Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier: ZB0hx02q7xpDauG0hRSYiT6yCnzXtWrM0F2m6gJkmb0=
Subject key identifier: 15:83:C3:16:71:90:BF:6E:04:62:13:94:B4:9C:BE:A0:EC:05:D2:62
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 01A138C8E3147FA25399CD252D13459BDE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number: 1A08
Signing time: Wed 14 Oct 2026 05:00:51 +0000
Manifest this update: Wed 14 Oct 2026 05:00:51 +0000
Manifest next update: Thu 15 Oct 2026 05:00:51 +0000
Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: hatB4o8/ayJPK6UTExYGJF23MeprrdCqvGy1AH9eThU=)
2: V9Cc-uR-zIYJvjXve4ZyJUnQjsU.roa (hash: 2/BgI0CeVbMyKlBMczQ9BiDbSbqULeWjVwVtFX1ruVc=)
3: kL9jbHUoIoWWPmJDOjYutDKq9S4.roa (hash: vJG3x4EHXbeIpONFrJoAJLtr1KSHjKyEb3xfexUn52o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:c8:e3:14:7f:a2:53:99:cd:25:2d:13:45:9b:de:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: Oct 14 05:00:51 2026 GMT
Not After : Oct 15 05:00:51 2026 GMT
Subject: CN=1583c3167190bf6e04621394b49cbea0ec05d262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:b8:17:ad:83:ae:d2:c0:7d:15:7b:20:e7:
2d:1e:af:1a:45:a9:d0:18:47:49:da:a0:bb:7e:fc:
2b:43:c4:82:b2:fe:35:16:f5:59:10:d6:09:94:65:
f0:9b:c4:1d:f7:3e:90:1c:84:fb:09:75:5b:c9:16:
a7:75:4d:21:dd:f9:36:9d:8b:a7:82:5c:60:85:75:
1a:d0:b5:2b:11:3a:43:10:04:a9:44:4f:62:ff:93:
05:8a:88:7e:7d:18:df:f4:66:0f:01:ff:85:39:b0:
0d:ec:c4:7d:bc:84:2a:7e:03:93:51:89:56:28:b3:
75:e0:cc:42:81:ff:4e:af:be:4c:83:c4:70:dd:e9:
c1:32:8d:91:53:aa:61:79:62:1c:1d:b9:34:3a:af:
ab:28:8f:e0:78:c6:68:b9:89:b4:7d:35:c6:07:b8:
55:15:4b:6a:d0:f0:a5:d7:8d:df:7e:b6:67:f5:69:
02:2b:f2:9d:66:ef:c3:d6:38:f6:fa:6e:09:c7:cc:
90:05:f2:23:fb:60:8d:62:d8:6a:f6:51:18:4f:89:
78:41:86:c1:ed:40:51:15:32:2b:39:20:ee:67:fd:
79:20:e5:ef:ca:b0:93:5f:be:0b:e4:6e:94:bd:a0:
fa:f2:2b:aa:6a:7a:66:7a:5d:46:45:3b:1d:b9:79:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:83:C3:16:71:90:BF:6E:04:62:13:94:B4:9C:BE:A0:EC:05:D2:62
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7f:15:44:1c:7d:05:84:4d:17:c4:e3:d8:ce:3a:a3:ed:60:
ec:86:5e:04:f2:b4:d5:9e:a2:f4:d9:07:37:e1:d9:03:09:65:
0d:45:98:bc:39:dc:92:54:3d:06:a1:52:b5:85:3b:ce:03:5a:
26:e7:4b:de:a9:06:4c:91:93:6e:be:6e:1a:94:b7:48:8f:58:
a6:de:af:7b:17:b9:ff:eb:34:ed:f6:9a:27:da:85:84:38:5d:
f9:8f:56:0e:29:5b:f2:ea:12:f2:42:e4:8b:93:8f:6f:ef:09:
ec:28:4e:cf:87:b1:0e:6c:cd:c1:1e:0e:e5:ce:fc:47:90:ca:
be:6f:27:84:ac:8b:90:24:e7:4e:0e:b8:15:20:6f:c7:94:4f:
30:c2:0d:ce:df:dd:71:03:28:86:3b:05:86:0c:ca:2e:22:ef:
3b:81:75:ba:0f:c4:8f:f2:e1:f8:51:e8:5c:94:f2:40:ef:66:
c0:7d:53:45:57:c2:47:ab:5c:ab:7f:3b:d9:a0:43:f2:26:d3:
bf:15:47:aa:3d:bc:22:65:f9:bd:ff:8a:3c:9d:da:69:55:d0:
73:70:86:b6:b2:26:95:09:09:0c:32:5f:8c:53:76:b4:63:cd:
9f:46:d1:3b:52:2f:dc:dc:aa:00:5b:48:8e:9e:41:95:d7:e3:
cf:7e:fd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 07:57:58 2026 by rpki-client