Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
File: LLE1YlrAUaKAl39jBs8j1gxAa5A.mft (raw, json)
Hash identifier: G5OPLJQmOAFFxh3K4bVGbDJRPilkFQ5iRDzabVRYYIg=
Subject key identifier: 35:96:70:9C:8B:C7:93:7E:AF:FC:B6:5C:E8:BA:7D:8B:90:93:DE:58
Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
Certificate issuer: /CN=2cb135625ac051a280977f6306cf23d60c406b90
Certificate serial: 019D371C042638D91026EF2360B1BD67C463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
Manifest number: 1522
Signing time: Sun 29 Mar 2026 01:01:15 +0000
Manifest this update: Sun 29 Mar 2026 01:01:15 +0000
Manifest next update: Mon 30 Mar 2026 01:01:15 +0000
Files and hashes: 1: LLE1YlrAUaKAl39jBs8j1gxAa5A.crl (hash: c/vb2RQz2B6vPTE6b+H3L3zJ9b8vn9RQxK6G4kz9ytE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1c:04:26:38:d9:10:26:ef:23:60:b1:bd:67:c4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90
Validity
Not Before: Mar 29 01:01:15 2026 GMT
Not After : Mar 30 01:01:15 2026 GMT
Subject: CN=3596709c8bc7937eaffcb65ce8ba7d8b9093de58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6a:9e:f1:f0:b6:9f:20:d1:fe:95:42:67:76:
e3:4b:6c:36:72:c3:b7:54:40:54:fd:1c:91:d2:a7:
65:53:b5:db:08:fe:c6:c0:37:30:d4:81:b1:06:d1:
80:84:cd:14:6f:80:6f:7a:38:23:ea:75:9c:4a:32:
e9:b8:5b:5d:2f:d5:b6:53:b1:03:1e:2e:fb:9d:43:
b1:f4:76:e1:89:64:1e:c4:46:bd:92:70:26:75:ec:
28:61:2c:7a:36:07:bb:59:9b:38:0c:b0:63:ae:c9:
fd:10:ba:33:af:3d:c5:5d:52:51:0c:80:a7:3d:8a:
c7:35:f8:4b:04:d0:13:dd:35:d8:09:a6:5b:e3:81:
ec:7c:43:62:65:df:9c:7d:94:2e:92:26:d2:64:72:
54:d9:47:a1:b6:bf:47:e9:ad:be:ed:bf:1d:f1:21:
b4:41:90:11:3c:ae:e2:79:63:a8:92:9c:6b:1f:97:
5d:c8:4e:a2:3b:b1:12:10:fb:25:ed:7a:72:ca:bd:
e6:50:7b:87:9a:31:d4:ed:3d:a2:be:5a:0d:f1:af:
10:c1:d4:4c:b2:9b:88:c2:1f:88:db:74:68:e0:b6:
71:4a:06:41:3e:59:c8:c6:1f:a7:43:2a:bf:88:f7:
c8:4a:58:27:be:11:ff:db:89:c7:37:16:36:7e:ce:
26:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:96:70:9C:8B:C7:93:7E:AF:FC:B6:5C:E8:BA:7D:8B:90:93:DE:58
X509v3 Authority Key Identifier:
keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:82:4e:96:ee:0a:1b:97:11:69:a7:af:f9:29:e7:a4:47:40:
c1:e1:f5:b3:61:e5:6f:11:de:5b:5a:59:91:0a:07:94:8e:03:
f7:ad:92:58:62:47:21:ad:2f:0e:47:26:44:71:99:04:9e:c4:
8a:49:11:6f:9f:06:f2:d5:dd:c7:0a:fe:87:44:8e:a9:27:51:
47:56:a7:33:6d:c1:65:80:e5:0b:d9:83:0f:f8:cd:63:d6:af:
6b:21:f3:e3:e8:3f:55:04:5a:01:6d:28:40:76:5a:73:ab:f2:
b4:17:40:5f:3e:7b:2c:70:74:78:b2:90:95:46:ff:37:ff:92:
41:a0:33:df:0c:21:2f:0f:c9:c7:91:18:02:bc:a9:92:19:59:
1e:bc:c0:3a:fa:f1:21:d0:ba:04:ef:2c:61:53:67:91:04:00:
9d:d3:fb:b6:03:c6:77:1a:16:dc:b2:78:68:d4:4a:fe:5c:99:
fe:38:60:98:7c:7b:6c:8e:59:17:59:ac:a3:6d:26:66:65:cf:
66:04:8f:a4:28:fc:29:e4:9d:7f:35:9c:95:1d:cb:4a:ab:0b:
1d:60:d4:7e:1b:1d:1a:19:75:73:57:15:40:e0:91:39:d0:84:
2f:61:ee:b2:b4:2f:3d:09:40:8e:3f:86:ca:7f:6c:c2:c7:19:
e6:e6:be:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:58 2026 by rpki-client