Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
File: LMJf8ykY8LSTBiWdSDr7njgaORU.mft (raw, json)
Hash identifier: OeH2s60GXUqhLn5fOwC/EK3chEtO7N/1HDdtCPTZGaU=
Subject key identifier: 01:15:09:35:11:4B:16:DB:8C:9C:72:01:BD:81:AA:14:4E:CC:FD:B0
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial: 01A0DBE0171740FF58DD7DB36CD0FFF66814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
Manifest number: 1A7E
Signing time: Sat 26 Sep 2026 04:01:31 +0000
Manifest this update: Sat 26 Sep 2026 04:01:31 +0000
Manifest next update: Sun 27 Sep 2026 04:01:31 +0000
Files and hashes: 1: LMJf8ykY8LSTBiWdSDr7njgaORU.crl (hash: no/WNjNHVpDUuOumEop14A2gYEnmfjii79XOjp3Bpms=)
2: kwn4ZdvrIv6hl400pgtVWpsd9lk.roa (hash: eyoTNP4CeFTLuxttmf6toqGd/JyyxtdCqToHMpNrH6E=)
3: oCe9xKAx3gPI7iUETaqklwJOVSg.roa (hash: Hl/RVZt4ha0REz41RabhXwcOue4AeE9NninK5nqE8vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:17:17:40:ff:58:dd:7d:b3:6c:d0:ff:f6:68:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
Validity
Not Before: Sep 26 04:01:31 2026 GMT
Not After : Sep 27 04:01:31 2026 GMT
Subject: CN=01150935114b16db8c9c7201bd81aa144eccfdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1e:89:41:f0:bd:81:b8:1b:48:3d:f4:f8:82:
ef:16:70:2b:11:2b:00:1f:3c:49:1a:e5:f6:96:8a:
5c:65:c9:4b:47:c3:a9:f9:06:88:b4:3f:e6:64:61:
0b:3b:ca:46:c6:b5:ec:13:85:fb:80:33:b1:e2:b5:
53:58:33:45:58:2e:8f:cb:1f:56:fa:2a:f8:af:4c:
97:13:59:3b:c9:5f:72:88:0e:4e:22:8a:32:66:e1:
21:69:c1:0e:98:8b:93:95:78:fd:0a:d4:f9:76:b8:
ac:0b:b3:64:ff:4c:e9:f8:ce:96:f5:25:74:1f:8d:
ef:f5:ee:e1:15:04:77:cb:da:2d:74:4b:f1:92:00:
bf:93:4e:23:32:ae:c5:6b:05:06:f0:1b:fc:12:f3:
a3:65:04:c8:81:e7:9e:dd:ed:e0:f2:7b:38:55:cb:
48:9d:af:16:d3:65:a4:bd:7a:11:23:62:82:77:e2:
21:6a:b2:10:c8:6f:d6:0d:a1:99:86:07:a5:ec:40:
d8:aa:01:23:00:18:a8:92:c6:95:06:02:d2:42:59:
a6:30:48:44:1e:41:2b:47:be:d4:4c:0c:c7:b8:70:
0e:dc:3f:5c:78:f6:c2:58:33:7b:71:09:23:ac:3c:
b0:7f:f8:7d:24:83:37:8d:cf:9c:ad:d6:56:89:bd:
53:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:15:09:35:11:4B:16:DB:8C:9C:72:01:BD:81:AA:14:4E:CC:FD:B0
X509v3 Authority Key Identifier:
keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d2:c0:2c:08:83:d8:07:7a:86:c5:06:0a:ee:cf:fa:57:f4:
57:9c:ca:96:62:7b:d8:2d:74:c6:e4:64:83:85:02:bc:c4:17:
52:72:3c:8b:3c:4b:89:9a:fe:ba:ab:06:f5:d7:11:cd:09:b4:
b4:59:fe:7f:68:86:8f:1a:13:39:59:88:32:ed:8a:ec:e8:87:
0b:5e:d2:fc:6c:e6:2a:e3:6e:d3:43:d5:ad:9b:d2:99:2a:ee:
4d:91:54:c4:8f:89:ed:3f:71:93:c1:b1:4c:4f:43:5a:65:71:
04:80:92:da:47:24:ac:77:0d:fb:7e:e5:a1:00:3c:3f:75:43:
ea:d3:a9:b6:78:ae:5a:2b:4e:d7:d3:dc:e0:fc:fa:42:09:78:
6d:74:4f:9a:e6:17:18:4f:65:e0:2f:ab:d6:7a:3b:54:95:90:
30:14:98:fb:54:f1:67:73:8b:31:e4:b8:95:29:52:c1:75:a9:
6a:c9:e2:a6:84:43:4c:37:3d:92:a6:e0:48:a9:cd:39:c1:95:
0c:de:2a:91:09:30:ed:31:50:dc:4a:0b:e2:1e:df:92:38:70:
bc:6e:17:07:64:d0:dd:e7:25:69:50:99:5f:1f:48:80:8b:16:
f9:89:96:c6:c2:a3:5d:98:22:c2:f6:59:a5:fb:cd:98:c6:92:
89:ca:65:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:53:14 2026 by rpki-client