Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
File: LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft (raw, json)
Hash identifier: I17RopNxWMeCImo29rhSo8Rs2pNoUYL2K6Cm7lx0yxI=
Subject key identifier: A7:67:98:E2:5D:E5:64:93:A9:D5:F2:DD:C2:C3:46:38:02:80:FB:FB
Authority key identifier: 2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
Certificate issuer: /CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Certificate serial: 019CAAFD18569D54CB092012DB3E31E56040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
Manifest number: 1714
Signing time: Sun 01 Mar 2026 20:00:39 +0000
Manifest this update: Sun 01 Mar 2026 20:00:39 +0000
Manifest next update: Mon 02 Mar 2026 20:00:39 +0000
Files and hashes: 1: GcH-WF46-Cx6ySovZfxGMRK-ScA.roa (hash: vLUhEA8jeh8KPUh1zpLwKiZLSX3eBBb9XYrIml4wnm4=)
2: LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl (hash: OEhzmIIQcJKR5kwhAf0j9BNRQ1RhAWQjWRr1HEZukNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:18:56:9d:54:cb:09:20:12:db:3e:31:e5:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Validity
Not Before: Mar 1 20:00:39 2026 GMT
Not After : Mar 2 20:00:39 2026 GMT
Subject: CN=a76798e25de56493a9d5f2ddc2c346380280fbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:ed:11:50:f8:cc:5e:59:23:2e:43:87:7e:
31:d1:d5:df:b8:2a:38:89:0d:45:ee:85:b6:7f:86:
cb:4b:8e:86:fe:10:df:e7:2d:73:7a:8b:a7:f8:36:
9d:ba:15:6f:bf:3e:60:42:94:29:75:68:97:40:f0:
55:30:cb:93:4c:b7:f7:6f:4a:ec:e9:b4:06:c3:f3:
6d:cd:74:f2:45:2f:a2:73:f1:17:b5:68:e5:20:2d:
cc:55:a2:82:42:53:ea:fb:6b:bf:e9:54:59:ad:13:
80:b9:3a:76:ea:c9:8f:78:5f:01:60:96:83:28:de:
7b:83:09:5f:e1:24:73:06:9f:35:b4:10:fc:8b:be:
8b:cd:ab:4e:0b:90:4f:99:2e:38:58:b6:77:a2:a8:
f2:76:57:b6:a5:6f:b3:ea:7f:ab:f9:e2:5f:4e:81:
5a:d5:e6:b9:16:f9:8e:c7:93:a9:06:08:55:41:63:
9c:e7:3c:60:66:9d:4c:d0:33:ab:7c:16:b5:3f:21:
49:05:9a:3f:be:0d:2f:a6:34:c4:66:86:ba:3a:ed:
65:cf:65:72:e5:26:e7:e4:4c:c4:b3:8e:55:55:68:
15:81:1b:e2:4d:55:30:c9:01:66:45:56:83:c0:b0:
da:f5:98:6e:76:26:d4:bb:60:42:5f:bc:14:af:be:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:67:98:E2:5D:E5:64:93:A9:D5:F2:DD:C2:C3:46:38:02:80:FB:FB
X509v3 Authority Key Identifier:
keyid:2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1b:79:4a:8c:01:cf:55:3b:8b:34:18:1f:74:4b:58:09:74:
28:95:59:43:a5:36:e9:d4:95:e1:0a:53:4c:c0:d7:0b:77:13:
bc:66:5f:fb:d7:f4:59:78:c3:45:b1:e8:15:58:8a:3c:9a:cf:
41:c6:dd:f8:00:90:13:68:f8:01:17:af:dc:77:cd:df:66:3f:
05:b8:39:cd:54:3e:9e:f9:30:53:31:18:7b:ef:25:a1:84:ca:
7f:4f:85:cb:d0:83:e1:4f:ec:09:45:7b:47:aa:35:47:53:4d:
a8:94:61:a9:fd:66:2f:39:34:74:26:70:5e:cf:a6:de:db:e8:
cf:1d:c7:11:24:e7:76:f9:d8:15:e4:9a:46:2e:29:d9:a9:50:
18:c7:04:90:83:47:a6:36:87:fb:32:8c:9a:e2:d0:34:fc:b4:
ba:ab:00:73:de:89:97:f1:3d:7f:5d:91:4b:71:4e:dd:23:ec:
78:19:a0:a4:10:a1:df:20:2f:79:3d:bc:91:2d:d7:68:85:97:
97:17:aa:d8:d1:c9:ca:5e:5b:f8:c2:8f:5a:d1:4f:5e:e1:16:
4a:29:7e:4c:bc:6e:13:3c:50:42:15:bb:3c:86:39:f5:90:7d:
11:77:c1:68:14:da:01:0e:a2:98:2f:af:98:54:bb:c2:99:b3:
7f:88:45:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:26 2026 by rpki-client