Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier: ObWDvGvBYcgqaw0gu0obAuaodz/z3UjVTCTBSUY0zjg=
Subject key identifier: 70:D4:A1:02:AF:61:A6:33:34:9A:E2:AB:57:80:20:08:BB:0E:0F:B8
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 019DA378D9BB3A86AA012886070E7D782254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number: 182D
Signing time: Sun 19 Apr 2026 02:01:39 +0000
Manifest this update: Sun 19 Apr 2026 02:01:39 +0000
Manifest next update: Mon 20 Apr 2026 02:01:39 +0000
Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: c+iJbavkFkbRLr73hsUk10iKVfIwfAqZuDoyPORVrNM=)
2: V9Cc-uR-zIYJvjXve4ZyJUnQjsU.roa (hash: 2/BgI0CeVbMyKlBMczQ9BiDbSbqULeWjVwVtFX1ruVc=)
3: kL9jbHUoIoWWPmJDOjYutDKq9S4.roa (hash: vJG3x4EHXbeIpONFrJoAJLtr1KSHjKyEb3xfexUn52o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:d9:bb:3a:86:aa:01:28:86:07:0e:7d:78:22:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: Apr 19 02:01:39 2026 GMT
Not After : Apr 20 02:01:39 2026 GMT
Subject: CN=70d4a102af61a633349ae2ab57802008bb0e0fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:0e:90:fe:58:70:38:ee:53:73:76:dd:28:
42:95:15:5b:8d:7a:ef:8a:0f:f2:a1:d0:5c:50:74:
02:a9:a6:1e:d8:9a:a4:cb:f7:62:25:cc:85:6c:a7:
b9:10:68:fa:79:7f:46:3a:82:cd:aa:ae:9c:cd:06:
ec:cc:8e:9f:56:a1:86:cc:2f:8b:07:f6:22:6f:07:
a1:a0:17:09:8d:06:f0:4b:55:07:0b:10:c4:3a:af:
3c:e1:ea:3f:80:ba:91:a0:0c:a8:a8:13:3a:e0:9c:
7e:8b:8f:75:1f:90:8f:ac:5e:2f:d0:4d:08:ca:3c:
ef:7b:32:dc:8d:12:0b:de:63:cf:a0:e0:91:ab:33:
03:88:e7:cf:2d:9d:10:be:c1:65:72:22:59:0f:28:
bf:f2:ee:a0:f8:d0:3f:3e:20:90:da:61:68:dc:b6:
d2:85:84:23:e6:12:32:0b:d2:d6:f5:68:02:4d:7b:
26:84:36:75:39:90:55:c8:3c:ff:1f:45:47:2f:19:
8c:7d:47:54:98:0f:af:5b:b6:e5:8a:08:5f:8f:87:
18:40:0b:38:6f:1e:bf:50:14:d6:8a:e4:c4:d2:00:
32:23:f0:d9:65:fb:a3:96:3c:5e:d9:f6:ed:29:05:
73:88:c2:da:02:48:3e:99:63:e9:41:46:5a:e5:d3:
0f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D4:A1:02:AF:61:A6:33:34:9A:E2:AB:57:80:20:08:BB:0E:0F:B8
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b1:4a:46:b6:4a:f5:0c:60:e8:b9:dc:8d:7f:8b:71:cb:ff:
21:a6:19:1f:c4:d7:ba:ca:74:d0:19:54:e0:37:2b:e5:22:a2:
0e:c8:d6:7b:4b:ce:c7:55:7a:08:ac:79:ce:ba:bf:dc:b8:f1:
c2:ea:dc:be:a2:41:a1:6e:6b:30:05:9a:04:10:97:92:d0:7c:
ca:0f:72:6d:5e:03:e8:56:1b:13:86:0f:86:fd:30:c1:29:61:
13:7f:03:94:00:57:3a:b6:65:41:1a:53:39:1d:1a:c9:7c:35:
ce:b3:2e:16:49:35:11:e1:9e:8e:29:9e:ae:c3:ee:be:d2:4a:
74:e7:6f:32:2b:fc:69:95:12:94:0d:3a:96:44:ea:5a:dd:53:
0e:a6:2f:52:6a:18:4b:14:d8:39:c1:94:16:c0:cf:6f:f2:66:
8c:ae:4f:e3:f1:a0:16:df:60:6a:bd:4f:ef:47:2d:c0:9a:74:
b0:0d:ca:ff:bb:21:ac:f8:e0:3a:25:d7:a7:97:8d:7c:84:ab:
91:ba:ae:da:e9:8f:ed:ab:aa:cf:f5:37:ce:00:8e:60:78:63:
39:21:8b:06:ca:d0:16:db:08:7d:29:e6:54:df:55:77:44:8d:
04:2c:6f:aa:5f:e5:9d:5f:7f:b0:e3:24:1a:93:2b:81:c8:fd:
16:59:ca:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:43 2026 by rpki-client