Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File: LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier: pD4/NkDcCYQhmhUK4CvuYdJ7D701czmNgA/xir5GufU=
Subject key identifier: 39:C8:5B:DD:13:CC:D8:1E:EA:7B:9A:45:0D:DB:C0:64:D8:41:91:86
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 019CAC0F90A61AF111E6EFC9251C00EE5C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number: 0820
Signing time: Mon 02 Mar 2026 01:00:27 +0000
Manifest this update: Mon 02 Mar 2026 01:00:27 +0000
Manifest next update: Tue 03 Mar 2026 01:00:27 +0000
Files and hashes: 1: 2WFOqZZA2yIUnQ_6eth3jx2NPnU.roa (hash: z8D6G5qAyZtOctuyLt0W9PyzjKIioqDo4g6gtUqBJsA=)
2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: Tpxsxd5JkZfS2fYziS/hs1mJQ8Tm0m5O+b8A3H8bLjk=)
3: ibmc9wsJZvcLnKLI-HoZNttO1zA.roa (hash: xpCzDqZRfT8zeb7gy3XI7XFp4/7LKgH6afs/PfJpe7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:90:a6:1a:f1:11:e6:ef:c9:25:1c:00:ee:5c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Mar 2 01:00:27 2026 GMT
Not After : Mar 3 01:00:27 2026 GMT
Subject: CN=39c85bdd13ccd81eea7b9a450ddbc064d8419186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:b2:8d:d2:89:7b:ae:70:b5:0d:a0:0a:19:
12:ac:1d:28:bc:0d:21:ea:e2:9f:43:5b:4f:f0:04:
0a:50:c3:cd:10:fc:fa:95:51:87:26:c0:5b:75:58:
cc:81:d5:2f:1c:97:f5:32:18:8c:8f:d9:08:81:87:
8b:44:f8:40:b0:f8:46:75:6d:0c:31:cf:82:bd:70:
51:8e:49:cb:89:0c:61:45:cf:b3:f3:11:ec:04:06:
a2:b9:6a:e6:bc:70:2f:4d:a7:f8:75:f9:94:2e:f5:
a8:98:0c:ec:f1:f7:4a:ce:52:e0:16:91:f8:5a:f2:
aa:f1:1d:7c:65:14:46:7b:fb:b1:7d:ef:ef:75:15:
da:97:67:96:84:df:ef:fe:12:c9:aa:61:3a:6d:c6:
fa:6d:ab:cc:b2:82:3b:ae:00:b7:b5:58:24:c1:6d:
0f:a0:6e:00:cb:7f:5e:2c:a1:c1:79:88:93:ba:e1:
1f:66:15:90:cc:2b:52:9d:97:90:07:b1:a8:f6:45:
0a:84:f5:5d:74:66:20:fa:e1:8a:27:f7:c8:7e:8e:
42:0a:7b:d0:8d:87:e8:c0:13:b8:cb:b3:94:df:3c:
f1:fc:2f:c6:b3:74:b7:14:12:ff:58:18:07:63:6d:
05:35:f3:0f:10:19:e6:69:ed:bc:1e:b9:19:7f:63:
a2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C8:5B:DD:13:CC:D8:1E:EA:7B:9A:45:0D:DB:C0:64:D8:41:91:86
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9f:82:68:44:74:d0:70:b5:47:20:cf:9b:66:7c:94:bd:c6:
c9:a6:d7:1e:39:82:de:6d:b0:48:84:65:ef:b1:6e:fb:26:b8:
1d:9f:88:8c:e2:ae:4f:d9:80:78:83:6c:a1:a6:73:2b:bd:7e:
6f:60:46:bf:90:22:0e:1e:97:3a:04:d7:d3:93:bb:02:bd:7e:
e5:dd:3b:db:1c:ce:88:e4:0f:ec:0f:be:c7:e4:55:44:66:a6:
e2:4f:26:68:07:68:66:07:ba:9f:d7:63:78:2b:c8:5e:c8:ab:
d4:36:9d:e8:87:6f:f8:cf:1a:9a:c8:4e:ad:c7:ed:bc:08:56:
6c:38:7c:c4:06:0a:b6:e3:bf:a9:ea:3f:32:23:5d:b8:c3:ed:
e3:70:4b:2d:96:5a:d7:80:14:74:20:92:bd:94:35:ce:7b:a2:
51:eb:8f:0c:18:c9:b7:dc:2f:07:79:f6:7c:8c:60:37:04:c9:
d8:6c:51:c2:37:fd:56:10:ba:44:6c:be:fe:6a:df:1e:d3:b2:
65:0c:c9:af:a8:25:fe:5b:b3:3b:63:c2:42:62:98:5d:8b:c1:
ac:f4:23:00:d8:e8:43:45:70:33:c1:a8:89:14:4c:e6:e0:de:
3d:55:ea:aa:3a:da:4b:93:42:32:b8:b7:77:6b:c1:c6:0a:71:
7f:4c:bf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:23 2026 by rpki-client