Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: Q85NxI96rkhGC62d+UJNX+4Ly7a4Rb9EPhnzB4RKO9Q=
Subject key identifier: 29:D3:DB:64:98:39:7B:5F:93:63:D2:EA:D4:F6:0E:E4:AB:1B:14:0D
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 019F905A71B421859BCEDC7BB634BAA99271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 0F8E
Signing time: Thu 23 Jul 2026 19:01:14 +0000
Manifest this update: Thu 23 Jul 2026 19:01:14 +0000
Manifest next update: Fri 24 Jul 2026 19:01:14 +0000
Files and hashes: 1: 5qdQSXMecDihyNRRqtb0g1GYQQM.roa (hash: TGfWFcxitE8Z9AQAzw+iDeKkGzeTKjsma5tXWrC3vTk=)
2: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: VJHhY7YbkgkE/tHuigWTHhzY9CwgC/3kYN42A2hQM1Q=)
3: RJ4Jr5ARvg8uzwT__ax2jQCYRoU.roa (hash: iIWthZznSIIagTpHDFsUxljMcVGImDYRq7Y0D9Bst2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:71:b4:21:85:9b:ce:dc:7b:b6:34:ba:a9:92:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Jul 23 19:01:14 2026 GMT
Not After : Jul 24 19:01:14 2026 GMT
Subject: CN=29d3db6498397b5f9363d2ead4f60ee4ab1b140d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:ae:68:62:68:ec:94:44:2d:8d:3a:af:87:
e6:6f:24:95:9c:17:74:1b:f9:43:de:49:aa:e6:75:
70:f7:fb:a6:fb:37:a5:e1:f5:19:a8:47:13:b9:f3:
11:46:11:71:2d:f7:52:9a:94:63:e7:e4:0a:be:2a:
37:3a:4f:22:b7:4c:e1:06:20:c0:4a:bd:73:f9:7a:
e0:20:ba:23:15:e1:9e:4a:80:95:a9:b6:41:a4:cb:
5f:65:fc:f0:64:ea:f8:7e:e3:d5:2f:94:c5:30:bc:
c1:f7:a0:47:77:4d:52:12:f9:ae:37:d2:e7:2b:be:
0c:f3:96:2a:f9:df:a8:18:5d:50:37:7e:99:8b:fb:
dc:88:1d:65:40:53:26:59:f4:36:e0:13:46:af:6a:
1d:54:b5:62:2d:bd:f3:d7:38:a3:40:08:b1:6a:21:
de:ab:d4:7b:61:fe:5f:e2:ca:88:42:95:d1:07:5f:
d6:d9:1c:03:67:82:df:03:a6:b1:39:80:25:86:95:
b9:3e:a1:67:8b:f6:50:ca:85:82:01:a7:d7:47:b2:
aa:95:0b:46:53:17:bf:ab:d0:10:f1:48:84:9b:8c:
97:2c:6e:c8:1b:58:f7:73:9f:c8:8c:01:80:8d:f3:
cd:aa:68:62:13:c4:3e:6a:ba:9b:01:9b:bd:2b:e5:
b7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D3:DB:64:98:39:7B:5F:93:63:D2:EA:D4:F6:0E:E4:AB:1B:14:0D
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c0:d9:51:51:33:85:dc:f3:68:f2:6c:e5:1f:c5:8d:b3:82:
da:08:7c:59:cb:d8:1b:47:65:aa:d3:d6:8d:62:bd:81:12:ff:
f7:2e:53:ad:a2:d0:10:ab:99:fa:82:30:88:0a:d6:75:88:cb:
5a:cc:ca:7e:32:c7:33:1f:e6:9c:ca:e2:58:6e:76:58:4e:a4:
72:e7:0b:22:ce:e8:f8:40:8f:ce:bb:c5:09:3c:fb:a7:71:25:
58:73:43:f5:f4:b1:54:af:05:f7:1f:e9:a4:06:36:43:63:4e:
57:79:e7:e1:36:96:c0:0d:42:b8:b8:56:31:9c:fa:f2:6d:86:
a7:d1:85:5c:a1:45:ac:53:3d:c1:f0:20:67:ee:24:90:d6:9e:
96:5e:e8:0a:77:23:7b:0c:d4:c6:53:96:a5:76:7c:a1:69:a9:
46:a5:69:ef:f2:cd:b4:36:37:45:fe:2d:1f:2d:fd:c4:a6:2a:
8f:d1:98:f3:a1:94:74:b8:60:c8:c1:4d:59:a3:bd:4a:fa:91:
bb:ec:7e:e0:85:3e:26:26:07:90:f3:85:b2:38:71:e5:1b:e0:
7e:0b:a3:ec:a4:81:c0:ab:67:83:c8:0b:7e:09:cc:14:ce:9d:
6e:cc:7d:f9:2f:2f:1f:76:06:39:4f:07:67:c0:18:5a:d9:23:
83:be:b5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:59:46 2026 by rpki-client