Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: i4el8D/iyd+BSsV/fpEw1aJ6mA2KLfdn3ca7lUbQjD4=
Subject key identifier: 63:FD:7A:9F:B4:CD:B8:6A:CF:5D:F0:52:14:32:72:AD:53:57:7A:F8
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 019E1D908082F2E83386A308E0E587E4A46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 0ECE
Signing time: Tue 12 May 2026 19:01:09 +0000
Manifest this update: Tue 12 May 2026 19:01:09 +0000
Manifest next update: Wed 13 May 2026 19:01:09 +0000
Files and hashes: 1: 5qdQSXMecDihyNRRqtb0g1GYQQM.roa (hash: TGfWFcxitE8Z9AQAzw+iDeKkGzeTKjsma5tXWrC3vTk=)
2: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: LZVPb7bQdZD4DlrkVPn/VnMOL+h8iOSqKK6Gf4DfRpA=)
3: RJ4Jr5ARvg8uzwT__ax2jQCYRoU.roa (hash: iIWthZznSIIagTpHDFsUxljMcVGImDYRq7Y0D9Bst2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:80:82:f2:e8:33:86:a3:08:e0:e5:87:e4:a4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: May 12 19:01:09 2026 GMT
Not After : May 13 19:01:09 2026 GMT
Subject: CN=63fd7a9fb4cdb86acf5df052143272ad53577af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9f:73:02:43:07:5f:e8:f8:0d:5f:93:25:03:
a9:49:b2:1d:a3:80:0f:8a:53:b4:b3:e1:de:0e:f8:
a5:0f:2f:7e:8e:0c:22:78:ca:4d:19:01:34:78:79:
94:ae:8e:7e:20:83:18:1d:b8:2b:35:fd:58:c7:88:
7d:34:82:a5:04:f3:76:39:bd:4d:81:b4:74:21:a3:
6e:c8:7e:e7:38:22:94:d8:4a:05:b1:9e:4b:bf:bf:
ef:47:10:e2:66:f6:b6:96:cb:e6:f4:e7:6d:2c:fd:
fa:ff:4c:7d:53:ce:78:2e:77:be:30:72:92:e9:de:
38:b2:7f:f4:de:da:7d:d4:d4:fe:40:32:0c:6d:09:
78:00:3c:79:0a:61:36:80:1f:23:6d:b5:30:ea:17:
98:69:c7:46:51:85:93:26:60:d8:fc:cc:46:89:b0:
fd:c8:a3:ce:02:c3:f0:0b:ed:35:a7:9d:79:01:70:
f0:e7:41:a4:ed:5f:6c:3e:2d:19:59:1c:fd:66:55:
6f:69:9e:0f:3d:3c:d0:e1:b5:70:fb:d7:22:99:36:
69:2e:65:f7:33:9a:64:7f:00:f3:0b:62:d3:1b:a9:
c2:ea:e6:67:69:9c:c4:2f:c0:04:44:65:49:98:ec:
9f:62:b0:8c:bd:0b:97:3d:a5:88:ea:b7:e8:2c:bf:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FD:7A:9F:B4:CD:B8:6A:CF:5D:F0:52:14:32:72:AD:53:57:7A:F8
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9b:f4:94:dd:fc:e1:a8:e2:0d:0b:70:63:26:32:cb:cc:52:
03:dc:c9:54:74:96:9b:d8:48:aa:a5:ab:ee:b8:d6:4a:09:70:
33:75:c6:b4:a8:3a:f5:d9:29:e1:a8:da:fc:4b:0f:94:b6:c3:
6a:3b:d0:ea:0c:e5:ad:6f:44:fc:36:6e:53:e6:89:0f:87:85:
fb:10:fc:dc:65:3f:86:dd:40:9b:8e:a7:d4:74:fb:52:93:ad:
b0:b9:17:79:b6:22:b6:e5:e1:cd:7b:e8:0a:23:ef:84:19:dd:
17:c2:bd:b3:02:97:da:58:36:48:38:6a:38:f1:74:6f:51:2d:
43:07:e7:9e:ab:8e:46:b2:a1:04:a5:11:c7:2e:6b:47:fd:62:
13:51:a1:78:27:8a:a7:a8:b3:35:eb:5d:f1:cf:8b:f1:e2:66:
f2:f4:3d:27:85:e1:8d:34:ab:e2:fc:da:e4:d0:5b:56:0d:d9:
a8:01:da:8b:70:ab:a6:8d:ac:12:3f:4a:0c:c0:c8:d3:7a:a4:
c2:4b:16:e3:e3:68:4e:d4:2c:3d:b3:b1:3f:45:66:de:f2:86:
6b:f3:45:1e:fa:b8:40:6f:ec:24:09:05:21:52:fc:01:2b:3b:
ae:ff:e0:76:e5:04:20:7a:2a:00:94:fa:a9:bc:58:a2:8d:2d:
32:43:c1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:08:30 2026 by rpki-client