Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
File: lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json)
Hash identifier: GFl8FKDQboivVMiKZi9sNqjZ83t82l9dmmDnFXOT9Tk=
Subject key identifier: 2A:EB:CF:DF:01:FE:58:92:11:AE:5A:F1:55:2E:9A:71:C0:65:72:BE
Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Certificate issuer: /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Certificate serial: 019D98F404B4921EBD70184DCD4F2282462F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 01:00:21 +0000
Manifest this update: Fri 17 Apr 2026 01:00:21 +0000
Manifest next update: Sat 18 Apr 2026 01:00:21 +0000
Files and hashes: 1: 5Oaq_9l3ZmhaBOhjzGbGvS7HRKc.roa (hash: cXhkDcDKqif8H6682mKwtEo2AE55St9SA93gZ7arpO0=)
2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: Q+aA42vYoobvQbEbJhs6lbKI2KeiMMAd0n7sAfRw0zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:04:b4:92:1e:bd:70:18:4d:cd:4f:22:82:46:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Validity
Not Before: Apr 17 01:00:21 2026 GMT
Not After : Apr 18 01:00:21 2026 GMT
Subject: CN=2aebcfdf01fe589211ae5af1552e9a71c06572be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:35:bf:a0:37:43:39:20:e4:12:d6:dd:e4:e1:
35:6a:45:ce:10:6a:7f:68:3d:19:2f:69:2a:59:b3:
53:d8:91:c7:1c:30:ad:8b:b7:89:93:dc:e1:61:91:
93:c9:fe:75:66:7e:dd:c2:58:a7:d8:1a:2c:9b:8e:
38:8e:df:49:e7:f5:64:ad:a2:89:82:00:1a:c3:8e:
e2:4c:cb:9f:95:b2:83:9b:9b:61:c0:5c:2c:ca:1d:
f9:58:4e:f5:95:d8:c2:43:a8:82:e5:da:f5:d2:b0:
2e:a3:c5:0c:4d:3a:44:b3:29:e8:a2:cb:ec:15:b0:
f5:45:d1:5d:5a:c8:e0:d3:13:e0:c2:6f:8b:26:f7:
a6:17:99:7e:b2:62:d6:c0:f4:37:9d:75:54:73:79:
ac:c7:17:17:e6:74:28:d2:f6:38:6d:b4:4c:09:6a:
76:35:53:a3:9b:c7:02:07:b2:93:52:48:a4:ca:76:
98:07:f1:aa:19:30:86:0f:8f:d6:0e:fb:67:5d:27:
a3:de:3f:73:9e:91:d8:50:ab:ca:c4:d5:6b:e2:d1:
2c:88:0d:d8:da:e9:24:b8:98:d9:93:7b:02:6f:3e:
96:0a:99:35:b2:f9:28:ef:b9:62:d3:47:3c:6e:73:
54:90:09:0e:8a:81:d2:70:1a:7c:68:92:ca:02:80:
82:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EB:CF:DF:01:FE:58:92:11:AE:5A:F1:55:2E:9A:71:C0:65:72:BE
X509v3 Authority Key Identifier:
keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:06:da:51:81:c0:85:fc:e4:4e:ec:61:5c:c3:9b:53:97:5e:
45:2e:96:b4:27:2d:7a:59:1e:41:35:0f:a7:86:af:52:9e:b9:
2a:a2:e8:97:df:1d:60:9b:e7:2b:87:3c:34:1f:d6:23:ae:e6:
2e:7f:aa:57:8c:71:4a:ff:d6:41:e3:dc:08:28:4d:d1:55:17:
48:56:01:6a:b0:eb:8e:b1:9e:35:5c:ad:a9:73:bc:eb:aa:e7:
e5:97:75:2b:23:8e:41:d9:dd:0d:a1:83:39:6d:45:64:32:5d:
82:44:f1:5a:8d:d8:ac:c0:e1:a7:f1:79:5a:22:d3:12:95:f0:
46:c9:2a:40:56:2e:4e:0a:40:bb:9c:65:f8:df:42:79:bd:73:
a0:72:fa:c9:a5:7d:7e:2b:d2:7c:24:f4:3c:34:59:31:01:42:
11:4a:e4:da:d0:c7:d8:3a:90:e0:8c:f5:72:36:7b:58:fd:48:
f3:4d:98:c5:a9:92:2f:fa:00:16:d4:a0:c0:c9:c2:44:a6:95:
88:f5:f2:90:bd:e2:47:2e:79:66:a9:2e:c7:80:ec:80:a4:30:
1e:65:89:0b:1e:c8:6f:88:c4:ff:9d:87:c9:2c:a5:9f:95:70:
4a:01:c9:9b:99:e9:90:c6:d3:b5:c1:71:ce:64:9c:dc:b0:80:
21:cd:93:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:25 2026 by rpki-client