Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: jkjHCfKcj8RUt1+o/wgVFrr30shaFoDzTOyKJ4zmRqY=
Subject key identifier: 22:6E:6F:02:DB:77:3C:51:55:94:24:18:4C:B7:25:CD:24:2B:F5:4C
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 019DD275D8F8670E789F30F88B6F54A35994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 18B3
Signing time: Tue 28 Apr 2026 05:00:31 +0000
Manifest this update: Tue 28 Apr 2026 05:00:31 +0000
Manifest next update: Wed 29 Apr 2026 05:00:31 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: vzPWSpN/xCEBNhx52JGk8bIPXevumyLcc1Y1KE5Q2UQ=)
2: tDm7AUYKyf97YOJJKUiWr2Dgcg4.roa (hash: /UBoh/wJ/dh6DjZ66cH1C2Cr/EgD7L8aiIxXDUdGpis=)
3: yffg1-eaO6Srh9Uv7AmqsK2NudM.roa (hash: kUfLwWzqj96wDEHYb/yvv+ZIOEIAJHX7rxwFZQvwJsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d2:75:d8:f8:67:0e:78:9f:30:f8:8b:6f:54:a3:59:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Apr 28 05:00:31 2026 GMT
Not After : Apr 29 05:00:31 2026 GMT
Subject: CN=226e6f02db773c51559424184cb725cd242bf54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:dd:63:99:d0:8e:4d:ce:99:30:92:fa:2b:
2c:6a:c5:95:aa:e0:1c:3d:43:62:06:2d:b3:60:68:
60:49:bb:41:f3:f6:b8:b1:00:98:cf:66:c2:37:5d:
82:c0:cf:26:14:22:70:ab:e9:3b:ce:50:4b:0b:0f:
31:61:26:2e:d4:8f:c6:12:72:7d:74:d4:ab:21:be:
21:c0:97:ca:d5:22:6d:ff:a3:3b:06:fc:9c:a0:f2:
ab:da:b3:ba:7c:c1:12:e5:3c:5b:e3:4c:4a:36:ea:
c9:e7:6e:34:71:40:be:ad:88:34:e8:be:e0:3e:23:
99:85:13:aa:1a:9b:4a:4a:b8:c8:e4:4f:a7:b6:c3:
6a:39:5c:72:e5:16:88:1b:67:ac:68:f2:9a:d7:b7:
1c:87:d7:9e:8c:99:c9:a3:41:e6:c9:bd:51:17:38:
dd:19:af:75:fe:10:4b:f3:1c:f6:8b:65:6e:0c:8e:
aa:75:9c:f7:86:0a:cf:ba:da:9e:dd:4b:67:bf:b9:
be:cb:9f:51:cf:a8:14:29:1f:53:e0:2a:6c:25:4b:
e3:be:d7:5b:f9:fe:bc:94:8b:1d:bf:9a:46:51:68:
99:5c:94:1d:67:50:e0:11:82:bc:3f:50:ea:54:f2:
09:d0:80:d2:3a:7d:b4:fc:db:d4:d5:1d:b1:24:30:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6E:6F:02:DB:77:3C:51:55:94:24:18:4C:B7:25:CD:24:2B:F5:4C
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a5:8c:e0:05:f4:55:78:e2:f2:fe:75:a3:b3:6c:54:42:12:
6c:a2:6f:84:fa:a8:cf:ab:ee:87:80:b9:81:17:46:13:2e:9f:
50:33:53:fd:68:0a:d6:50:5c:4e:e9:24:0a:51:83:d0:6b:8b:
a6:3a:90:30:23:04:00:c6:6a:91:d7:06:79:b8:38:c9:80:bf:
92:6e:b9:33:07:c9:5e:00:0a:02:e8:3e:8c:9e:3b:33:73:1d:
f7:8e:81:ae:a4:1a:fd:af:45:47:6f:22:05:f3:ac:c0:fe:01:
1f:a9:f0:03:04:21:ff:2b:54:0f:ad:0b:8e:c0:b9:47:92:8f:
56:06:aa:e8:d9:a3:bd:3d:ea:2b:f0:50:a6:02:a5:17:d9:de:
02:c1:71:31:65:1a:50:74:6a:08:5f:fd:e9:7e:34:24:4f:d7:
3e:9c:8b:cd:a3:79:02:f4:8d:37:d4:74:dd:3a:6d:ed:b4:33:
22:2e:3f:20:7d:2f:23:5a:90:28:b6:08:ef:6c:07:37:f8:5c:
fe:8d:5e:c3:9c:66:4b:cd:bd:43:a4:17:8c:9c:52:6d:70:f3:
fa:5a:84:44:a1:32:12:06:d8:dc:8c:b0:41:49:56:11:1f:11:
85:3a:df:33:5e:d0:62:d0:a4:7a:fe:63:ea:90:68:56:3c:db:
9d:01:4f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:20:32 2026 by rpki-client