Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier: n9TR4LHkUC1H8SJ54ZrIZzNsW4s3TbDuAb178fyEmJU=
Subject key identifier: 92:FC:CA:D9:C9:22:86:BB:31:74:D9:A0:E2:78:09:78:36:9A:85:36
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 019FFE00F30460FEA42CCFA4FF49F79D32F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number: 1965
Signing time: Fri 14 Aug 2026 02:01:42 +0000
Manifest this update: Fri 14 Aug 2026 02:01:42 +0000
Manifest next update: Sat 15 Aug 2026 02:01:42 +0000
Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: 7yCNUT29KAHmtp22Wfxo1osd/j2PLm5jXaMmGHeEQtA=)
2: V9Cc-uR-zIYJvjXve4ZyJUnQjsU.roa (hash: 2/BgI0CeVbMyKlBMczQ9BiDbSbqULeWjVwVtFX1ruVc=)
3: kL9jbHUoIoWWPmJDOjYutDKq9S4.roa (hash: vJG3x4EHXbeIpONFrJoAJLtr1KSHjKyEb3xfexUn52o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 02:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:00:f3:04:60:fe:a4:2c:cf:a4:ff:49:f7:9d:32:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: Aug 14 02:01:42 2026 GMT
Not After : Aug 15 02:01:42 2026 GMT
Subject: CN=92fccad9c92286bb3174d9a0e2780978369a8536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:66:0f:2b:f2:d4:3f:b6:8c:af:a9:e4:c3:
51:82:9a:68:ae:0a:b1:ce:e8:9f:0c:78:8c:5a:72:
e7:2e:45:6c:43:a2:15:c4:b3:cc:41:c8:d7:e5:15:
49:03:9e:af:72:9a:93:26:99:6f:05:22:6a:cf:3d:
cc:b7:73:61:5a:80:53:4c:ec:fe:eb:d5:e6:87:1f:
a1:39:b4:5f:3d:ba:45:1c:e8:32:79:63:8e:c9:a3:
a6:fe:2f:6c:72:9c:5a:57:7f:50:66:12:30:a6:58:
1c:83:1e:ea:e3:19:16:d0:ae:1c:c6:3b:64:34:84:
54:fd:52:5f:9d:b8:31:7e:d6:ba:7d:df:67:02:c1:
fa:39:dc:53:c4:f6:1e:d6:9a:e6:30:79:41:43:cf:
43:44:f1:8c:2d:ed:bb:2e:75:b6:83:1c:fe:b3:75:
b7:e0:f3:31:2c:b9:68:02:63:75:7c:d7:21:be:e6:
82:79:d0:34:87:d4:35:5f:43:c4:18:a1:8f:c0:63:
ce:9f:b0:46:7c:5a:93:97:5a:7e:f4:aa:1f:42:b6:
dd:fc:25:b8:dd:48:9e:94:15:34:70:87:0d:9b:5e:
46:af:3a:e0:90:39:87:1b:2c:da:94:80:47:fa:fe:
d8:d0:98:32:c8:4a:c9:79:f2:99:dd:09:c9:a9:43:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FC:CA:D9:C9:22:86:BB:31:74:D9:A0:E2:78:09:78:36:9A:85:36
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:34:d4:4d:30:06:cb:e0:ea:15:5e:82:12:77:e3:cf:6c:da:
62:4f:d1:08:c3:58:eb:de:58:06:91:03:b8:ca:e3:e0:a1:b0:
ad:1b:a2:21:05:85:95:f1:ad:6b:4c:b7:0f:d7:90:9c:7f:64:
ea:ad:d2:83:64:87:c1:d0:a1:49:bf:e8:f6:32:c8:c9:d7:d7:
7e:72:04:7f:2c:7a:2d:f4:32:37:1a:66:4c:81:2d:76:8b:a2:
85:ef:5d:5a:2c:61:05:a4:3a:24:3a:78:80:b6:eb:02:e5:01:
1c:5b:11:45:25:44:2b:62:8e:1b:83:d7:3c:14:8a:e0:2c:57:
a6:a8:d2:73:7b:0a:1b:3e:68:ca:fa:13:f6:45:d5:11:30:a8:
55:b4:6d:37:f2:16:df:f8:c8:90:18:0d:b8:26:e7:a3:2d:07:
84:09:2b:c0:70:fa:d3:fe:8a:bf:e3:16:a7:bb:a4:e8:7d:07:
ee:62:ea:0a:8f:65:e4:fd:77:28:b9:77:af:78:e4:06:5d:2d:
87:35:eb:45:81:04:44:eb:13:be:35:70:c7:f7:14:f4:c6:ff:
6c:c0:ee:11:f1:6b:69:d4:d8:ee:cb:a3:d2:31:8f:52:ca:35:
29:26:5d:46:f6:5a:f5:72:38:af:92:4f:6b:4a:71:e7:e0:de:
19:7e:ea:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 10:48:32 2026 by rpki-client