Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
File: lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft (raw, json)
Hash identifier: rCcaE/uODm6erT3dsX/evmxWYMGXw39kJvUTqqwDhco=
Subject key identifier: 3C:28:15:90:BF:E7:99:1B:A5:72:66:2C:1C:A0:00:65:06:A3:4E:D5
Authority key identifier: 96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0
Certificate issuer: /CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0
Certificate serial: 019F9391DB4F6204595E5A4E013E0E68267D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
Manifest number: 05B5
Signing time: Fri 24 Jul 2026 10:00:37 +0000
Manifest this update: Fri 24 Jul 2026 10:00:37 +0000
Manifest next update: Sat 25 Jul 2026 10:00:37 +0000
Files and hashes: 1: 1n7UaGQqcjlKc-RwheHn58VAL2g.roa (hash: LsStmQogy/wtEZhVT3UaRq1oPn/P6s0GMZ58Y7YS8GQ=)
2: lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl (hash: ATvp5AKx6ZXz46/JiarkRWD0SKanSMJwM2+bROVHa3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:db:4f:62:04:59:5e:5a:4e:01:3e:0e:68:26:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0
Validity
Not Before: Jul 24 10:00:37 2026 GMT
Not After : Jul 25 10:00:37 2026 GMT
Subject: CN=3c281590bfe7991ba572662c1ca0006506a34ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:4d:58:5b:bc:07:7c:c6:e7:ef:1f:b1:f1:
6c:7e:e1:1c:bc:24:1f:62:aa:19:50:56:ce:26:c3:
aa:df:76:6f:d9:25:ce:5b:a5:28:b5:19:29:f0:61:
db:0b:94:ad:59:35:0c:07:11:d2:c9:bb:c9:6f:af:
6c:81:1e:24:6e:f1:93:41:6e:98:0e:1d:1a:be:42:
78:5d:87:89:37:f5:98:97:b3:63:79:7d:3c:3e:63:
8d:71:14:a0:33:82:f0:1b:06:a4:4d:19:33:b6:f3:
07:f5:b3:d8:88:f4:ed:fb:d4:cb:ff:1e:60:e7:fc:
12:f7:87:26:3c:bd:28:dd:61:20:e7:24:72:7d:1a:
52:be:24:c9:06:34:2e:0b:15:15:7e:8a:65:55:fc:
d3:f1:7d:a2:2a:8f:9a:03:26:dd:01:88:5d:68:0a:
79:de:f2:70:ac:da:c4:58:f6:14:5c:48:20:96:e2:
bd:9c:0a:7f:ac:5a:7e:c8:ac:cb:f9:9a:36:b8:ef:
8e:55:c8:c5:e6:4b:16:d8:9b:d4:9b:5f:d3:29:4c:
83:2f:1f:8c:0b:4e:47:b7:be:4f:aa:b9:17:1c:9c:
9f:f1:50:bc:75:f2:e5:4b:df:b8:93:dc:58:ab:18:
ab:8a:fc:da:5b:6a:05:ef:2a:d8:b3:13:0c:b2:d8:
db:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:28:15:90:BF:E7:99:1B:A5:72:66:2C:1C:A0:00:65:06:A3:4E:D5
X509v3 Authority Key Identifier:
keyid:96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a3:7d:13:89:bd:1b:0a:5e:92:95:a3:86:36:ad:e7:4f:8e:
dc:15:76:0c:e7:32:17:b2:2f:5d:5e:3f:0a:79:8c:49:2c:72:
cd:04:6a:b6:0f:0b:e1:fe:44:b3:9c:c9:96:71:20:90:41:7f:
19:eb:69:a8:9d:38:ea:a4:a6:80:c4:8f:9b:8b:db:66:f5:10:
ea:92:29:c3:97:ea:57:c7:94:f1:ca:bb:4a:86:73:9e:87:a4:
9f:c3:6a:2f:40:2a:6b:26:e6:b2:46:d3:6f:a2:92:47:63:21:
48:37:a2:ba:77:66:4d:35:76:5c:d7:57:4e:32:07:52:cc:75:
08:3f:b0:63:53:91:3b:d7:91:40:77:43:fc:18:df:70:ab:9a:
40:25:e4:3a:7e:79:5b:b7:f8:01:18:27:63:1c:23:81:e3:ae:
7a:70:e4:6d:f5:b6:a5:87:6d:07:ff:5b:67:b3:f7:a8:94:b3:
27:c0:7a:ae:ec:3d:30:5d:00:de:7e:06:22:51:b1:0f:d7:af:
ce:aa:2a:bf:7e:d1:76:c2:15:7c:54:60:19:63:b2:5e:1c:cb:
c4:38:06:63:48:6d:c3:5a:60:5b:b3:66:59:bb:22:9e:7d:5a:
94:1f:c6:b7:c0:29:4a:25:10:29:4c:8b:0b:fd:1d:ef:48:91:
d8:3b:30:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:04:01 2026 by rpki-client