Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier: 4vGViVAL85f/UtobBvHi4a9lLddgTAvrCMrFw6OCR4E=
Subject key identifier: 3D:E0:8A:0A:CF:16:8F:7F:52:37:C4:89:64:13:0A:E6:80:69:2D:8F
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 019EC3370E592246DBD835F5E7375028452C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number: 18C2
Signing time: Sat 13 Jun 2026 23:00:25 +0000
Manifest this update: Sat 13 Jun 2026 23:00:25 +0000
Manifest next update: Sun 14 Jun 2026 23:00:25 +0000
Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: sHQblOSp4PtY8J8vbHqXqofD0MddGJsO5msX8DAM0xE=)
2: V9Cc-uR-zIYJvjXve4ZyJUnQjsU.roa (hash: 2/BgI0CeVbMyKlBMczQ9BiDbSbqULeWjVwVtFX1ruVc=)
3: kL9jbHUoIoWWPmJDOjYutDKq9S4.roa (hash: vJG3x4EHXbeIpONFrJoAJLtr1KSHjKyEb3xfexUn52o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:0e:59:22:46:db:d8:35:f5:e7:37:50:28:45:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: Jun 13 23:00:25 2026 GMT
Not After : Jun 14 23:00:25 2026 GMT
Subject: CN=3de08a0acf168f7f5237c48964130ae680692d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d8:cd:3b:ee:ec:61:48:97:05:5c:50:52:71:
6f:28:fd:8d:17:a4:e7:eb:1f:c3:93:d2:53:69:3b:
c2:b7:d2:45:38:44:66:f4:ec:06:1b:38:a0:71:d9:
60:7b:9d:81:33:cf:c5:da:13:1f:60:23:a3:5d:42:
08:da:e1:5e:1a:69:f9:1a:26:cb:16:d6:88:d3:77:
4c:48:69:e7:19:97:5a:0c:4a:5b:6b:99:6a:ce:92:
8c:19:10:12:4f:04:42:99:f3:ad:2c:70:f4:2d:2c:
9d:46:c2:06:2a:eb:91:a4:d2:1c:b9:3a:1d:1c:18:
8d:4e:78:46:36:f3:12:b7:f1:bd:6e:f3:47:32:a9:
34:c4:30:07:6b:c0:95:53:7a:98:11:83:8f:72:ec:
a8:4a:f2:51:8f:45:0c:10:d2:bc:3a:87:a1:65:fe:
ad:ca:7a:ff:47:26:cc:92:8e:18:13:95:9a:1f:e9:
a5:f1:ec:d9:48:ed:84:c7:9c:56:70:91:1c:d8:58:
9c:b5:5d:6d:89:eb:2e:af:2c:2f:ef:a5:ef:17:35:
4b:d2:2b:60:66:0e:af:1a:f4:ca:f7:be:0c:94:ae:
63:94:9b:1b:a3:fe:8f:89:92:77:16:1e:24:fc:89:
95:48:30:7e:34:20:48:5f:2f:79:3a:b5:0f:88:e5:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E0:8A:0A:CF:16:8F:7F:52:37:C4:89:64:13:0A:E6:80:69:2D:8F
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:5e:e9:fa:ee:b0:18:3d:10:40:07:90:82:11:79:e0:bc:bb:
1d:64:21:aa:a5:c6:bc:fe:cc:4a:99:8d:3b:92:75:7d:56:4e:
8c:bf:c0:ca:df:ac:e3:a0:26:86:b1:c9:38:a9:b7:9b:7d:6b:
97:dc:ca:bb:a8:1b:98:a8:24:2b:63:e6:ea:11:87:61:75:8b:
2f:f2:78:7e:68:21:50:13:4c:62:30:1b:cc:ce:12:cc:8a:39:
b1:c6:d6:89:d4:33:ad:39:0a:37:5a:c0:1c:ec:48:c8:fe:6d:
dd:a3:9d:ad:09:3f:d7:86:57:1e:c7:69:5f:69:9f:fe:db:c0:
4e:49:b0:a5:b8:a6:67:a1:80:5a:87:9a:70:26:3a:db:b6:a6:
19:9a:57:cd:2b:3e:ed:04:f7:e2:a8:31:50:41:eb:1d:44:ea:
04:ba:ab:49:fe:d8:44:43:37:f5:b8:28:ec:43:d4:5a:5d:9b:
60:87:7e:d2:2a:e2:30:38:8a:11:81:0b:fd:d4:d2:53:5e:30:
29:b9:80:56:12:e3:00:1d:0b:fe:54:22:d3:a4:bf:c1:c8:50:
67:db:ce:80:70:83:58:8d:be:29:9c:ab:55:f7:a5:65:fd:33:
9a:1a:12:c2:f6:11:44:e8:14:55:d3:3c:f2:f9:7f:c2:37:91:
5a:db:e5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:30:23 2026 by rpki-client