Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: ScSMF5WS6KT5369yWzuwJRi/TyG7X4TBCak88dYYvCQ=
Subject key identifier: 7E:BB:48:5E:85:65:A7:50:E0:1E:8B:4E:C0:B6:F8:23:C6:01:6E:6D
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 019E1DC70A2069814D9903B960FAEC0D2EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 18DA
Signing time: Tue 12 May 2026 20:00:43 +0000
Manifest this update: Tue 12 May 2026 20:00:43 +0000
Manifest next update: Wed 13 May 2026 20:00:43 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: VrassEdXReAkQ5deARq4EsXngZh3HixhlObpMbxaHaE=)
2: tDm7AUYKyf97YOJJKUiWr2Dgcg4.roa (hash: /UBoh/wJ/dh6DjZ66cH1C2Cr/EgD7L8aiIxXDUdGpis=)
3: yffg1-eaO6Srh9Uv7AmqsK2NudM.roa (hash: kUfLwWzqj96wDEHYb/yvv+ZIOEIAJHX7rxwFZQvwJsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:0a:20:69:81:4d:99:03:b9:60:fa:ec:0d:2e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: May 12 20:00:43 2026 GMT
Not After : May 13 20:00:43 2026 GMT
Subject: CN=7ebb485e8565a750e01e8b4ec0b6f823c6016e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:7b:4c:fc:27:9b:75:f9:6f:bc:25:56:e3:
8d:98:b4:f9:12:c4:4b:35:a2:63:b7:c5:4c:b5:44:
9a:54:cb:de:c7:39:a2:af:a1:27:25:7e:20:a3:90:
26:74:70:95:fd:ec:a3:72:f4:ed:4f:f6:e9:ac:9f:
2b:60:16:86:46:95:5b:16:af:86:92:08:49:6b:d1:
04:61:e1:f3:d2:2b:a7:b9:fc:c1:39:f1:d4:95:8c:
83:7e:0c:54:dd:14:5d:f7:e4:48:7d:c3:0b:91:b7:
53:3a:22:39:17:23:af:10:d9:b2:f8:9b:88:0d:d2:
21:08:78:d1:e4:d9:da:83:d8:e7:80:9c:1d:3a:34:
d3:1a:c0:bd:c4:b8:e7:4f:34:18:33:14:85:95:e1:
6e:3c:0f:46:29:a2:3f:4d:70:49:24:73:4c:d0:63:
7f:9e:33:49:02:6c:86:85:28:e0:41:ad:37:eb:1e:
69:3b:51:9e:77:50:a6:1c:3f:e2:d3:1e:33:f0:84:
73:30:00:7c:42:5a:b8:da:0b:00:9a:9a:6e:0c:67:
36:53:11:3b:05:cd:7b:3b:f8:d6:12:e5:23:d3:2e:
a1:c8:0b:fc:86:fc:01:35:f4:42:df:29:11:d9:5e:
d3:f9:12:39:2e:82:fc:fe:8b:c4:8f:3c:4f:d3:7b:
76:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BB:48:5E:85:65:A7:50:E0:1E:8B:4E:C0:B6:F8:23:C6:01:6E:6D
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:47:ce:ca:62:67:8a:e4:99:da:b0:bf:7a:f9:1d:ed:e1:37:
15:3a:d4:1f:47:05:05:bd:1f:30:92:f8:13:aa:4a:ae:91:27:
90:28:65:81:fe:17:8f:f7:40:4e:69:5e:63:19:f4:1f:a3:1f:
3b:54:4b:43:0a:18:93:55:f1:98:68:4b:6e:e7:6d:d0:d6:48:
42:a8:7e:3d:8b:09:b7:f6:59:8b:fc:fb:04:e7:f7:26:91:0f:
4d:a5:32:8b:87:b6:9b:8d:22:56:d2:7d:5a:9d:33:58:91:af:
fc:ba:31:78:f2:17:83:82:59:a3:85:04:6b:c4:03:f9:08:33:
6f:51:90:d3:bf:f0:24:41:a7:22:49:d9:56:71:2c:cf:42:f1:
1b:3e:74:73:00:7f:02:78:fc:bb:6e:0c:e9:02:6c:7a:87:2e:
b5:02:a3:58:50:1b:0b:db:38:1f:dd:62:7a:ad:f7:73:30:d9:
80:cf:b1:06:0e:1b:3a:17:6d:44:53:1e:13:93:58:8c:0c:0c:
bc:4a:5a:e5:40:7f:b1:bf:42:ba:48:3d:1c:f7:7c:e9:1a:40:
6f:25:19:79:7e:cc:64:c9:51:92:28:39:be:3c:a6:eb:57:19:
15:09:b7:eb:30:f0:fa:91:da:ff:16:ae:4e:aa:eb:b1:15:13:
b6:b4:23:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:19:30 2026 by rpki-client