Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier: IML2ykUYcIAwSok9sJPTfwZ8MaKIMFbRi0yF62drQQA=
Subject key identifier: 60:C8:BF:B7:00:A1:94:DB:20:AB:6E:07:2E:51:79:6C:8E:5D:09:FD
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 019D25F16BA251586FC88D630282E4BF1517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number: 17EC
Signing time: Wed 25 Mar 2026 17:01:11 +0000
Manifest this update: Wed 25 Mar 2026 17:01:11 +0000
Manifest next update: Thu 26 Mar 2026 17:01:11 +0000
Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: fPx0u4mLRcVEanyEvZ4mTPK6r90DNRjuiwuX958jusw=)
2: V9Cc-uR-zIYJvjXve4ZyJUnQjsU.roa (hash: 2/BgI0CeVbMyKlBMczQ9BiDbSbqULeWjVwVtFX1ruVc=)
3: kL9jbHUoIoWWPmJDOjYutDKq9S4.roa (hash: vJG3x4EHXbeIpONFrJoAJLtr1KSHjKyEb3xfexUn52o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:6b:a2:51:58:6f:c8:8d:63:02:82:e4:bf:15:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: Mar 25 17:01:11 2026 GMT
Not After : Mar 26 17:01:11 2026 GMT
Subject: CN=60c8bfb700a194db20ab6e072e51796c8e5d09fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:26:eb:3e:fd:55:8b:ef:e4:83:9f:76:29:
e9:c8:9b:29:aa:d4:c4:50:ed:45:85:d0:b0:c9:d7:
c6:f5:a9:b8:77:38:88:74:d5:b6:38:4e:39:d3:00:
7f:3c:cb:3a:39:13:08:86:cf:30:e3:15:3f:6d:1d:
b2:28:cc:5c:4c:81:fe:29:b6:bd:e7:62:c2:b9:61:
47:01:0a:08:51:c8:b2:96:fb:b4:cd:03:14:60:d3:
49:1c:01:e4:cc:65:02:67:e9:c2:b2:e5:7b:51:39:
1d:e8:18:df:93:96:5a:42:ff:e5:c7:60:b8:97:bc:
e6:6f:9d:ce:ba:7a:f0:df:05:a0:9b:01:a2:e3:fa:
75:f6:ed:d5:b7:05:49:92:81:5f:aa:d0:d4:55:54:
94:34:7c:dd:93:a1:d8:a6:14:d0:8e:12:78:ae:19:
c2:eb:79:ed:68:6f:f9:7d:4d:7c:f1:14:cc:a7:80:
6f:da:46:88:ab:1f:d2:aa:2d:8b:96:37:f4:24:33:
e0:71:56:2f:fa:99:fe:df:13:c8:91:15:8f:aa:75:
1b:85:3c:2f:1f:fd:ef:1c:a9:c8:24:2c:b3:0b:8d:
27:55:6b:69:e9:d0:6c:8c:66:c4:8e:51:fb:ed:13:
02:e5:26:4b:a4:03:67:a3:17:b6:ea:56:71:f2:55:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C8:BF:B7:00:A1:94:DB:20:AB:6E:07:2E:51:79:6C:8E:5D:09:FD
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:65:03:7e:5b:e3:5b:5f:85:92:b8:ea:8f:45:ca:83:09:15:
ac:c7:c3:83:60:64:be:22:1c:5d:50:4b:d6:22:5d:ab:b5:13:
ff:ad:4f:9c:3d:0d:be:6c:99:dd:6f:79:f4:8c:ca:ac:89:6d:
b6:e1:55:69:44:6e:c6:2c:34:b6:8f:2c:37:17:6b:27:97:14:
0d:e8:74:86:44:bd:36:c7:13:76:2e:00:3f:10:a8:d2:52:77:
f4:ab:bb:bc:95:bb:88:a3:d6:10:57:3c:16:43:21:9f:c4:2b:
ea:71:e7:f5:f0:0b:7a:42:6d:00:a8:67:d0:bc:9b:68:42:ca:
e3:fd:c1:26:8b:32:93:44:f4:54:e9:89:c0:80:5c:61:a8:65:
de:89:9e:36:e4:a6:65:a8:b4:ae:a2:0a:35:7e:35:bb:c3:22:
f4:3b:9e:a9:69:3d:9d:bd:31:84:2e:ad:55:3f:d2:05:95:d1:
9f:4e:29:04:b6:81:fd:1b:9f:11:fd:d1:9f:55:e0:12:e3:fe:
28:00:94:35:06:2f:77:29:fa:f4:e2:d9:18:3c:ce:12:ff:bc:
85:69:e2:03:01:ba:62:21:c5:45:77:13:c0:b9:b9:76:ea:c3:
1f:98:17:9e:04:71:97:e7:fa:b6:be:35:9f:17:ce:8b:2c:c4:
25:20:56:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:04 2026 by rpki-client