Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: R0KHpDMZ/HIAfABMirFZ6g9OzunYm1Y0zjBelvLb8j8=
Subject key identifier: ED:5C:80:29:1F:9F:9E:BC:26:08:B2:09:0A:ED:C4:4B:0F:4F:6A:CE
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 01A0DC85102BE8ADE6F1560214FE5500E710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 103A
Signing time: Sat 26 Sep 2026 07:01:42 +0000
Manifest this update: Sat 26 Sep 2026 07:01:42 +0000
Manifest next update: Sun 27 Sep 2026 07:01:42 +0000
Files and hashes: 1: 5qdQSXMecDihyNRRqtb0g1GYQQM.roa (hash: TGfWFcxitE8Z9AQAzw+iDeKkGzeTKjsma5tXWrC3vTk=)
2: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: /W9CUQSk1JBrJKG6s1B4J3LXvufg74HuxDlY/lEJKu8=)
3: RJ4Jr5ARvg8uzwT__ax2jQCYRoU.roa (hash: iIWthZznSIIagTpHDFsUxljMcVGImDYRq7Y0D9Bst2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:10:2b:e8:ad:e6:f1:56:02:14:fe:55:00:e7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Sep 26 07:01:42 2026 GMT
Not After : Sep 27 07:01:42 2026 GMT
Subject: CN=ed5c80291f9f9ebc2608b2090aedc44b0f4f6ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3c:27:bf:f6:9d:83:bf:6b:d0:54:ed:01:76:
28:24:e0:f3:0c:4d:b3:34:5f:1e:99:d7:87:a2:21:
f3:94:04:fe:44:d6:7b:b6:17:04:be:16:30:40:74:
fa:a2:f7:7b:3c:08:6a:56:1a:44:78:db:5d:78:f6:
f9:4b:1e:00:c2:3d:63:9f:7b:2d:07:31:aa:02:48:
78:6b:ec:a7:9c:39:fe:40:cd:62:48:d8:6b:7b:09:
bf:65:a0:3a:62:d9:b2:cb:15:b6:5a:76:be:c5:31:
7c:05:d2:c4:7a:cf:aa:3e:22:c0:1f:a5:49:08:6d:
ab:48:6b:47:18:39:dc:cf:50:40:87:07:da:5b:89:
47:34:69:68:c4:a1:e7:65:32:b4:b4:2c:78:5b:0b:
4b:c3:ea:76:16:ed:a9:cf:93:94:a7:3a:14:33:54:
b1:b5:19:97:c3:91:06:2f:69:89:2d:d9:76:06:29:
3d:e5:76:e7:cd:a3:32:d7:7b:47:1c:2d:43:a5:16:
89:d9:7b:c1:70:77:80:db:7e:a7:91:83:d7:eb:52:
cd:ec:d5:2f:72:2b:0f:ff:1a:35:96:97:b3:a8:8d:
a0:66:b4:47:c6:ee:7f:3c:5f:88:d4:a4:7e:d8:e5:
a6:ab:72:4b:0f:36:74:ed:34:ad:6d:cc:c9:7c:d5:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5C:80:29:1F:9F:9E:BC:26:08:B2:09:0A:ED:C4:4B:0F:4F:6A:CE
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:97:11:74:e2:35:55:06:64:cb:71:7d:4f:f8:e3:e6:7c:b8:
36:45:50:a1:8b:d7:ca:25:b0:13:08:08:bc:b3:02:5a:90:29:
71:44:98:75:bb:bc:93:87:61:fe:5f:bb:40:e7:b7:b3:19:d0:
c0:09:96:33:56:df:f8:99:3b:b2:82:a9:5e:17:ac:c2:54:16:
9f:1f:07:ae:d8:15:9f:fe:fc:08:62:9d:23:b2:87:17:4c:1d:
6a:b6:43:20:b3:30:ee:fa:6d:5a:0f:3c:12:17:9a:d4:af:ee:
b2:55:f6:e1:16:e2:c1:0e:69:a5:8e:9f:37:af:68:0d:13:8c:
2d:10:bb:82:75:6a:7d:22:81:e3:97:6b:64:33:c8:7d:4b:b9:
69:46:03:eb:91:29:d6:c3:f6:1a:01:52:4a:e6:aa:b9:1d:6c:
8a:4e:67:7e:f9:65:90:8b:ec:d2:90:26:09:43:96:1f:28:78:
27:63:8c:f7:20:43:19:0d:71:1c:10:93:56:67:75:ad:5e:54:
e8:61:77:a8:72:47:e9:dc:77:c8:ac:a7:90:52:68:50:7b:31:
02:0d:54:ea:9e:6c:88:4a:ca:68:5c:b5:52:75:fc:9d:c2:a0:
52:47:98:17:3e:70:2a:29:3f:15:79:9e:12:11:72:7f:83:e2:
1d:f0:6f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:29:16 2026 by rpki-client