Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
File: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft (raw, json)
Hash identifier: 4CHsD5wn/rss7H7h/1ST2KFp9DzRxbTA+Wil1s6KZfI=
Subject key identifier: DE:F7:48:FF:0A:7C:75:FE:4E:78:82:F1:C0:B8:90:96:0D:00:38:D2
Authority key identifier: 96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
Certificate issuer: /CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Certificate serial: 019D2704990A6DAFA4B55F1EC0C79549C063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
Manifest number: 112B
Signing time: Wed 25 Mar 2026 22:01:45 +0000
Manifest this update: Wed 25 Mar 2026 22:01:45 +0000
Manifest next update: Thu 26 Mar 2026 22:01:45 +0000
Files and hashes: 1: gx2uZ0XXPbFcCe7ejPHYDh3Ihyc.roa (hash: Wls9AluwC7dhLmo8YQ5NoiMkXpPPZRLUetVc4LFXk9U=)
2: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl (hash: mywmmokvVBQ2B6ofi6XTJmzeQgbCq3fAL3rUJaUrH5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:99:0a:6d:af:a4:b5:5f:1e:c0:c7:95:49:c0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Validity
Not Before: Mar 25 22:01:45 2026 GMT
Not After : Mar 26 22:01:45 2026 GMT
Subject: CN=def748ff0a7c75fe4e7882f1c0b890960d0038d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1a:2d:8a:d8:1c:69:eb:6d:f6:0d:65:11:29:
11:ee:40:0e:93:0c:8e:b3:c8:87:60:64:92:c8:cc:
e4:3d:a8:90:32:f0:b0:03:69:3b:54:9e:8d:49:de:
c8:f4:0c:58:19:7c:bb:9a:39:6a:30:dd:37:4b:0f:
78:3b:d0:df:d0:40:33:ed:2c:cd:c1:57:19:13:fb:
1a:b6:21:52:b4:41:05:5b:57:65:d4:4a:10:6c:57:
5c:a2:01:9f:a0:b4:8c:19:b9:58:aa:9a:21:db:f1:
33:ae:96:3c:5f:07:6d:17:87:ec:9a:b7:bb:7a:dc:
23:ac:c6:74:ae:aa:48:d0:1d:0d:9f:ad:8c:59:bd:
ce:1a:4e:c2:f7:d9:3c:26:aa:0c:de:15:66:9b:35:
04:18:50:7a:a3:60:c5:84:29:70:31:c1:ce:c4:00:
68:5c:7d:e1:89:52:e7:14:2d:43:13:98:60:61:4f:
5b:1c:c4:a0:6e:2e:0c:3f:51:73:49:3f:54:1f:97:
06:11:89:6b:8c:30:e0:2d:f2:7b:c2:78:bb:8f:29:
ba:a9:3f:7c:2f:94:5f:48:5a:fa:fe:f2:cb:1f:41:
55:d3:04:f9:20:50:aa:60:9a:bd:95:9b:ed:1f:75:
91:9f:5a:19:ff:ae:57:82:a5:51:48:ab:3a:5f:ca:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F7:48:FF:0A:7C:75:FE:4E:78:82:F1:C0:B8:90:96:0D:00:38:D2
X509v3 Authority Key Identifier:
keyid:96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:57:c4:ef:ee:3a:71:4e:d7:a5:3b:b5:84:d5:dc:b5:f9:db:
c0:40:2d:d6:2b:50:68:2b:1f:bb:be:db:d4:2d:e7:6e:f3:d2:
