Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier: s9jwG/ECixhZsYfF0n6S3p6PgHJ3Zuma0CrdgxIo6Oc=
Subject key identifier: E5:3D:F5:2B:6E:A7:A2:37:C0:01:8B:F8:F2:F2:E6:47:34:C3:23:92
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 019CAA583CE0753CD9FF972568A888378FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number: 17AC
Signing time: Sun 01 Mar 2026 17:00:35 +0000
Manifest this update: Sun 01 Mar 2026 17:00:35 +0000
Manifest next update: Mon 02 Mar 2026 17:00:35 +0000
Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: /OMZt4NCvgnEzWWRy4Ofu8c4112HMI9TAXAb86vHk2U=)
2: V9Cc-uR-zIYJvjXve4ZyJUnQjsU.roa (hash: 2/BgI0CeVbMyKlBMczQ9BiDbSbqULeWjVwVtFX1ruVc=)
3: kL9jbHUoIoWWPmJDOjYutDKq9S4.roa (hash: vJG3x4EHXbeIpONFrJoAJLtr1KSHjKyEb3xfexUn52o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:3c:e0:75:3c:d9:ff:97:25:68:a8:88:37:8f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: Mar 1 17:00:35 2026 GMT
Not After : Mar 2 17:00:35 2026 GMT
Subject: CN=e53df52b6ea7a237c0018bf8f2f2e64734c32392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:76:d2:81:60:81:84:14:24:0d:86:0f:49:95:
d9:fe:92:cc:09:ed:e2:63:07:01:39:25:59:78:5f:
24:6f:53:34:5c:2a:c4:12:48:62:b9:c7:2a:36:7a:
9b:2e:17:fb:42:bd:0b:64:84:73:19:ad:54:91:d1:
70:e0:f4:f2:18:70:05:ec:03:94:ab:b0:4e:65:4a:
b0:20:0f:5d:cb:5a:ce:2b:83:64:d6:3e:86:69:bd:
26:6a:3b:ef:93:a0:72:85:62:da:f9:4a:b2:17:47:
df:7c:3f:9e:41:59:3a:7e:9a:54:1f:0f:e5:7b:a0:
16:35:11:de:ef:d8:9c:2f:47:bc:30:f5:4d:a9:67:
8a:21:98:52:6d:9f:3e:ec:1c:e6:73:f5:fa:f1:92:
0a:ee:d8:11:7c:68:0d:05:1f:c0:56:6a:12:18:97:
cf:f9:ef:1d:1b:44:97:63:37:f0:af:55:b2:9f:51:
11:9a:59:74:51:90:bd:5a:f4:e7:18:45:0c:45:ec:
8b:34:9a:f8:99:82:89:d8:bb:45:7c:a8:92:96:9d:
59:10:06:95:fb:96:4d:8b:fb:cb:7c:3f:86:0e:35:
36:ff:67:3b:17:e7:fe:48:3a:90:d2:6f:e6:fa:17:
73:78:25:1a:99:d9:ef:2d:8d:5e:6d:e5:22:5f:b6:
06:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3D:F5:2B:6E:A7:A2:37:C0:01:8B:F8:F2:F2:E6:47:34:C3:23:92
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a1:26:48:ab:08:cf:39:56:a0:33:80:f1:18:59:12:14:ac:
f4:cc:76:cc:8a:51:72:5d:01:4e:8b:3d:90:8e:06:64:ee:da:
72:c8:21:a4:61:a9:2a:84:ac:79:e7:2d:4a:7e:16:f1:c1:ed:
e4:77:91:12:01:c9:b5:5c:b2:ca:cf:37:9d:be:ab:ee:5e:48:
98:58:f1:a4:8b:d9:2b:49:b9:76:0e:bb:4d:01:d4:93:3b:6b:
d0:69:4e:ac:b9:a6:f8:74:6c:f6:51:aa:2d:c4:e6:51:2b:60:
2c:4a:82:7a:62:34:91:de:9f:ed:17:22:3b:61:ff:0c:4a:7e:
95:3b:22:85:e2:0a:70:28:1f:3b:31:e2:ab:65:2a:01:76:46:
c9:04:cd:95:d7:b6:a6:60:dc:f9:64:3a:1d:37:c8:75:9d:64:
0f:4a:31:0f:3f:07:a0:2a:92:ec:f3:f8:0b:1c:6b:47:bc:14:
92:40:31:df:cf:18:dd:c2:2e:40:03:72:b3:96:c3:e0:59:69:
e8:1c:b3:9f:10:bb:e5:64:00:2e:cd:d4:e4:9b:39:5b:d7:d7:
f4:5a:8f:27:a4:db:ac:cc:3e:37:7f:6d:eb:3e:d7:b9:1a:b7:
92:4c:3f:24:84:61:66:61:b8:83:9b:48:5c:87:0c:32:f2:f5:
a5:d7:83:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:26 2026 by rpki-client