Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: MCtCgr25iiYpTB6i2ZbVVp6ydYmMhR7CZLwMRF6/UGA=
Subject key identifier: 60:07:F5:08:6C:55:20:72:5B:B0:DA:B1:4A:1C:8D:92:E1:DC:89:9B
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 01A08B9F6F44BACE73F9F2FF3A4D43B032DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 1A1C
Signing time: Thu 10 Sep 2026 14:01:16 +0000
Manifest this update: Thu 10 Sep 2026 14:01:16 +0000
Manifest next update: Fri 11 Sep 2026 14:01:16 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: UFWSVmowXCuuRN49C0L+wEbZA7NeNLI1J+lv37YM7JI=)
2: tDm7AUYKyf97YOJJKUiWr2Dgcg4.roa (hash: /UBoh/wJ/dh6DjZ66cH1C2Cr/EgD7L8aiIxXDUdGpis=)
3: yffg1-eaO6Srh9Uv7AmqsK2NudM.roa (hash: kUfLwWzqj96wDEHYb/yvv+ZIOEIAJHX7rxwFZQvwJsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:6f:44:ba:ce:73:f9:f2:ff:3a:4d:43:b0:32:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Sep 10 14:01:16 2026 GMT
Not After : Sep 11 14:01:16 2026 GMT
Subject: CN=6007f5086c5520725bb0dab14a1c8d92e1dc899b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:60:1c:43:5d:57:28:53:ab:b6:d3:f7:d3:08:
76:7d:b0:ea:65:2c:a1:75:af:9b:42:c2:d9:4c:6d:
54:6d:5c:87:b8:62:ef:ee:4d:74:6f:26:36:c8:b3:
0b:4e:86:94:df:bd:73:11:c9:82:5a:3a:41:a3:41:
5d:58:b3:49:01:39:70:56:9f:8b:70:cd:9d:91:d6:
5c:61:b0:ca:cf:29:54:da:b4:15:79:ea:64:af:f5:
86:2b:a9:0a:75:0e:22:d0:eb:8f:56:1f:a8:d8:d1:
95:a1:72:9b:74:bd:65:0c:c3:14:7d:dd:a5:61:2d:
c7:09:f0:91:0c:75:1f:4f:81:e3:25:3c:dc:79:ea:
b7:a2:f3:f9:75:c4:ae:93:d4:b6:cd:b9:95:3d:4b:
a2:76:2b:43:97:85:c3:38:c3:b1:9e:78:30:a5:ee:
6c:5e:4a:fb:1d:f9:10:23:f5:d5:5a:f0:4f:8b:ad:
4d:5b:32:a5:3c:bc:5d:0a:a0:24:cf:07:5e:a2:fd:
a7:e4:a1:a4:50:1a:2e:9d:90:03:49:84:8f:c3:54:
1d:16:02:66:80:27:f9:4b:36:60:81:8e:17:78:13:
89:1c:a3:04:71:b5:72:01:62:4e:43:a6:ff:26:6c:
15:57:c4:bd:df:f5:dd:5f:0a:5b:9f:c2:3e:b2:44:
6d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:07:F5:08:6C:55:20:72:5B:B0:DA:B1:4A:1C:8D:92:E1:DC:89:9B
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e7:3e:dc:6e:4c:0b:5d:4a:f2:cc:8e:a9:6a:17:62:47:9f:
88:6f:cb:14:91:93:7c:b0:89:56:a9:bf:ea:f3:93:e2:a3:c1:
72:1d:12:0d:0e:41:c1:f7:30:57:d3:8a:e8:f2:c1:c3:53:74:
20:cd:9c:48:ab:af:02:bf:ca:ef:bd:24:87:8d:8f:76:0c:bd:
f7:6c:7a:0e:a2:41:87:5b:de:1a:b5:63:88:7e:09:20:18:3d:
b8:d3:9e:11:eb:10:5a:18:b6:1a:50:1d:87:6e:50:1a:73:c0:
21:03:1a:aa:55:66:16:8a:bf:da:e9:24:21:57:c6:7d:ea:69:
d0:0a:2c:58:9d:de:ce:db:e1:7f:75:2c:11:2e:2d:95:d6:65:
51:76:94:d4:eb:83:e7:d1:16:80:91:17:5d:cc:d0:44:c4:3c:
36:1d:41:1b:6f:2f:00:8d:a0:95:46:cd:fe:78:f0:a6:8f:f9:
10:ff:49:9b:af:be:69:9e:04:9b:18:eb:40:70:2b:db:a3:76:
68:1f:5d:8b:6e:14:d8:04:66:c8:f2:7c:0d:45:94:c1:66:ca:
5b:25:bc:e3:34:ee:c8:72:08:d1:e9:a0:56:3c:28:5f:1f:c1:
30:35:df:ed:44:ee:f3:43:eb:95:9c:4c:61:85:8c:de:b3:4b:
28:26:45:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:32:30 2026 by rpki-client