20:1e:d9:4a:2e:05:05:bd:fa:62:bc:06:11:4e:f4:
d9:2a:3d:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0HCQ8JwmjiZK18FNDdfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYmQ3NjY4OGI4N2MwMzkxNGFlMmEyZTE0OTBjMmYxZTkx
NDE2NjEwHhcNMjYwNzI4MTMwMTAwWhcNMjYwNzI5MTMwMTAwWjAzMTEwLwYDVQQD
Eyg5ZTExNGEyMGFhODY1MDQzYmE1ZDU1OTgzZDlmNDE2MzdkYWNjOGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQt+lq6vp3SNu0YvC8anDUgxKmu7
993wxnhRVrg+xnKeGNEy17agTBazfWgW+gpYCoSvmG8uVEEaR8vIH5hpVaOdXYT2
xjOdR2iQtcb2prBwFP4+yK3/woHuCFIrjEvX4DD9ekT6OvhGEGdFQOta6pIt1FfY
SDSDrPBHaXrztSt6VMN5MCk2xTlMkRFKVp5yqtwbRFngHnClsgtYmyuddGOGVNbA
dtRZkKXXniOJcZgg5Ci4lryLlAQug5+onwScHuKZya2Pginry7dunY3y4lQJTE0t
3bPMuSav/JaxarodDfWZk7dSo7m9EUmqZxo7OTEyDdFh14i8zKafLrS5RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4RSiCqhlBDul1VmD2fQWN9rMjrMB8GA1UdIwQY
MBaAFCy9dmiLh8A5FK4qLhSQwvHpFBZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEwxMmFJdUh3RGtVcmlvdUZKREM4ZWtVRm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82NmI5NTktNDcyZi00OTIyLWEyMjYt
ZTBmOTMwODA2YmRjLzEvTEwxMmFJdUh3RGtVcmlvdUZKREM4ZWtVRm1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82NmI5NTktNDcyZi00OTIyLWEyMjYtZTBmOTMwODA2YmRj
LzEvTEwxMmFJdUh3RGtVcmlvdUZKREM4ZWtVRm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMB096Wh
590vWL2z6PT7RV/DNxINOq5j0WtKIBGXIMe9+MmpAHY6S5uIf4P9KLf7zUMIKXIM
Tg69uBlgDtXhEGpXassgPn+kMo+6b3PlKxkxKkfHWTgKlkmt9ZGCzDFJ8S0OuEGb
ylC682aO9KiYPNVWctAbO1LGFIxpM0G/UgHnYZspZQtjKOSKKT0oOUQ1zLdjgvzW
tN9dz23eGS1gWjkrkypwMiw65AZWvRLJPOBxIkX8bSoOxNP9iQeFBqHs02NQGzPV
t/cAJzi5JIvkAkrweUWNaugdEL+hHJfDPf9kee9Jh3zbOsLPqMdcIB7ZSi4FBb36
YrwGEU702So9vg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:41 2026 by rpki-client