Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: 1p0HPV17Qtrs3v4Ey85TR132jVPSKjufro57L9d0ja0=
Subject key identifier: FE:1D:2B:DB:D8:E6:35:E5:CF:FC:44:DA:BD:43:B2:51:A2:97:2D:C8
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 019EBA3482F5C5A6725721DA269587E93C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 192B
Signing time: Fri 12 Jun 2026 05:01:03 +0000
Manifest this update: Fri 12 Jun 2026 05:01:03 +0000
Manifest next update: Sat 13 Jun 2026 05:01:03 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: R+z6rgR+vRu9IFV8pptLqVp2DJRASlGpKhnXYEtN4Lg=)
2: tDm7AUYKyf97YOJJKUiWr2Dgcg4.roa (hash: /UBoh/wJ/dh6DjZ66cH1C2Cr/EgD7L8aiIxXDUdGpis=)
3: yffg1-eaO6Srh9Uv7AmqsK2NudM.roa (hash: kUfLwWzqj96wDEHYb/yvv+ZIOEIAJHX7rxwFZQvwJsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:82:f5:c5:a6:72:57:21:da:26:95:87:e9:3c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Jun 12 05:01:03 2026 GMT
Not After : Jun 13 05:01:03 2026 GMT
Subject: CN=fe1d2bdbd8e635e5cffc44dabd43b251a2972dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:66:72:0f:49:38:ca:4d:3f:25:0c:a4:1f:
51:4c:98:99:24:c5:97:c7:dc:48:46:f3:3e:34:ee:
dd:59:2f:b1:e1:74:ca:37:49:90:60:86:cd:aa:85:
58:a7:20:34:e9:d9:85:0e:57:6c:cc:d0:16:8c:ef:
24:dd:e1:f9:82:65:15:07:23:83:bf:70:60:57:21:
cc:e1:94:bd:8d:dd:4b:ba:49:80:1b:f6:e8:a2:6c:
4c:d9:57:31:75:53:c7:d6:6b:60:ce:26:7a:b2:24:
61:1c:d4:f4:3d:03:c9:5d:a7:00:45:4b:d8:e6:18:
25:d0:5f:31:33:2c:2f:00:4e:a4:84:64:26:8f:ec:
6e:00:70:2b:ae:0b:90:90:13:9d:17:06:14:b2:61:
da:12:dd:53:c6:b4:ba:29:65:c2:7e:53:b1:e6:c8:
35:84:1e:86:79:3d:23:1c:88:00:83:8c:7f:43:a6:
c8:34:16:eb:f1:a6:05:e0:bc:c3:2e:c2:a2:14:3e:
63:3f:e5:9b:2c:e9:80:e7:5b:e1:30:aa:f7:85:c3:
96:2e:96:89:5b:52:f6:0e:ef:6b:0b:8f:55:5c:67:
86:9e:15:d8:a1:7f:aa:d4:4a:0c:24:4e:9a:5f:a4:
ac:f2:ae:e8:75:f4:44:3a:81:8f:c3:0e:d5:71:9e:
27:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1D:2B:DB:D8:E6:35:E5:CF:FC:44:DA:BD:43:B2:51:A2:97:2D:C8
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:2f:cf:21:2f:41:a4:ce:9a:06:d8:30:a2:14:4b:ab:f9:e7:
23:14:d9:f8:7d:3b:76:d0:66:c4:e4:59:74:93:9e:ac:db:9b:
85:bc:73:98:a0:0d:e0:0e:5f:4d:85:07:7f:67:0d:ae:ea:97:
33:82:f8:d7:85:81:5a:91:25:ad:07:7f:91:27:54:7f:f0:79:
3b:e2:3b:4c:35:93:ab:4e:e8:6e:a8:1d:bf:cb:25:97:b6:5e:
b1:f8:a1:33:35:77:54:34:aa:fc:c7:ab:b5:09:6e:05:e5:f2:
5e:70:e9:49:c0:69:9d:4f:2b:c7:a4:fc:9e:ed:c1:c9:cd:d4:
e4:02:3a:b4:a2:39:d1:3a:1f:23:2f:65:9e:80:28:93:18:06:
1e:66:47:3c:80:87:a3:7a:1d:7e:9c:41:f9:2f:72:3f:95:e1:
dc:93:53:28:95:db:3e:80:f0:0b:0d:05:62:7d:6a:ee:0e:6b:
d7:a5:85:d1:42:a4:63:dd:ba:d7:6d:63:47:ad:83:8a:2b:54:
9e:ed:7a:94:f9:23:a9:b9:dc:28:20:08:d9:20:ad:be:24:c1:
2b:bd:03:f6:99:72:20:1d:c4:50:dd:27:63:59:09:61:67:27:
9f:54:72:ec:ca:73:01:2a:ab:a0:14:00:28:d5:bb:6e:04:57:
fa:84:9d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 14:12:39 2026 by rpki-client