Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: 4/le+wJYheHkPDrQGk6eh6aHWvDl8EqgywD14c/wYcU=
Subject key identifier: 86:76:98:B0:C4:72:99:B8:A9:BA:AB:13:4E:ED:9D:E9:D1:CA:D6:39
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 019D265F970832E6E28A39F842BA141EA28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 0E4E
Signing time: Wed 25 Mar 2026 19:01:31 +0000
Manifest this update: Wed 25 Mar 2026 19:01:31 +0000
Manifest next update: Thu 26 Mar 2026 19:01:31 +0000
Files and hashes: 1: 5qdQSXMecDihyNRRqtb0g1GYQQM.roa (hash: TGfWFcxitE8Z9AQAzw+iDeKkGzeTKjsma5tXWrC3vTk=)
2: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: MR+b3Rb9ZXpM29j1DVIX8hNheLEXNSvmxIdVBwzQzlU=)
3: RJ4Jr5ARvg8uzwT__ax2jQCYRoU.roa (hash: iIWthZznSIIagTpHDFsUxljMcVGImDYRq7Y0D9Bst2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:97:08:32:e6:e2:8a:39:f8:42:ba:14:1e:a2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Mar 25 19:01:31 2026 GMT
Not After : Mar 26 19:01:31 2026 GMT
Subject: CN=867698b0c47299b8a9baab134eed9de9d1cad639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:37:1b:c9:d4:d4:b7:40:82:0e:43:8a:c4:bc:
e0:ef:e6:31:23:33:c5:f9:9f:aa:dd:af:2a:29:fa:
72:2c:76:ee:33:e8:54:59:1f:d8:4a:8b:9b:05:7f:
5b:1a:42:dd:95:0c:22:b8:24:68:1c:1d:53:8a:f1:
a4:73:08:c3:96:3b:a5:49:54:13:5e:2c:ca:0e:8b:
f9:07:90:c5:7c:88:fd:76:7f:74:23:ab:9d:36:a0:
99:da:ce:59:a2:d3:bb:0c:36:d3:cb:d8:9c:e7:de:
09:66:55:c1:d5:4d:7e:82:32:d5:72:74:10:4a:e6:
e4:ec:73:6a:e8:84:34:77:b9:8e:45:44:1f:d3:ff:
3b:bc:c1:1d:d6:70:a2:95:f9:73:7f:59:fa:48:63:
8d:35:da:af:8f:e9:fe:24:9e:a7:a8:fd:4d:8f:4d:
dc:80:db:05:2f:c5:df:a5:2e:cf:7f:08:3d:aa:eb:
77:5e:f8:18:2b:36:08:43:38:d0:64:a1:f8:b8:5c:
1f:82:4b:55:60:1a:a7:f9:8f:76:95:d3:16:4c:8b:
b3:8c:5b:e2:d9:28:98:52:6e:3f:16:c5:96:22:ac:
6e:bb:13:fb:cb:da:3e:1c:55:fb:39:15:77:7e:cf:
82:6e:cf:a0:e6:13:56:8e:a3:7d:be:af:4e:f7:9d:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:76:98:B0:C4:72:99:B8:A9:BA:AB:13:4E:ED:9D:E9:D1:CA:D6:39
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ce:77:c7:b9:69:d4:d2:85:3f:d0:e7:22:2e:ff:f5:9c:ad:
de:31:30:47:d8:bd:83:89:a8:93:6a:08:0a:74:1c:72:f6:0e:
96:16:2d:22:5f:04:fe:c5:7b:76:10:da:19:43:81:bf:b3:ad:
be:ad:55:b3:2a:d3:03:8c:60:ed:88:f2:04:0b:99:a7:f5:c1:
