Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier: FhjJbbIiAC3Em7LT5OoY3/6of0jp4koFQCC0ms/1lXU=
Subject key identifier: 4D:B4:90:1A:0D:56:F8:65:51:EB:B7:9A:18:16:59:E0:F5:05:AF:AE
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 019E20FF2D92F0B34CF07E8F26D9FA09F676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number: 186E
Signing time: Wed 13 May 2026 11:00:54 +0000
Manifest this update: Wed 13 May 2026 11:00:54 +0000
Manifest next update: Thu 14 May 2026 11:00:54 +0000
Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: FokAKQEbdiVKcF5X6doPkv9tOxJf4+CSg2j8RDTczpM=)
2: V9Cc-uR-zIYJvjXve4ZyJUnQjsU.roa (hash: 2/BgI0CeVbMyKlBMczQ9BiDbSbqULeWjVwVtFX1ruVc=)
3: kL9jbHUoIoWWPmJDOjYutDKq9S4.roa (hash: vJG3x4EHXbeIpONFrJoAJLtr1KSHjKyEb3xfexUn52o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:2d:92:f0:b3:4c:f0:7e:8f:26:d9:fa:09:f6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: May 13 11:00:54 2026 GMT
Not After : May 14 11:00:54 2026 GMT
Subject: CN=4db4901a0d56f86551ebb79a181659e0f505afae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:d6:0a:3e:7d:f8:b1:ca:fe:ea:ba:5a:d7:
7e:57:a4:59:89:f9:01:eb:82:91:fc:5b:e6:0f:40:
36:7d:e2:0d:20:1c:7a:e7:25:29:a6:d7:85:44:16:
e9:15:17:fd:d0:73:07:aa:63:b3:d8:9e:d9:e7:d6:
5c:b6:8b:9c:fa:a5:72:0a:b5:fe:19:44:59:13:8a:
c5:ed:a3:25:22:dc:3d:f4:2e:d7:4c:b6:e6:f4:e6:
67:6e:6f:3e:6f:79:a2:6e:5c:f2:a9:fb:e6:cb:8d:
42:06:7c:5a:0f:95:d0:2e:72:7a:a8:f0:7a:cc:03:
54:aa:86:a4:1d:f0:12:56:48:45:4a:67:8b:01:03:
67:7e:3c:95:d3:34:82:23:d2:f9:fe:2c:83:aa:fc:
1a:6f:6d:9b:96:50:d8:f7:ad:bc:e8:d1:06:79:9c:
12:cd:b2:9b:25:8b:c1:47:d9:f1:11:59:fb:89:87:
3f:76:f0:6d:0c:a3:24:36:80:c2:95:d4:dc:9d:23:
0c:8c:a2:3b:8b:84:1a:89:14:bc:d8:4b:c2:64:2e:
71:30:19:b7:94:6e:c2:6a:01:09:18:48:da:4e:e5:
5e:17:4d:7a:79:43:9f:a3:e9:42:e7:00:1f:41:f2:
96:5d:1a:da:5c:8c:21:ec:31:db:11:cb:50:d2:cb:
a6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B4:90:1A:0D:56:F8:65:51:EB:B7:9A:18:16:59:E0:F5:05:AF:AE
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a4:e2:bf:94:9f:b8:b2:29:77:01:ce:38:ff:ab:2c:cf:97:
04:b0:77:09:ea:00:a0:0b:75:09:80:98:13:83:a7:e7:90:24:
c9:cb:93:ef:20:8b:d6:92:a9:fb:a3:aa:96:2a:59:0c:2f:c2:
96:d4:8a:18:9b:c7:ed:56:ea:d7:e0:53:82:fb:bd:c2:ca:d9:
8a:70:24:b6:4b:44:66:d0:5f:af:d0:1c:7a:29:7c:05:73:fe:
af:5e:b0:9d:e1:d8:3d:e8:eb:2d:a6:4a:b2:9c:8c:a8:7f:6f:
f6:c9:89:9a:a4:60:47:29:0d:1b:4d:44:b7:6f:85:4f:1b:5e:
d5:95:90:77:4b:44:43:e4:07:ba:e6:a0:fc:38:69:04:38:b0:
43:64:56:ca:cf:84:60:77:e1:14:78:fc:5d:4d:ce:4d:11:c0:
3b:ea:43:45:27:e2:c4:b9:e5:93:4e:ec:bf:67:67:03:d3:f3:
9d:fa:3a:15:fc:83:43:03:d6:2f:75:d9:a0:2d:30:47:06:aa:
09:de:5d:83:91:27:86:a7:2c:da:b8:57:59:01:1b:79:a0:81:
f6:2f:fa:cb:26:c5:dd:04:63:8e:64:12:27:e7:88:1e:38:e0:
86:00:d6:bb:2b:b8:22:c6:5b:c9:b7:e4:46:23:8d:ff:f7:e7:
f8:4a:10:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:44 2026 by rpki-client