Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
File: LMJf8ykY8LSTBiWdSDr7njgaORU.mft (raw, json)
Hash identifier: FE/L2DWpD+xQh+aZXZ4zstgAGd88N6dSfqhDFhqiWKc=
Subject key identifier: BE:16:36:91:B2:5B:A9:D4:D4:EA:26:CE:D7:23:5C:08:F0:58:7A:4F
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial: 01A1DEA7E60D92D14A955FC7DDB797D40218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
Manifest number: 1B04
Signing time: Sun 15 Nov 2026 10:01:47 +0000
Manifest this update: Sun 15 Nov 2026 10:01:47 +0000
Manifest next update: Mon 16 Nov 2026 10:01:47 +0000
Files and hashes: 1: LMJf8ykY8LSTBiWdSDr7njgaORU.crl (hash: KeM0IWJpYmeTjb7516T5slrUTO7lDhz/3XlJqhT6+HY=)
2: kwn4ZdvrIv6hl400pgtVWpsd9lk.roa (hash: eyoTNP4CeFTLuxttmf6toqGd/JyyxtdCqToHMpNrH6E=)
3: oCe9xKAx3gPI7iUETaqklwJOVSg.roa (hash: Hl/RVZt4ha0REz41RabhXwcOue4AeE9NninK5nqE8vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:e6:0d:92:d1:4a:95:5f:c7:dd:b7:97:d4:02:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
Validity
Not Before: Nov 15 10:01:47 2026 GMT
Not After : Nov 16 10:01:47 2026 GMT
Subject: CN=be163691b25ba9d4d4ea26ced7235c08f0587a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:57:4c:53:73:93:ac:ca:e5:25:f1:e4:dd:
49:c3:0b:45:e7:c4:55:41:32:64:5e:78:30:a6:2f:
4c:6d:ab:5d:5e:78:e8:40:1f:92:64:d7:97:d6:aa:
88:43:89:e8:d2:58:4d:72:ad:60:61:da:93:ae:eb:
b7:57:da:a5:0d:a2:62:16:50:8e:63:01:0a:75:75:
b9:a0:aa:a1:f8:5b:ef:18:59:8e:e9:62:05:fc:95:
39:d7:95:4d:7b:b1:94:4b:ee:d9:de:5b:35:a6:0b:
6e:bb:68:c7:0c:a3:8a:8e:6e:84:17:2e:aa:b1:73:
f1:d9:ef:7e:42:0f:fe:4c:57:76:52:f5:2f:60:93:
e0:1f:d7:1c:ee:21:db:00:a7:07:8b:0d:0a:46:90:
36:3f:f7:c3:51:fa:6a:33:e7:7f:a5:0e:3d:c9:d2:
9d:9b:32:f0:d9:71:3e:d9:3c:6a:25:3e:a0:84:39:
b5:8a:5b:53:c4:10:17:c3:25:f2:e8:9c:02:59:2e:
61:ef:10:b6:36:2b:64:8b:ae:47:f1:6a:6d:10:c9:
ef:df:07:9b:70:a6:a7:dd:0c:9b:a2:1a:0b:5f:f5:
2f:a9:3f:71:4f:8f:1d:6c:09:ea:91:45:50:10:78:
a2:2c:f8:9a:d7:99:3d:c5:42:41:d7:b0:f5:94:c2:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:16:36:91:B2:5B:A9:D4:D4:EA:26:CE:D7:23:5C:08:F0:58:7A:4F
X509v3 Authority Key Identifier:
keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:32:43:7e:eb:ea:04:44:d6:59:19:71:b6:95:6b:db:30:90:
f3:8b:55:9f:ff:0e:26:01:ad:65:33:b7:16:c1:35:9b:27:5f:
b1:f8:5e:96:4b:72:1d:ac:92:a6:ba:65:cb:5b:8a:e5:23:ea:
29:ab:e3:d4:1e:e2:0c:a0:de:f3:8f:50:7b:02:95:f8:c8:fa:
9d:c1:29:9b:60:9b:d7:53:52:4a:07:ad:ab:ff:4b:ee:aa:02:
52:2f:20:0c:71:02:2e:63:61:fb:52:5d:35:dc:96:eb:b7:a7:
a0:3d:e8:d7:02:4d:5d:2e:11:43:fb:b4:e0:cf:3b:ca:49:02:
86:e7:c6:b9:7e:be:e3:9e:9f:54:d6:01:16:9d:04:ba:a9:4e:
16:97:99:9b:1e:58:75:d1:fd:dd:5d:f0:fb:21:37:75:96:4f:
1f:fa:0c:6a:9c:06:4b:1b:8a:b9:0e:91:fe:fb:7b:d3:4b:8a:
6f:1b:98:80:c0:83:50:5e:c8:57:69:72:80:7b:a9:3e:32:31:
fe:58:36:70:db:0f:69:61:b4:d9:b2:f1:d2:1c:07:b3:55:87:
e5:09:1d:3e:93:89:b1:0e:ff:02:e4:48:9f:e7:74:0b:53:48:
25:43:44:cf:fc:d5:b2:56:79:df:69:42:18:74:83:b6:e1:c7:
12:51:6e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:19 2026 by rpki-client