fc:87:e4:54:91:a9:a1:8c:04:c7:7a:f0:1b:0e:9b:e2:a9:9c:
67:58:28:63:58:a3:b8:af:fd:b1:22:35:64:78:b1:c8:ac:e0:
64:6e:1c:b1:cc:33:dd:50:32:59:14:d8:bf:df:f3:b2:8f:c5:
87:31:c8:3e:bf:c1:f5:60:37:d5:c8:03:21:3d:fc:9f:50:26:
57:89:1f:cd:7e:36:79:13:9e:06:de:61:1a:65:22:55:22:ae:
b7:6c:7b:7b:68:b7:28:98:a7:72:a2:68:18:b5:7f:36:0b:89:
16:47:39:9b:02:7b:2f:25:c1:58:09:2a:b6:68:34:8e:83:55:
49:f2:f8:13:4c:8b:9d:6f:11:78:31:9b:6b:be:a2:f4:9d:2d:
e1:0a:a4:fd:29:2e:65:7a:6f:c2:f8:3d:c2:19:ab:da:4a:50:
39:23:fe:99:57:c4:bd:33:e3:76:99:d1:97:f4:18:00:83:c8:
5b:7c:ee:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX5cIMubiijn4QroUHqKOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMDVmZmE1Y2QyOGNiZDAwZDAyNjg0NDJjNzg4OGZiMmFh
M2E1ZjgwHhcNMjYwMzI1MTkwMTMxWhcNMjYwMzI2MTkwMTMxWjAzMTEwLwYDVQQD
Eyg4Njc2OThiMGM0NzI5OWI4YTliYWFiMTM0ZWVkOWRlOWQxY2FkNjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTcbydTUt0CCDkOKxLzg7+YxIzPF
+Z+q3a8qKfpyLHbuM+hUWR/YSoubBX9bGkLdlQwiuCRoHB1TivGkcwjDljulSVQT
XizKDov5B5DFfIj9dn90I6udNqCZ2s5ZotO7DDbTy9ic594JZlXB1U1+gjLVcnQQ
Subk7HNq6IQ0d7mORUQf0/87vMEd1nCilflzf1n6SGONNdqvj+n+JJ6nqP1Nj03c
gNsFL8XfpS7Pfwg9qut3XvgYKzYIQzjQZKH4uFwfgktVYBqn+Y92ldMWTIuzjFvi
2SiYUm4/FsWWIqxuuxP7y9o+HFX7ORV3fs+Cbs+g5hNWjqN9vq9O953PBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZ2mLDEcpm4qbqrE07tnenRytY5MB8GA1UdIwQY
MBaAFCwF/6XNKMvQDQJoRCx4iPsqo6X4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEFYX3BjMG95OUFOQW1oRUxIaUkteXFqcGZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85MmU3NGYtMTE1OS00ZTg5LWIxNWMt
NzYzNzc5M2Y4ZjNlLzEvTEFYX3BjMG95OUFOQW1oRUxIaUkteXFqcGZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC85MmU3NGYtMTE1OS00ZTg5LWIxNWMtNzYzNzc5M2Y4ZjNl
LzEvTEFYX3BjMG95OUFOQW1oRUxIaUkteXFqcGZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAls53x7lp
1NKFP9DnIi7/9Zyt3jEwR9i9g4mok2oICnQccvYOlhYtIl8E/sV7dhDaGUOBv7Ot
vq1VsyrTA4xg7YjyBAuZp/XB/IfkVJGpoYwEx3rwGw6b4qmcZ1goY1ijuK/9sSI1
ZHixyKzgZG4cscwz3VAyWRTYv9/zso/FhzHIPr/B9WA31cgDIT38n1AmV4kfzX42
eROeBt5hGmUiVSKut2x7e2i3KJincqJoGLV/NguJFkc5mwJ7LyXBWAkqtmg0joNV
SfL4E0yLnW8ReDGba76i9J0t4Qqk/SkuZXpvwvg9whmr2kpQOSP+mVfEvTPjdpnR
l/QYAIPIW3zuMw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:51 2026 by rpki-client