Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
File: LMJf8ykY8LSTBiWdSDr7njgaORU.mft (raw, json)
Hash identifier: pkKYero1rV/d8NgUesq/EV451toQ+Ma9GCfM6UxinaA=
Subject key identifier: B0:AF:C3:3E:8C:CC:42:BB:BE:B1:51:C0:EB:F8:59:DA:08:08:E5:DE
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial: 01A0CC6C47D1B61A17BEDBCE7B1DEFD644CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
Manifest number: 1A76
Signing time: Wed 23 Sep 2026 04:00:43 +0000
Manifest this update: Wed 23 Sep 2026 04:00:43 +0000
Manifest next update: Thu 24 Sep 2026 04:00:43 +0000
Files and hashes: 1: LMJf8ykY8LSTBiWdSDr7njgaORU.crl (hash: OOkPnB7VVBEi5S5/DpAu/DbFyQxs4alemrGRE3+v228=)
2: kwn4ZdvrIv6hl400pgtVWpsd9lk.roa (hash: eyoTNP4CeFTLuxttmf6toqGd/JyyxtdCqToHMpNrH6E=)
3: oCe9xKAx3gPI7iUETaqklwJOVSg.roa (hash: Hl/RVZt4ha0REz41RabhXwcOue4AeE9NninK5nqE8vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:47:d1:b6:1a:17:be:db:ce:7b:1d:ef:d6:44:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
Validity
Not Before: Sep 23 04:00:43 2026 GMT
Not After : Sep 24 04:00:43 2026 GMT
Subject: CN=b0afc33e8ccc42bbbeb151c0ebf859da0808e5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:bf:f3:85:df:3c:51:28:54:d7:da:59:8a:
79:b4:e1:2a:c6:8b:c5:db:c1:ba:cf:90:af:9d:d0:
16:5f:49:02:3d:f8:31:c7:54:51:6c:ae:c8:fb:92:
1f:72:82:62:87:47:ca:11:32:a6:3e:4b:b2:7a:9e:
f6:83:d7:9c:ad:44:d0:c2:1a:4b:1b:0a:06:53:fe:
ca:64:3c:8a:b8:3d:49:af:06:24:bc:ff:6c:08:3b:
b9:d6:0b:4b:44:73:cc:48:95:2a:42:b2:47:d3:a4:
8a:e0:fa:98:08:c8:6f:7b:15:d4:bb:e7:ef:f2:48:
ea:2a:cd:72:b7:4b:1f:90:19:16:1d:6c:33:f8:34:
c1:e5:75:9e:7d:4f:90:be:6c:41:e7:41:d5:0b:e2:
00:25:06:d0:4a:84:d3:64:d5:29:e8:f1:7c:c7:9a:
31:b7:09:b2:e4:87:d9:ab:ef:25:40:c2:80:d9:7b:
48:97:7c:13:c4:5c:71:a5:ba:fd:f8:ff:4b:5f:33:
bf:c0:1c:33:93:91:e2:55:f6:3f:b6:97:56:87:b2:
df:d0:3c:fc:19:2b:b0:e1:50:92:f0:39:91:2c:6d:
93:45:4d:54:24:32:9b:96:27:7a:c3:1c:00:2d:7f:
90:f2:df:f0:0b:ed:40:bd:45:59:1c:5c:a2:c8:3c:
fc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AF:C3:3E:8C:CC:42:BB:BE:B1:51:C0:EB:F8:59:DA:08:08:E5:DE
X509v3 Authority Key Identifier:
keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2d:37:68:c2:24:8e:2e:5c:2a:d2:ca:64:2f:4f:c1:b4:3d:
8c:05:31:ce:e3:cc:14:41:1d:8c:f2:23:b2:5e:0b:fc:2c:0a:
72:33:9f:d7:97:eb:d0:23:d9:7e:a1:d9:3e:d3:39:29:de:36:
2f:cb:17:6e:7c:45:ef:19:59:37:bc:0a:7e:67:56:b7:b9:4d:
fc:63:50:00:28:7e:cd:60:a0:ce:26:d8:f2:c9:89:1e:c8:bd:
b9:cf:b6:96:59:fc:35:82:0f:28:5a:5e:51:1f:4e:73:e0:69:
9c:5c:f4:ca:96:eb:1a:c5:d7:9c:a9:3b:85:ab:9f:20:68:0f:
e3:cc:ee:8a:9e:e3:87:41:08:ed:aa:49:e0:eb:8a:20:c8:41:
f0:00:d6:b5:1a:4a:9c:e4:6a:8a:87:e3:18:54:32:3d:45:e1:
b9:2a:81:6a:7a:32:5a:9a:14:25:03:d5:a2:39:a6:32:a5:90:
c3:1c:2d:3e:93:22:d8:02:a1:14:c8:f4:30:2d:7a:05:5e:77:
8a:36:91:7d:e6:84:2f:21:5d:a2:be:51:04:26:f8:8f:e2:78:
7f:d0:c3:19:91:ed:d6:32:5f:51:ed:5e:7e:15:11:d2:21:57:
53:12:fb:3e:9d:14:e4:da:95:d6:34:c9:42:93:46:83:38:6c:
2c:c2:92:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:16:32 2026 by rpki-client