Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: GxE+SokMbGPOLkJTPy0gx3pbhOFAssGUgUQDHFINvqI=
Subject key identifier: FB:C8:C6:FC:C5:6E:91:3C:27:8E:09:79:CA:12:5D:DE:97:79:49:3F
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 01A1773A457F1098678413A412EB8958F998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 1A96
Signing time: Mon 26 Oct 2026 08:01:09 +0000
Manifest this update: Mon 26 Oct 2026 08:01:09 +0000
Manifest next update: Tue 27 Oct 2026 08:01:09 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: yGtPdrjxFVKqnGum+Y0qDYQa9nWqFq0BRckyInx1ZiY=)
2: tDm7AUYKyf97YOJJKUiWr2Dgcg4.roa (hash: /UBoh/wJ/dh6DjZ66cH1C2Cr/EgD7L8aiIxXDUdGpis=)
3: yffg1-eaO6Srh9Uv7AmqsK2NudM.roa (hash: kUfLwWzqj96wDEHYb/yvv+ZIOEIAJHX7rxwFZQvwJsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:3a:45:7f:10:98:67:84:13:a4:12:eb:89:58:f9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Oct 26 08:01:09 2026 GMT
Not After : Oct 27 08:01:09 2026 GMT
Subject: CN=fbc8c6fcc56e913c278e0979ca125dde9779493f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:50:75:7b:19:fe:4b:90:40:e8:d5:e6:7f:ec:
c7:97:77:a9:b2:32:5d:2e:7b:f5:a4:8c:5c:72:8f:
17:81:b7:97:f9:e6:34:d6:95:e7:b5:f4:04:95:71:
44:e8:b4:cb:43:fb:e5:8f:b4:02:a9:67:c0:73:27:
02:02:4f:2d:f3:dd:ad:1e:cd:0f:25:b4:15:0a:52:
97:6a:20:ed:0e:f0:34:13:13:af:c3:d5:b7:6d:54:
bb:ea:5c:c9:54:b8:7e:a9:56:65:6c:c6:6f:e5:08:
b1:3a:70:2f:b0:1c:7b:43:87:c2:db:e5:84:7c:89:
b6:c8:72:32:66:ac:61:0a:91:f1:86:e2:93:12:7c:
c0:e2:bb:46:fe:ea:89:ed:25:55:3b:38:de:a2:18:
1d:d9:fb:83:cf:90:05:8a:26:66:01:ac:f5:8f:bb:
c8:53:0d:cb:87:99:69:84:2b:17:4b:02:66:34:e4:
dd:ca:ec:11:ec:c9:ee:f9:5f:fb:d1:bb:1f:36:ea:
43:2b:f6:d6:33:a9:29:a5:be:b6:03:84:ed:3c:d3:
bc:f8:86:5e:60:78:a2:09:af:66:6f:6a:6c:4e:f3:
d3:7a:bf:f7:1f:b0:b6:9d:21:a2:f4:1d:c5:f2:95:
b4:9f:ed:b6:11:e4:d3:74:01:95:7f:fd:46:70:ca:
19:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C8:C6:FC:C5:6E:91:3C:27:8E:09:79:CA:12:5D:DE:97:79:49:3F
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:43:48:2f:a0:86:bb:4f:84:84:00:6b:0c:ab:38:ff:e2:d1:
ba:25:ca:f5:bf:51:9e:7d:40:39:31:34:80:91:4c:68:9c:6a:
dd:76:39:94:d1:31:1e:70:9e:c2:e2:4e:ee:b1:8e:01:a2:ca:
a7:09:2d:26:c6:a9:5f:3b:2a:2d:3e:dd:37:fd:d0:cc:83:f9:
09:d3:50:b7:1f:ef:c5:fa:85:20:40:90:16:e7:79:d6:84:e4:
51:fe:cd:7a:b0:7e:73:3c:f5:11:f9:81:31:1c:13:dd:c8:bd:
c3:fe:a1:bf:22:44:cd:02:98:d5:bd:7d:27:47:16:86:29:4d:
25:92:9c:2b:dc:1a:59:f1:5a:6b:4a:c3:7b:04:49:57:f5:09:
5c:5d:8b:7c:40:25:f5:73:e4:55:bb:c2:86:b1:67:cf:b8:bc:
13:d6:81:86:fc:6d:12:dc:03:71:1c:d0:a1:09:dd:a1:07:7a:
0d:47:55:7d:ce:a7:20:40:15:da:58:b4:3d:c8:9f:df:1d:48:
d5:dd:d6:71:6a:91:0e:2a:93:bd:65:38:c6:41:3e:ec:53:76:
73:89:c5:dc:7a:f8:14:d4:57:ce:61:2f:68:18:a2:be:91:39:
22:99:d4:4d:ad:05:12:ec:61:ca:11:79:39:00:f6:05:26:18:
71:dc:ea:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:19:41 2026 by rpki-client