Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier: wM0BAuSJtMldfFMHsLFLNLdJ2UeUG3V3hN6d/F1/fUI=
Subject key identifier: 62:9A:4C:6A:D1:CF:D7:1D:72:84:29:90:6E:C0:96:85:7A:33:B0:C6
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 019EEDB48B43453126FD3D435A1A8FD524D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number: 18D8
Signing time: Mon 22 Jun 2026 05:01:32 +0000
Manifest this update: Mon 22 Jun 2026 05:01:32 +0000
Manifest next update: Tue 23 Jun 2026 05:01:32 +0000
Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: mwhiOo2fXTVRogBwVOgBW27PksrHrqJmFHoQkvd/B3Q=)
2: V9Cc-uR-zIYJvjXve4ZyJUnQjsU.roa (hash: 2/BgI0CeVbMyKlBMczQ9BiDbSbqULeWjVwVtFX1ruVc=)
3: kL9jbHUoIoWWPmJDOjYutDKq9S4.roa (hash: vJG3x4EHXbeIpONFrJoAJLtr1KSHjKyEb3xfexUn52o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ed:b4:8b:43:45:31:26:fd:3d:43:5a:1a:8f:d5:24:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: Jun 22 05:01:32 2026 GMT
Not After : Jun 23 05:01:32 2026 GMT
Subject: CN=629a4c6ad1cfd71d728429906ec096857a33b0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:a5:d4:5b:38:a0:7c:19:60:75:68:57:3b:
8c:e0:0a:07:3c:4b:c8:6a:97:c9:cb:60:ef:2a:38:
4f:7d:4d:85:c0:fe:a8:f6:a4:69:31:db:db:45:f2:
a3:ee:5b:0b:94:8b:a4:62:b2:e8:9b:b9:32:52:bf:
2f:5c:6d:c8:8f:19:a8:9f:44:a2:89:8f:f8:a9:75:
5d:fb:34:72:6f:84:24:19:ae:66:2f:be:fb:d5:c8:
2e:f0:5e:71:f1:61:c6:28:82:e4:ae:60:fa:c0:ad:
cb:19:80:6a:2c:64:f3:c8:34:ad:2e:76:67:47:1d:
80:8a:0b:a7:cf:1e:d3:8b:f8:47:e9:e1:cd:ff:d1:
03:bc:5b:79:c8:30:a3:b9:f0:ae:a7:ee:14:12:e3:
09:47:fb:69:ae:57:3f:36:42:6e:4e:ec:01:49:93:
6f:67:8b:d1:1c:ab:06:fb:44:e6:10:31:c7:88:d5:
ba:e4:b9:4d:2a:1f:c6:fb:42:2f:40:dc:0a:47:a8:
3e:24:f7:92:1e:66:16:f9:1d:12:ae:a1:73:a4:71:
4f:e0:60:36:e8:f1:aa:0e:78:f4:e6:2a:db:34:2b:
f8:ec:f7:89:97:53:d1:34:47:c3:db:88:9f:67:42:
a3:5e:b2:82:b9:b8:7e:16:74:ba:98:1e:63:c1:7b:
af:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9A:4C:6A:D1:CF:D7:1D:72:84:29:90:6E:C0:96:85:7A:33:B0:C6
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:eb:9a:b1:9b:dd:b7:5c:ec:2d:29:93:ac:0d:a6:93:c8:0b:
0d:ec:56:7b:80:8c:a3:6b:6a:49:90:70:c4:28:7d:1a:6b:62:
32:5d:40:1e:14:6b:5b:2c:77:99:32:d7:3d:df:11:fe:a5:43:
25:fe:e5:4d:3c:e0:61:d9:96:59:5b:4d:17:23:8b:8d:16:72:
dc:e1:5a:3e:89:71:40:99:d4:6b:24:a7:c0:97:7e:8e:ee:50:
22:38:8e:0a:88:58:e1:04:f8:e3:28:cb:ec:bf:fb:3c:3f:8c:
71:c3:d7:c1:08:d2:c9:ca:50:1c:15:91:7d:78:0b:a2:81:0d:
fd:ad:d8:60:df:e9:2b:29:85:ec:5f:92:be:e6:4a:50:c5:31:
e8:0c:e8:d3:24:3a:90:9e:e2:07:8e:7f:fb:c9:9c:7d:85:93:
af:35:ae:af:39:dd:68:6c:02:61:6e:39:29:7f:c8:c8:61:65:
ec:96:0c:17:f5:d5:e6:d2:0a:18:23:e4:53:54:d8:a0:be:c5:
65:f6:08:42:93:be:a3:64:fa:2f:1f:a9:54:10:1e:b0:3e:88:
8a:24:08:2d:00:7b:53:87:84:16:e1:5f:44:b6:14:d6:4c:4f:
74:45:9b:a2:99:2e:bf:56:8e:86:f2:87:61:51:a8:2d:c6:43:
74:6c:47:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 10:53:57 2026 by rpki-client