Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
File: lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json)
Hash identifier: BURs1nzGzwD5LvD/zXPyAE7sZuAFo7mAEAX4RzlS6mY=
Subject key identifier: 2B:F8:31:1D:5C:6C:42:37:B7:40:1F:8A:78:13:B9:2C:67:4F:F6:88
Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Certificate issuer: /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Certificate serial: 019CAD5A65840A459415C327B0C39808DBAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 07:01:48 +0000
Manifest this update: Mon 02 Mar 2026 07:01:48 +0000
Manifest next update: Tue 03 Mar 2026 07:01:48 +0000
Files and hashes: 1: 5Oaq_9l3ZmhaBOhjzGbGvS7HRKc.roa (hash: cXhkDcDKqif8H6682mKwtEo2AE55St9SA93gZ7arpO0=)
2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: kKYUv57pzA8W7R1ocFXRTefoVouUvQi0s03//N8TfEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:65:84:0a:45:94:15:c3:27:b0:c3:98:08:db:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Validity
Not Before: Mar 2 07:01:48 2026 GMT
Not After : Mar 3 07:01:48 2026 GMT
Subject: CN=2bf8311d5c6c4237b7401f8a7813b92c674ff688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fb:d9:fe:d5:27:a3:27:7a:6a:61:39:49:75:
99:c6:67:cd:64:ab:a3:ea:fa:a1:d7:a0:07:30:c3:
d8:71:60:e2:79:9e:e6:f9:4c:6e:8b:e0:74:1a:9d:
3a:79:31:4b:7c:24:5a:d8:ed:af:ec:1f:1a:34:db:
fe:35:c7:5f:c9:1c:96:3f:95:14:b0:01:e1:a3:7c:
e6:9e:53:b0:f5:b6:86:75:48:8f:78:60:d2:8f:ca:
b7:64:3f:2c:be:ef:73:da:8e:6f:02:2a:e3:65:fc:
66:95:32:2f:79:f6:32:bf:48:07:12:0c:40:80:3e:
9f:6b:34:c2:94:5a:d8:9c:a0:12:3b:89:93:cd:e5:
67:51:1d:00:88:a1:37:6a:24:4f:c0:d7:0a:c1:27:
86:b9:ee:6c:7b:bc:22:65:ed:a1:d6:cd:bb:5e:50:
78:ac:50:27:dd:5c:69:ff:4a:d5:46:8f:c5:8a:ff:
87:0a:93:dd:96:b2:42:04:ee:95:28:6f:bb:75:77:
31:db:99:0b:e4:11:c5:67:f7:f7:24:3e:02:04:f6:
59:f6:64:e0:cc:1b:07:a8:57:6c:3c:8e:f9:b7:48:
9b:55:8d:70:34:9b:56:80:a5:ac:6d:b0:1a:88:d2:
1f:dd:25:3b:1f:7f:8f:32:55:17:bc:02:61:ca:f9:
3b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F8:31:1D:5C:6C:42:37:B7:40:1F:8A:78:13:B9:2C:67:4F:F6:88
X509v3 Authority Key Identifier:
keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8f:7d:92:07:cc:29:1b:28:7b:ed:6c:2b:79:6c:d6:06:13:
3f:ce:95:5b:02:61:04:eb:85:20:76:ee:de:1f:2e:84:7b:ad:
40:c1:36:e7:ce:bd:04:75:ee:9b:b4:e8:7c:a7:bf:05:b5:9b:
7c:5f:49:7d:df:0e:dd:df:f1:ac:76:86:58:17:86:71:f4:78:
a2:9a:5c:ef:93:f3:56:62:ee:8a:0e:06:c5:63:65:74:b6:43:
d8:86:e4:a6:2a:11:3e:31:58:70:94:31:f2:73:6f:96:8d:77:
28:77:37:d3:ee:5a:c7:6a:fc:a1:6a:cb:5a:85:eb:b9:1c:e2:
a0:48:dc:20:6a:5b:c3:54:9c:db:c7:9f:b2:9a:e2:4f:50:36:
52:32:21:bc:8b:e9:5e:e1:3c:24:9a:7c:7d:64:1d:a1:ad:ed:
4c:09:7e:b2:65:ad:a2:90:86:4d:de:34:40:01:51:57:24:73:
b0:50:b2:64:39:6f:c9:40:36:94:a1:af:36:80:57:34:d9:14:
e8:43:e5:f0:08:90:78:4f:f9:aa:0c:03:2f:17:c0:f6:e4:0c:
0c:05:ee:2c:88:f3:b2:f6:90:41:2f:42:66:b4:d6:11:b3:6f:
f6:9b:d1:ab:be:33:0f:52:b8:27:ca:da:a9:50:3c:9d:f7:94:
07:5c:7f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:30 2026 by rpki-client