Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier: FwZkhLuolugnDa761MiqCh3rkYWDk04KSGVUA9qIpVA=
Subject key identifier: 2B:1D:A8:FF:2A:41:51:5D:52:FE:F6:10:0B:BC:1B:C3:3E:21:C5:FD
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 019D39415560FA4686AE9AB21835ED328083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number: 17F6
Signing time: Sun 29 Mar 2026 11:01:16 +0000
Manifest this update: Sun 29 Mar 2026 11:01:16 +0000
Manifest next update: Mon 30 Mar 2026 11:01:16 +0000
Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: snasePFkPiXjhp882fcE38YhCDaUeL392Skn8tmuTfc=)
2: V9Cc-uR-zIYJvjXve4ZyJUnQjsU.roa (hash: 2/BgI0CeVbMyKlBMczQ9BiDbSbqULeWjVwVtFX1ruVc=)
3: kL9jbHUoIoWWPmJDOjYutDKq9S4.roa (hash: vJG3x4EHXbeIpONFrJoAJLtr1KSHjKyEb3xfexUn52o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:55:60:fa:46:86:ae:9a:b2:18:35:ed:32:80:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: Mar 29 11:01:16 2026 GMT
Not After : Mar 30 11:01:16 2026 GMT
Subject: CN=2b1da8ff2a41515d52fef6100bbc1bc33e21c5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:70:58:b3:fe:1f:ac:d5:8b:03:e1:ce:43:ed:
9d:83:52:b4:a8:a1:27:f1:3e:c6:3a:71:ef:ea:9b:
9a:a7:b7:5c:70:27:9a:6b:21:b5:fb:17:3b:35:9e:
c0:49:0f:39:2c:d3:cf:3a:42:e2:20:19:b2:ab:83:
e7:91:b9:54:fd:aa:26:30:c1:9a:15:15:d5:c1:7d:
04:c5:98:58:4e:54:7c:6f:00:f6:ce:83:5c:28:66:
8f:81:71:04:16:3b:cc:ba:d0:14:48:a1:75:ea:c7:
5d:c7:b0:16:cd:fb:79:7b:85:cd:29:4a:32:8b:ab:
93:da:f9:03:4c:15:fe:75:16:48:22:a8:68:7b:a7:
ff:2a:4b:99:0c:76:4a:d6:af:f0:b6:b1:17:9f:2f:
b9:60:ba:68:f6:6c:f6:2c:90:96:d4:12:4f:e3:b5:
57:79:9f:5d:4a:20:76:88:ee:ee:f2:f6:4e:bc:1c:
b5:33:31:0c:3b:22:88:b7:a9:7a:ba:51:8f:49:ab:
e7:09:16:76:44:10:2a:3e:2b:d1:74:ca:40:fd:ac:
5b:9b:40:39:35:0f:5a:0e:02:e9:82:b7:19:1c:3b:
ec:3f:ca:4e:10:57:3f:d2:4c:1c:d8:9f:94:58:68:
99:90:dd:9a:d2:2f:7c:9c:42:40:c1:94:87:91:18:
69:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1D:A8:FF:2A:41:51:5D:52:FE:F6:10:0B:BC:1B:C3:3E:21:C5:FD
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a5:14:41:e6:fe:dd:84:1b:5a:2e:ad:70:23:f8:3b:57:3e:
cf:96:03:0e:11:d4:2c:dd:3d:4b:34:75:4c:95:56:a4:47:dc:
40:76:e9:d0:14:5e:36:5c:69:e1:d6:d4:4d:e4:99:0d:0c:09:
09:02:14:e0:18:51:be:80:dc:f0:3a:d4:3c:cd:db:41:1f:9c:
95:1d:11:48:9c:81:94:dd:3e:88:92:78:97:d0:cc:69:99:00:
51:6f:5b:f4:8f:fc:c2:35:52:f8:39:d0:46:7c:2a:d7:de:a5:
f9:33:f6:84:ca:44:0f:d1:d9:60:3a:93:87:ab:e2:3b:ba:41:
4f:9e:b8:f7:75:3b:cf:e5:5b:a0:ea:d1:13:11:63:40:4c:99:
91:01:97:d4:29:74:ca:b0:dc:ef:f6:95:b9:50:f2:05:aa:6e:
1e:b2:30:15:43:b0:51:3b:e0:53:ab:59:12:2d:4b:a0:d4:92:
36:19:ce:c0:4b:e5:75:11:c8:02:9a:53:b0:d9:ae:d1:92:6e:
c3:87:a2:0a:ea:c2:ff:c9:93:cd:03:4a:fd:d0:f1:73:00:30:
7b:45:97:8a:82:c4:13:39:21:8e:5d:33:ff:4f:e4:85:96:9e:
db:f2:d0:da:96:ac:55:c3:2d:10:2c:10:e4:70:a2:2f:96:f6:
45:03:32:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:28 2026 by rpki-client