Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
File: LMV0mVRsTv1zD_hx3zvRr787nwE.mft (raw, json)
Hash identifier: pSNz4K15+RyUtazFHIv5S0J4RN7j+aQz+CcS3Yf4rno=
Subject key identifier: 73:DB:1C:5D:0A:CB:0E:42:3C:08:41:0E:94:5F:65:2E:09:9D:21:23
Authority key identifier: 2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01
Certificate issuer: /CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
Certificate serial: 01A0E7E3B51EBE32D8CB26C6F164F3274B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
Manifest number: 122A
Signing time: Mon 28 Sep 2026 12:00:54 +0000
Manifest this update: Mon 28 Sep 2026 12:00:54 +0000
Manifest next update: Tue 29 Sep 2026 12:00:54 +0000
Files and hashes: 1: 3WItZ4mhefefk4OFRU301cRZ_vQ.roa (hash: dtdvArxYE5qEj5Mf66z8Nr0a//V3Hh8mgQw7uOvKT6M=)
2: LMV0mVRsTv1zD_hx3zvRr787nwE.crl (hash: N8Rl1FyeXTKYdndks75jylhlKgOkbgbuc7r5iWZ/vdo=)
3: Mv-NoCa1EelRUFT0hvPhyRkrLpw.roa (hash: wlZIyNLsdHzsIA3vozVQVDyqbFP1tAuUqu4nL50r+XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e3:b5:1e:be:32:d8:cb:26:c6:f1:64:f3:27:4b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
Validity
Not Before: Sep 28 12:00:54 2026 GMT
Not After : Sep 29 12:00:54 2026 GMT
Subject: CN=73db1c5d0acb0e423c08410e945f652e099d2123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:e0:45:ec:8a:56:29:c3:46:a5:a6:e4:f7:
14:ea:bf:fc:0d:be:f7:d6:28:11:28:62:3a:51:1a:
83:08:50:be:da:6c:79:b4:f0:2a:4c:2d:1c:be:1c:
77:2c:43:86:f4:24:86:5c:57:10:7c:f8:6b:96:b4:
61:e0:3b:6f:2d:e2:b5:ce:73:78:6a:56:6e:b1:9e:
0a:6c:47:68:fc:62:f8:7f:0b:d5:eb:51:33:46:ae:
cf:8f:6b:3d:9a:7a:04:91:fe:51:84:3f:bd:ed:92:
f6:2c:c4:89:a2:08:2b:88:73:c0:c0:96:a2:82:d8:
c9:3a:12:80:e8:f4:58:6d:61:aa:69:d6:01:3c:27:
63:89:e2:d7:b5:12:97:8e:c5:c0:ec:32:6b:03:0f:
bc:85:63:d0:aa:27:5d:1c:b7:08:eb:b7:b7:b4:ee:
37:65:fa:67:da:49:bb:0f:43:1e:24:6a:12:26:0a:
96:e4:f5:b1:4a:eb:45:fd:49:05:c5:7f:66:b6:77:
69:15:8b:ef:91:98:f6:15:63:75:40:90:8f:80:a5:
52:33:75:a1:2e:06:ae:29:11:39:b2:2f:cc:13:d1:
9a:d2:0b:c4:b4:bd:60:46:0c:28:78:fc:f0:f9:99:
66:7b:db:64:bc:aa:31:e8:26:14:41:ce:e4:c6:11:
6c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DB:1C:5D:0A:CB:0E:42:3C:08:41:0E:94:5F:65:2E:09:9D:21:23
X509v3 Authority Key Identifier:
keyid:2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:49:77:ed:b9:ab:66:f1:bb:56:ad:c4:fa:6f:f6:bc:de:99:
a2:7d:21:30:17:4a:2f:0b:ae:11:fd:56:61:bc:5c:c0:fb:ca:
5e:97:09:b6:db:11:57:be:93:07:47:1d:50:ff:ad:26:bf:eb:
7f:0e:1c:ec:7a:04:28:12:83:53:54:3b:47:9e:0a:5c:90:9c:
7a:d7:d9:88:ee:7f:92:b2:9f:7a:ec:f0:e0:2b:5d:2f:87:98:
40:47:7a:d5:d6:a2:c9:40:ca:d5:3c:ce:3a:51:0b:d3:c9:11:
98:1b:9b:79:d2:2e:28:d0:23:82:7c:d6:a5:9c:46:d0:ef:1d:
db:8f:46:86:7e:3c:f1:48:d9:06:a0:4d:d9:ed:56:20:72:56:
d6:60:e4:f7:61:55:e5:3d:93:dc:23:6f:27:9c:cd:9c:c1:2e:
02:2d:5c:27:61:18:53:95:b8:f2:46:07:ed:92:cf:d9:d1:70:
30:2d:aa:d9:d8:8c:5c:fa:c5:93:25:a7:e6:08:68:5f:78:ff:
de:cc:5e:24:b9:ec:1a:42:e5:26:f6:94:d2:6b:f4:a7:83:3d:
0d:49:64:9f:9c:28:89:0c:6b:87:3f:b2:58:34:ad:12:45:a6:
a1:30:95:c9:ee:39:c3:cf:68:63:5d:ee:23:56:c1:aa:da:4a:
d2:a8:5d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:29:52 2026 by rpki-client