Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
File: lmbCOPf_2s8VyALjILUuCYCGnOw.mft (raw, json)
Hash identifier: ElnmifQmHesc0h/Rdz2QZ+n6bKkfD2F5A68eAfK1GQQ=
Subject key identifier: B4:8F:15:60:C1:9D:9C:2D:67:03:4B:DC:05:BA:CB:F3:F2:F5:13:B5
Authority key identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
Certificate issuer: /CN=9666c238f7ffdacf15c802e320b52e0980869cec
Certificate serial: 019D2B4E41319ACB0260537FB6259B96FCBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
Manifest number: 11C7
Signing time: Thu 26 Mar 2026 18:00:41 +0000
Manifest this update: Thu 26 Mar 2026 18:00:41 +0000
Manifest next update: Fri 27 Mar 2026 18:00:41 +0000
Files and hashes: 1: lmbCOPf_2s8VyALjILUuCYCGnOw.crl (hash: cslbO19zn762e/KMEAqrXed1EIyAazWABLE8AQ7+lHM=)
2: yStu7fUJ4d3XFcfOQg22LsTiouA.roa (hash: ctxQ3m3dI3y/AfnIPbS2bBuBtxSFTcTZOSoaflEqyZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:41:31:9a:cb:02:60:53:7f:b6:25:9b:96:fc:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9666c238f7ffdacf15c802e320b52e0980869cec
Validity
Not Before: Mar 26 18:00:41 2026 GMT
Not After : Mar 27 18:00:41 2026 GMT
Subject: CN=b48f1560c19d9c2d67034bdc05bacbf3f2f513b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:c7:8e:f0:7a:7b:aa:18:f7:f5:8d:e7:42:
f9:92:6a:2c:42:06:07:0b:f3:1c:2a:5d:f5:96:37:
62:ea:f2:61:31:ab:8f:28:8d:38:23:56:f3:f4:11:
55:cf:88:26:23:9e:4a:e8:fb:23:0a:96:2a:1d:a2:
44:72:2c:82:a7:82:7a:f6:f6:d3:e1:85:5b:da:38:
c9:d2:48:c5:19:aa:6c:37:89:e9:f2:b5:90:fa:a9:
12:02:c7:1e:ad:a4:3e:f1:8b:da:03:02:b1:8b:1b:
3a:46:29:56:82:2b:38:6f:94:2f:e6:b7:b7:32:dc:
41:2e:b3:64:9d:c4:d3:bd:66:a0:e2:4b:5a:d9:4a:
c3:6e:26:4e:e3:06:b6:6f:fc:99:30:d9:cc:6e:31:
0b:8c:7c:31:44:3c:e6:4f:f4:7f:89:a5:61:cb:c1:
9f:4b:2f:ac:64:4d:8e:2d:a9:6c:75:ad:5a:c6:d8:
a8:9a:36:66:03:f7:17:0d:fb:a9:8f:8b:19:12:39:
e6:26:ce:8d:04:d9:4e:c9:03:70:0d:d4:df:93:0d:
99:79:61:85:cc:27:76:ac:bb:ba:df:98:30:2d:44:
36:0d:0a:8a:b6:da:7f:e4:6e:51:39:fb:ab:41:4d:
3d:3f:e3:06:68:06:fd:fb:50:f4:da:2e:54:50:d0:
7c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8F:15:60:C1:9D:9C:2D:67:03:4B:DC:05:BA:CB:F3:F2:F5:13:B5
X509v3 Authority Key Identifier:
keyid:96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:40:be:c8:90:bb:32:83:62:c0:2f:a0:43:47:a8:5f:cd:a7:
b2:8d:60:59:88:92:6a:ab:04:f2:71:ef:2c:36:63:a3:3d:3c:
b3:f4:50:b5:fd:fc:60:25:9e:bd:48:51:72:c5:d6:ee:02:d1:
29:b9:8d:67:18:1f:fc:e0:8b:40:40:40:c6:14:19:87:03:c2:
ee:36:fa:95:98:02:eb:37:28:e9:39:d5:a9:4e:7c:06:3a:7b:
5b:33:41:b8:7b:e9:78:04:92:5e:90:b2:ac:a8:21:36:ea:e8:
c7:f7:d7:a7:0e:bf:d4:5f:5c:25:f0:23:44:38:cd:42:a1:26:
08:41:07:3c:b6:6b:a2:aa:5e:1c:b7:bf:4a:8d:3d:b8:65:50:
1c:47:21:7e:39:41:ea:a5:25:6f:80:e5:1f:64:46:d6:c3:32:
a5:02:aa:a9:df:a8:f5:a8:0f:d2:36:e5:bf:60:94:35:bf:35:
e8:ad:ca:27:d9:4f:a1:45:1b:bf:05:90:d6:2d:6f:b9:f0:fb:
9c:48:6d:65:a8:32:f9:7b:73:c6:e5:ec:86:77:c4:36:30:6b:
ca:a5:a1:3a:c0:d8:c3:26:31:15:27:f5:1a:c2:f1:3c:87:b3:
b3:29:c9:fb:2a:2b:f3:56:1a:0e:d2:9c:f2:b8:a5:94:ec:27:
a4:bd:6c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:04:24 2026 by rpki-client