Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
File: lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json)
Hash identifier: FKxnF3Jv6ZEXTRNcFpiuYE1+GpZgv9eOvRlMTrDBtZw=
Subject key identifier: 7C:7B:E7:BB:08:BC:D4:A8:23:A8:98:DC:F6:07:A9:3A:04:06:63:47
Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Certificate issuer: /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Certificate serial: 019D27042109EAF36F52A9931B79AEA3B8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 22:01:15 +0000
Manifest this update: Wed 25 Mar 2026 22:01:15 +0000
Manifest next update: Thu 26 Mar 2026 22:01:15 +0000
Files and hashes: 1: 5Oaq_9l3ZmhaBOhjzGbGvS7HRKc.roa (hash: cXhkDcDKqif8H6682mKwtEo2AE55St9SA93gZ7arpO0=)
2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: ThqVgLasbpAJJybbuLMoMJEsOgfJ7x8+DrZtBeMmjBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:21:09:ea:f3:6f:52:a9:93:1b:79:ae:a3:b8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Validity
Not Before: Mar 25 22:01:15 2026 GMT
Not After : Mar 26 22:01:15 2026 GMT
Subject: CN=7c7be7bb08bcd4a823a898dcf607a93a04066347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:bf:38:d5:01:df:88:6d:7e:0f:c1:1a:25:
b3:89:b0:0e:21:91:78:b1:a9:58:44:57:4a:ef:6f:
91:e0:53:b4:d3:36:48:06:be:2d:d8:b2:f5:3e:21:
8a:1b:bd:db:f1:65:05:29:bd:e0:19:72:37:fa:50:
5f:0e:c3:bc:7e:87:c2:3d:f2:1e:86:d2:7c:d6:d0:
3c:68:4b:0a:94:f7:d2:aa:4c:e1:e4:aa:d1:72:51:
54:03:17:0e:b4:3c:90:50:50:e1:55:66:ab:ab:df:
53:fd:4e:2c:54:e2:15:e7:09:c1:d6:bc:d7:fc:08:
72:0b:8a:cd:1e:40:8d:bf:a2:3e:8f:9a:47:f1:0b:
ac:b7:f1:6b:e6:52:50:23:99:58:4c:b0:f8:bb:12:
59:3e:c5:8b:fe:92:b6:0b:f2:61:72:fe:ed:d1:91:
8c:53:95:7e:4b:88:0c:f2:12:d9:b6:96:cb:14:c8:
2b:c8:39:52:51:c3:d3:c4:16:82:43:89:c4:6e:43:
fb:f6:14:aa:c1:f8:af:3a:61:ba:92:73:91:47:a1:
f9:08:f1:00:71:7d:47:99:2c:0d:40:5f:5a:d2:0d:
62:cf:1e:89:d2:0a:2b:da:89:42:3f:f6:91:27:40:
44:54:79:0a:e4:4e:e9:b5:53:30:bc:2f:07:9a:a6:
77:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7B:E7:BB:08:BC:D4:A8:23:A8:98:DC:F6:07:A9:3A:04:06:63:47
X509v3 Authority Key Identifier:
keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f2:8b:ce:7b:60:06:26:f3:f6:6c:40:8e:48:54:43:b2:5c:
55:3e:ba:de:18:0a:b7:ce:1c:6f:2f:0d:81:16:6b:49:f3:31:
3c:92:18:66:5f:7f:fe:6c:b1:d4:78:73:72:4b:df:de:b2:ad:
43:f5:20:1e:20:c9:5c:74:44:e2:aa:80:cb:2e:a8:b4:d9:e5:
18:ed:5b:c7:70:69:68:27:c4:da:dd:23:78:25:66:20:d9:70:
37:4d:d0:d3:b4:bc:d8:7c:5b:1d:18:b9:d3:a9:b4:80:20:e6:
c4:82:50:9a:bb:85:f9:07:2d:df:b8:68:d5:a5:d7:c0:c6:25:
d3:1e:b9:66:fa:e4:a4:ac:41:cf:fe:a4:dd:be:81:95:53:f5:
43:85:02:7a:22:53:4b:f2:2c:0d:75:f7:91:ae:3e:58:15:12:
09:a6:77:83:dc:98:21:2c:d1:c9:1b:0f:b4:4b:78:96:4f:ae:
ef:ee:ee:5c:f7:11:24:95:7e:f0:6d:5a:cd:d9:62:b8:8e:a7:
c2:9b:fd:cf:a4:bb:85:f9:79:3f:96:9f:b8:91:f9:47:d5:55:
37:1b:c4:a2:48:1f:a0:a9:4b:23:46:52:00:34:07:61:b2:86:
41:5d:6e:64:76:5a:af:28:65:af:01:ce:bd:6b:11:ed:cd:cf:
8f:f4:fc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:40 2026 by rpki-client