Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: VSEElxwXHeHptO7M4/n8HH4EqlAP+P/gMkM1IPFTYvk=
Subject key identifier: 5D:8A:A3:86:B7:AC:4E:E0:00:57:58:19:DD:B4:2E:C9:34:F0:4D:07
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 019D988630D40F8A53B136BC11FAD59F9B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 1895
Signing time: Thu 16 Apr 2026 23:00:24 +0000
Manifest this update: Thu 16 Apr 2026 23:00:24 +0000
Manifest next update: Fri 17 Apr 2026 23:00:24 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: 47XkrJ9BG6aypIb19BRYps1/G8qxk/SmGRg7Ae2+5SI=)
2: tDm7AUYKyf97YOJJKUiWr2Dgcg4.roa (hash: /UBoh/wJ/dh6DjZ66cH1C2Cr/EgD7L8aiIxXDUdGpis=)
3: yffg1-eaO6Srh9Uv7AmqsK2NudM.roa (hash: kUfLwWzqj96wDEHYb/yvv+ZIOEIAJHX7rxwFZQvwJsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:30:d4:0f:8a:53:b1:36:bc:11:fa:d5:9f:9b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Apr 16 23:00:24 2026 GMT
Not After : Apr 17 23:00:24 2026 GMT
Subject: CN=5d8aa386b7ac4ee000575819ddb42ec934f04d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:64:98:86:92:69:6c:22:a9:e7:81:e9:c6:8f:
a7:5b:09:fe:79:86:af:21:64:6c:48:39:27:80:42:
e6:a4:1b:ce:e2:20:99:44:5b:81:eb:1a:bd:8f:aa:
c0:ed:91:2c:b8:f4:47:4f:11:98:9b:92:b0:65:c0:
1b:21:79:39:aa:53:99:3b:27:31:3b:12:ca:69:f6:
36:43:46:73:10:4f:77:53:ba:73:df:84:d7:26:22:
1b:f3:1c:2a:bc:96:4e:06:f3:26:98:37:67:a3:7d:
9b:71:27:3a:d4:fa:10:15:8a:1f:91:ed:19:eb:c2:
00:8b:ae:67:2f:4e:96:32:33:fd:f9:b6:83:9e:f9:
46:3e:2e:77:e7:71:ea:34:97:a1:92:38:2f:19:61:
fb:51:89:83:47:13:7a:3a:d9:39:cc:5b:ae:e9:65:
9a:fa:45:8f:95:2d:0b:ad:b2:02:8c:60:3b:0e:95:
e6:bf:40:07:ea:81:06:47:1e:5e:26:9e:96:ff:bf:
b1:e4:33:cc:9a:81:ee:a6:c2:d4:82:35:c5:e1:fa:
51:ce:91:10:a1:79:4a:e7:90:c4:af:8e:46:b8:83:
5b:ed:fd:de:5e:a2:cb:c1:ad:a6:aa:dc:7d:ab:af:
31:9f:75:a4:b8:e1:12:b3:99:b0:c3:b0:37:cb:59:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8A:A3:86:B7:AC:4E:E0:00:57:58:19:DD:B4:2E:C9:34:F0:4D:07
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:ae:63:39:e0:2a:5b:1d:2d:c7:c6:3c:73:35:e9:07:f4:7a:
ca:db:bf:ee:7e:8c:3d:30:ed:ce:58:00:76:52:23:96:92:f7:
3f:7e:9f:64:a5:6c:ff:67:65:7c:71:13:9e:f6:ed:41:5d:3d:
c5:80:07:0c:4a:15:b6:94:80:a4:e7:99:d8:07:56:7c:6f:15:
aa:2a:3f:5d:f3:27:ec:bc:e8:a4:ea:0c:b4:0b:8e:64:d4:69:
f7:88:25:08:3e:67:31:7e:4e:e7:e6:30:51:97:7f:75:73:51:
99:98:71:43:82:1f:34:d6:7d:69:09:52:38:1d:dc:38:67:a8:
75:74:86:0d:41:b9:23:b8:3b:3f:27:0b:95:84:b7:e3:5c:fe:
18:ba:60:1c:88:be:72:3d:e2:06:d4:8b:6a:b1:d8:93:78:f9:
b4:82:06:88:36:6a:d0:a4:d5:08:a4:cc:b3:70:b5:59:e0:b2:
4b:25:f1:73:b1:4b:eb:a7:54:ba:ba:a2:1d:09:19:ef:d8:e5:
22:74:d5:2f:f2:4e:ef:e3:85:70:be:ad:73:a9:75:c3:c9:04:
fa:50:3c:b4:6c:dd:61:95:ec:e4:05:3f:90:04:23:37:86:ff:
f0:ce:7f:48:2f:29:1b:9f:b8:da:c2:4f:e4:7b:2e:e7:ea:06:
1f:4f:4c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:42 2026 by rpki-client