b5:94:bb:85:35:fe:a2:29:bb:ee:a6:9b:b9:cc:b1:d0:af:97:
55:95:6a:b8:0b:7c:9c:79:97:35:93:21:11:ab:8b:a6:98:b6:
dc:66:93:5d:eb:6e:6e:29:f7:fd:cb:61:84:a2:2b:14:9e:5d:
5e:d9:7c:64:c7:23:d2:1f:b0:3a:54:d5:bf:a7:d4:aa:28:98:
66:22:28:1a:08:dd:b9:d1:a2:5c:55:e4:e5:5e:4e:75:0e:0d:
ad:8a:5d:38:5c:ca:f1:6c:a6:f7:bd:63:f5:35:15:4a:8c:87:
23:1a:5c:eb:16:6a:9e:f3:5c:f6:b9:e7:53:ad:b8:01:03:45:
38:fe:8c:69:60:78:49:e1:19:a8:94:c1:18:56:e9:f9:ef:24:
98:bc:8a:a2:d6:b1:7d:0d:04:88:a2:74:c8:69:ed:e0:8c:a3:
37:b7:eb:22:bf:d2:7f:02:56:cf:a6:10:0a:4a:4c:c1:55:d6:
90:d5:16:49:74:4e:28:ec:03:9e:ac:19:60:01:d4:60:9b:96:
be:5c:2b:e8:54:82:d3:09:b9:5e:5b:ea:c2:e6:93:51:70:6f:
1c:a7:51:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBJkKba+ktV8ewMeVScBjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NjVjODExMGQwZGQ4NmE3ZWJiMDkzOGFhMzJlMDlkMWRi
MTIyZjYwHhcNMjYwMzI1MjIwMTQ1WhcNMjYwMzI2MjIwMTQ1WjAzMTEwLwYDVQQD
EyhkZWY3NDhmZjBhN2M3NWZlNGU3ODgyZjFjMGI4OTA5NjBkMDAzOGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Botitgcaett9g1lESkR7kAOkwyO
s8iHYGSSyMzkPaiQMvCwA2k7VJ6NSd7I9AxYGXy7mjlqMN03Sw94O9Df0EAz7SzN
wVcZE/satiFStEEFW1dl1EoQbFdcogGfoLSMGblYqpoh2/EzrpY8XwdtF4fsmre7
etwjrMZ0rqpI0B0Nn62MWb3OGk7C99k8JqoM3hVmmzUEGFB6o2DFhClwMcHOxABo
XH3hiVLnFC1DE5hgYU9bHMSgbi4MP1FzST9UH5cGEYlrjDDgLfJ7wni7jym6qT98
L5RfSFr6/vLLH0FV0wT5IFCqYJq9lZvtH3WRn1oZ/65XgqVRSKs6X8pEFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN73SP8KfHX+TniC8cC4kJYNADjSMB8GA1UdIwQY
MBaAFJZlyBENDdhqfrsJOKoy4J0dsSL2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG1YSUVRME4yR3AtdXdrNHFqTGduUjJ4SXZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mYTgxZjQtNjYwMC00MDc5LTkzYzUt
NDg5NzI2MWJhNDZiLzEvbG1YSUVRME4yR3AtdXdrNHFqTGduUjJ4SXZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mYTgxZjQtNjYwMC00MDc5LTkzYzUtNDg5NzI2MWJhNDZi
LzEvbG1YSUVRME4yR3AtdXdrNHFqTGduUjJ4SXZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVfE7+46
cU7XpTu1hNXctfnbwEAt1itQaCsfu77b1C3nbvPStZS7hTX+oim77qabucyx0K+X
VZVquAt8nHmXNZMhEauLppi23GaTXetubin3/cthhKIrFJ5dXtl8ZMcj0h+wOlTV
v6fUqiiYZiIoGgjdudGiXFXk5V5OdQ4NrYpdOFzK8Wym971j9TUVSoyHIxpc6xZq
nvNc9rnnU624AQNFOP6MaWB4SeEZqJTBGFbp+e8kmLyKotaxfQ0EiKJ0yGnt4Iyj
N7frIr/SfwJWz6YQCkpMwVXWkNUWSXROKOwDnqwZYAHUYJuWvlwr6FSC0wm5Xlvq
wuaTUXBvHKdRGw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:07 2026 by rpki-client