Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
File: LLE1YlrAUaKAl39jBs8j1gxAa5A.mft (raw, json)
Hash identifier: oLFAJXZ1DSvnldot+UiB+W8IQfZXmNqy76GUdfL8mL0=
Subject key identifier: 01:42:D5:DE:AB:BF:8B:22:8A:25:BF:5B:05:73:AF:5F:BE:5A:4F:35
Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
Certificate issuer: /CN=2cb135625ac051a280977f6306cf23d60c406b90
Certificate serial: 019D27A8BC50D1DFCD724421523D626717AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
Manifest number: 151A
Signing time: Thu 26 Mar 2026 01:01:02 +0000
Manifest this update: Thu 26 Mar 2026 01:01:02 +0000
Manifest next update: Fri 27 Mar 2026 01:01:02 +0000
Files and hashes: 1: LLE1YlrAUaKAl39jBs8j1gxAa5A.crl (hash: SAbUu59sXj/27Hx172xfhLlyQcDSZ/ZH+a0E18jLHCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:bc:50:d1:df:cd:72:44:21:52:3d:62:67:17:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90
Validity
Not Before: Mar 26 01:01:02 2026 GMT
Not After : Mar 27 01:01:02 2026 GMT
Subject: CN=0142d5deabbf8b228a25bf5b0573af5fbe5a4f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:f5:f7:df:84:e9:af:85:19:6d:4b:c3:20:
5b:fd:0f:d6:ab:c5:e5:33:83:fc:b7:41:4a:ef:aa:
90:a4:de:4e:0e:3f:3f:7e:d1:25:1b:9e:09:a7:a8:
d8:1e:cb:06:a0:6e:d3:6f:b9:4f:48:a7:24:9c:b3:
17:f1:01:5d:57:d2:57:c6:67:ea:95:92:7b:ab:5f:
7e:02:6e:17:c9:9d:60:55:b4:14:34:73:04:da:56:
f8:9e:e6:90:a3:f2:51:dc:0a:2c:2d:66:d9:72:67:
60:11:37:f4:b4:99:72:9c:fc:8a:47:7d:03:d7:9f:
ed:96:4a:f4:c4:30:b6:c9:e3:1d:fc:ea:17:3c:3a:
cc:33:89:d9:60:cb:9a:3e:91:a8:52:b1:ee:0f:09:
3e:20:64:5c:0e:86:dc:6c:2f:51:d2:37:d9:57:10:
19:21:3f:a7:ed:87:3b:f7:c5:aa:a1:cc:c5:d2:60:
8a:29:51:8f:15:2c:4c:cf:ca:4c:64:64:2c:22:c7:
8e:a7:6f:90:21:b5:32:6d:9f:a2:47:c3:21:ec:c7:
41:83:c1:d0:93:67:c4:7c:fd:c4:97:ae:8b:38:38:
2d:6a:90:f9:60:85:03:33:a4:66:d0:25:74:59:33:
16:82:8a:5e:17:4e:dd:5e:99:e6:d5:ba:43:84:eb:
12:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:42:D5:DE:AB:BF:8B:22:8A:25:BF:5B:05:73:AF:5F:BE:5A:4F:35
X509v3 Authority Key Identifier:
keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:88:95:0a:af:c8:a9:01:8c:5d:42:72:07:ad:d5:17:1b:84:
20:9e:35:de:0e:4f:fd:69:cf:08:fb:cb:91:bc:94:ca:83:f7:
31:de:0b:03:6b:c6:ed:7f:18:42:19:06:07:4f:2d:f7:96:14:
ab:89:03:2f:d6:d9:35:54:2e:2b:34:3a:5b:a9:7d:43:8f:2b:
fb:9a:ba:d7:5a:53:8d:25:1b:21:7c:75:e8:5e:85:b7:51:f1:
ef:f2:7e:81:49:f4:61:4e:fd:e8:1f:e0:fa:65:6c:29:72:ad:
4a:c9:b7:5f:50:bc:6a:1e:44:58:12:19:c7:70:ba:47:09:92:
a2:f5:d0:02:cd:9b:55:51:75:5e:3c:91:18:a0:1b:c7:7d:86:
d2:3c:31:eb:cb:f6:e6:58:bc:14:a9:29:9c:c9:1f:ba:b7:f9:
19:c4:69:9d:0b:16:16:41:c6:97:4f:3d:50:b1:df:0c:53:73:
2e:d3:8c:d8:8a:d2:5b:70:f0:b6:70:16:ea:8f:de:df:0f:39:
4b:fe:11:4b:ae:1f:55:a5:ec:25:91:73:3b:2e:35:9d:df:45:
70:fc:40:7c:38:a5:f4:bf:a5:d1:f9:70:da:05:f0:53:8b:3f:
e5:3e:4b:32:e4:9a:25:b0:e9:84:4a:d2:17:87:a9:23:ef:4a:
f8:a1:4c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:29 2026 by rpki-client