Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
File: LMubibwLwhdSR05lDcNPBp2lwLM.mft (raw, json)
Hash identifier: ESWYZQVjFaGV5nij0v6f2teTNqwWnytK6o1NtIPWJcE=
Subject key identifier: ED:3C:16:93:73:F3:90:34:B0:26:F2:E0:D4:8F:F1:90:C3:D2:54:50
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Certificate issuer: /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial: 01A12C573976D1B350DA836145B9CBE79D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
Manifest number: 1AA3
Signing time: Sun 11 Oct 2026 19:01:16 +0000
Manifest this update: Sun 11 Oct 2026 19:01:16 +0000
Manifest next update: Mon 12 Oct 2026 19:01:16 +0000
Files and hashes: 1: L5S5eEPo3Tlp2-Gu277L0fi4-x0.roa (hash: +Gwjcjom9pqLSyIZJDE+ooi9DSzl5I6UWWhpsWsU6XE=)
2: LMubibwLwhdSR05lDcNPBp2lwLM.crl (hash: HEO9afP6fFN7Ia4bcmJzb/DntVNdI/02IE1xSUQX9VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:57:39:76:d1:b3:50:da:83:61:45:b9:cb:e7:9d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Validity
Not Before: Oct 11 19:01:16 2026 GMT
Not After : Oct 12 19:01:16 2026 GMT
Subject: CN=ed3c169373f39034b026f2e0d48ff190c3d25450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:2a:d8:0f:2a:05:27:a9:a9:98:9f:7c:10:
3d:f9:97:4a:0f:d3:75:37:57:86:76:b4:c8:b7:2a:
23:74:67:84:27:e0:cb:05:ce:fb:18:48:a5:27:36:
3b:c6:fa:85:7f:d6:63:73:a7:2e:d8:39:ff:40:7a:
b4:52:c1:a9:aa:7a:88:a1:10:a3:fc:e9:a9:bc:e6:
9e:24:da:07:e3:d3:de:9d:ba:2e:97:59:80:0c:c6:
a5:ce:2d:e0:1a:03:91:33:03:7d:89:09:56:ce:87:
d7:03:1f:b5:2a:06:ba:b5:6d:9e:de:0e:c4:71:47:
0a:80:f6:96:2a:eb:82:2e:f5:ad:81:a7:82:ab:09:
00:e1:59:bf:9e:1e:8b:d0:65:6d:c0:e9:9e:cc:96:
48:1a:cc:f6:4b:ee:40:7d:32:eb:96:5c:60:07:1e:
5f:71:16:a6:98:27:1c:c4:b4:1a:81:b0:6e:5e:b3:
aa:bd:85:69:6a:80:ce:32:8d:50:17:46:5c:97:52:
0b:02:6f:aa:7e:26:d7:4e:a7:2b:02:20:83:8b:a4:
d5:b4:6c:af:a3:da:a5:22:e3:ab:d5:c6:e5:d9:eb:
cd:ee:79:e6:2e:72:b4:3d:18:0c:ec:03:ca:dd:61:
2a:17:e4:d1:54:39:be:da:43:2a:37:8e:18:27:ee:
77:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3C:16:93:73:F3:90:34:B0:26:F2:E0:D4:8F:F1:90:C3:D2:54:50
X509v3 Authority Key Identifier:
keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e2:28:ad:e3:c1:dd:e9:c2:d1:cf:cb:c6:0b:b4:5f:f9:74:
2a:ff:ed:4f:5a:50:f4:b4:42:23:b2:ba:12:7b:22:f6:ea:72:
e8:07:64:f1:bf:52:86:14:6f:7d:d9:5f:e1:c6:95:0c:27:03:
bf:30:d2:f0:54:db:06:7a:96:de:e2:25:cf:02:66:9c:8e:0d:
94:ea:ba:e9:4c:a7:e0:b0:5e:48:d9:e9:fe:d4:18:93:19:0d:
d0:4f:b4:7f:a3:d4:1c:02:f7:94:f9:35:ad:3f:1b:22:c4:98:
dd:a5:d3:53:9b:cd:93:b6:60:52:d6:46:b0:42:14:57:57:6d:
bd:73:e3:2a:ab:cd:16:c0:f7:c7:56:64:5a:cf:9b:d8:5e:41:
a0:df:9d:51:2b:2f:4a:5b:49:97:f3:83:7b:03:20:b2:04:ce:
3a:94:e8:10:e7:6d:cc:a7:a5:6a:5a:11:d6:2b:6b:c2:ef:91:
23:49:82:26:dc:52:93:a2:31:b7:f5:09:df:26:81:02:f3:fb:
8a:8f:bd:be:c3:b2:0b:e4:73:7c:1d:5f:ff:f8:18:20:f1:15:
08:74:72:a0:1a:52:58:fa:6a:f5:34:26:4f:7f:4e:05:49:db:
fc:95:17:7e:52:32:6c:6d:92:f4:22:ae:52:27:79:24:7a:d2:
c4:97:d5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 05:22:06 2026 by rpki-client