Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
File: lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft (raw, json)
Hash identifier: J9DSwobV3eXqp1aScN24pvOPpKVvmRGrgx7KUs3UxEw=
Subject key identifier: F0:D8:E7:0D:D5:7A:B0:E0:72:E9:4D:F8:A0:50:D6:A7:13:1F:81:92
Authority key identifier: 96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0
Certificate issuer: /CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0
Certificate serial: 019D29979BA466C481039FEE7E8BAC7A7D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
Manifest number: 0475
Signing time: Thu 26 Mar 2026 10:01:34 +0000
Manifest this update: Thu 26 Mar 2026 10:01:34 +0000
Manifest next update: Fri 27 Mar 2026 10:01:34 +0000
Files and hashes: 1: 1n7UaGQqcjlKc-RwheHn58VAL2g.roa (hash: LsStmQogy/wtEZhVT3UaRq1oPn/P6s0GMZ58Y7YS8GQ=)
2: lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl (hash: gAom3MCBvWTMsMMjk8GI4u/RZ8HA6Zs893KyQJOxlaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:9b:a4:66:c4:81:03:9f:ee:7e:8b:ac:7a:7d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0
Validity
Not Before: Mar 26 10:01:34 2026 GMT
Not After : Mar 27 10:01:34 2026 GMT
Subject: CN=f0d8e70dd57ab0e072e94df8a050d6a7131f8192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:55:21:f3:33:22:ea:44:bc:68:32:45:fd:18:
e7:2d:8a:01:08:69:80:9a:40:d6:e8:26:1c:76:7b:
76:11:64:4e:60:f7:7b:e9:b3:15:ea:a9:f7:02:da:
ed:34:37:92:93:26:34:c5:df:f7:bb:62:f7:ec:97:
5c:37:1d:f1:f1:c9:1f:89:f2:9e:30:a2:ec:4e:b2:
e5:30:07:5b:5d:69:47:5a:ae:48:58:41:31:c7:d4:
76:3c:70:fb:1f:c9:99:70:69:ed:33:02:16:ea:73:
09:de:b7:e6:6c:77:a0:12:2a:e6:d0:23:16:fe:00:
bb:6b:41:42:c4:bd:52:d4:3d:72:32:bc:24:ba:7f:
8a:e0:62:00:74:df:40:8d:34:61:5e:ea:42:a4:50:
7a:e9:b3:06:12:34:f9:17:2d:ee:22:a9:00:cd:a8:
57:af:23:e2:b5:59:b0:66:e8:a9:4a:1d:af:16:cc:
e4:bf:2a:45:09:41:8e:16:f7:ba:91:93:80:68:cd:
d2:47:14:3f:0d:a7:02:fc:33:00:f4:f6:80:09:75:
86:b4:4d:83:69:07:89:31:9a:06:48:cf:4a:4d:d5:
33:0e:55:44:57:b9:bf:31:27:9d:37:3b:25:56:da:
dc:b2:63:b7:3a:2e:7f:6f:91:2a:59:04:fb:47:90:
26:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D8:E7:0D:D5:7A:B0:E0:72:E9:4D:F8:A0:50:D6:A7:13:1F:81:92
X509v3 Authority Key Identifier:
keyid:96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7c:5e:ab:7c:0b:52:4e:78:39:ad:58:7b:ce:07:91:42:c9:
75:3a:3e:d0:24:8c:57:8a:eb:92:92:cf:0c:72:81:6f:6c:cf:
8b:16:79:18:2f:c3:09:2f:51:97:aa:3e:61:58:50:87:d1:41:
75:fc:c1:70:33:88:9c:5a:c6:44:86:f5:03:bb:78:70:4a:91:
bd:c0:16:60:c3:33:85:79:fd:c9:f3:81:86:b0:6c:5b:79:a1:
0a:2d:77:3b:8a:0a:a8:b8:09:ef:ea:d1:fe:90:09:c3:9b:69:
fa:d2:c2:21:84:dd:10:14:dc:49:d7:b9:7e:61:75:b6:3e:51:
65:8c:08:24:82:10:4f:8e:50:39:4d:52:8d:6d:67:be:c6:51:
27:b8:da:ec:74:63:54:a6:d3:c8:b5:14:1f:0c:28:e4:46:f6:
07:ef:16:08:a7:2c:bc:b3:74:41:3f:b1:dd:df:f8:bc:7d:8f:
40:11:99:14:b9:bb:35:a5:55:ad:13:c9:62:4d:7b:7c:f7:56:
e8:59:28:d8:07:53:82:7f:42:e8:ea:88:1f:7d:77:30:77:c9:
4d:01:9d:3c:0a:b4:d0:80:5f:40:c8:ff:23:65:0e:e2:48:c4:
00:27:7c:d9:bc:24:fa:f4:85:ce:f3:00:e3:4e:7b:34:45:f7:
20:ac:e4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:20:29 2026 by rpki-client