Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
File: LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft (raw, json)
Hash identifier: dKglpqEjBwReaQbYc02UQQcxPGcQYPpMf5299mj/Ufw=
Subject key identifier: EA:3C:57:7F:D0:62:2C:58:15:97:D2:08:D2:37:BD:97:61:0B:16:99
Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
Certificate issuer: /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Certificate serial: 019D2696774E81E18E8A2BA06FA9BBB61F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
Manifest number: 0CB1
Signing time: Wed 25 Mar 2026 20:01:28 +0000
Manifest this update: Wed 25 Mar 2026 20:01:28 +0000
Manifest next update: Thu 26 Mar 2026 20:01:28 +0000
Files and hashes: 1: LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl (hash: KCNBt0wwd3WLSuMqSBUwh7PGbaGUbl33oKG7rUfSOTY=)
2: z_i2HLAe207eqqdf1Xix5ENRMe4.roa (hash: ztqjP6xacDo+JPNkJa5MSwjbXr7h1+BJzgwfqlxxQ4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:77:4e:81:e1:8e:8a:2b:a0:6f:a9:bb:b6:1f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Validity
Not Before: Mar 25 20:01:28 2026 GMT
Not After : Mar 26 20:01:28 2026 GMT
Subject: CN=ea3c577fd0622c581597d208d237bd97610b1699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:55:66:86:dd:23:02:91:fe:ae:6b:ec:5a:70:
eb:43:e6:9e:2e:51:f0:6c:da:1a:9c:11:7a:ac:ff:
40:e8:4f:ff:39:4f:07:fc:0a:7a:18:8a:ff:9f:96:
0f:5d:6f:cb:83:f4:5d:30:ec:e3:62:14:5e:6f:de:
8d:e2:38:ff:a8:8b:58:0c:1b:b3:f1:be:9b:e2:85:
1c:2a:c6:e2:7d:07:54:e7:cc:31:7b:f1:15:8f:69:
5d:6c:65:ce:a6:71:ca:50:ee:5d:2d:67:7b:04:e1:
9d:07:74:51:4c:b2:37:63:5c:84:1e:21:91:75:59:
ce:47:a8:40:34:79:52:c6:41:fc:7b:02:14:e1:63:
85:ea:96:06:95:79:a6:cc:f3:5f:7e:24:f9:73:09:
be:66:74:e6:5b:6c:23:c1:57:4b:e7:88:e6:ab:a2:
27:3b:e0:8d:09:88:63:eb:0e:ad:4c:fe:ca:92:c0:
46:f6:34:cb:c6:94:a7:0e:47:9a:19:7b:3f:3f:4d:
50:7d:d8:de:a6:31:c5:62:e0:df:de:f0:56:60:6c:
3e:8b:d3:64:f9:57:43:f6:0d:28:bf:b9:5f:8e:63:
88:93:e8:86:c8:dd:37:8f:bb:c6:3e:7a:3f:f7:78:
00:52:e9:5f:ec:73:69:84:16:42:84:bb:4d:b6:53:
d0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3C:57:7F:D0:62:2C:58:15:97:D2:08:D2:37:BD:97:61:0B:16:99
X509v3 Authority Key Identifier:
keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:bf:ab:56:42:64:2a:6f:f6:ae:33:b0:09:4a:09:10:4f:70:
29:5a:7c:45:7d:17:6a:7b:7e:a3:d4:9e:a2:c1:e6:06:97:8f:
c7:0e:ee:e4:3c:52:a1:44:c3:b5:8e:e2:06:31:c2:24:3c:10:
cd:a0:73:cd:79:e3:4c:8d:47:ca:56:13:01:bc:25:40:97:d6:
e5:c8:ff:93:a8:bd:12:1e:26:a4:af:da:7b:71:9f:29:10:5b:
85:6d:e4:f1:63:5e:f1:a2:ea:ea:a1:38:d4:e3:c0:ad:a2:66:
dd:9c:cc:2a:cd:3a:22:3b:f5:e9:59:82:65:33:d8:ee:5f:0d:
ab:b5:bd:7c:b2:5d:6f:92:37:44:0d:94:a8:f1:40:f7:e7:11:
e6:fd:af:f1:4a:e3:dd:6f:03:e5:75:ee:3a:2f:6a:56:ac:6f:
eb:0b:e3:20:4e:2b:73:f4:08:53:30:8d:9f:7e:07:cc:c6:13:
aa:a7:83:91:3a:f8:26:39:1f:d3:6b:5c:cb:26:62:14:1d:ea:
e2:4b:34:9b:8a:9d:82:4f:a7:a8:44:72:58:3b:c7:35:fc:6b:
9f:52:22:9d:00:1a:0e:60:d5:bf:31:df:8a:00:83:c2:30:64:
8b:e7:6d:66:52:34:bb:56:0d:46:f0:0a:d5:9c:e7:db:2d:39:
74:7b:5a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:26 2026 by rpki-client