Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/LNmYMWn5YKDsQR3xdAWb3PvsgTI.mft
File: LNmYMWn5YKDsQR3xdAWb3PvsgTI.mft (raw, json)
Hash identifier: Kx8U0DV6xi35OZhPntbdy4OmjDP63YGncLSHgIZHOko=
Subject key identifier: 83:C4:9A:76:BD:23:60:59:E6:60:A2:24:4D:D8:7E:BC:73:44:DB:61
Authority key identifier: 2C:D9:98:31:69:F9:60:A0:EC:41:1D:F1:74:05:9B:DC:FB:EC:81:32
Certificate issuer: /CN=2cd9983169f960a0ec411df174059bdcfbec8132
Certificate serial: 01A15365DFADD059B1F1EA814B1E75D2205B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNmYMWn5YKDsQR3xdAWb3PvsgTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/LNmYMWn5YKDsQR3xdAWb3PvsgTI.mft
Manifest number: D3
Signing time: Mon 19 Oct 2026 09:02:27 +0000
Manifest this update: Mon 19 Oct 2026 09:02:27 +0000
Manifest next update: Tue 20 Oct 2026 09:02:27 +0000
Files and hashes: 1: 0KmL6ugVu_s2lCFhD_ucS5LEQac.roa (hash: ebjMnj+HmBBRlcrIvqq7kyulxu1LH6vzgpeSwsSWuBc=)
2: 9MqVNUZkLF8qRvs05wy7QA1yJvs.roa (hash: 47XWmVQqILhCQ9ObE1/3GyuSK2LFdfhVQnx89P9zW5s=)
3: Eyy0e9AUOu6E0GLm6Avmy16177k.asa (hash: Ne4FEdW/fVlbAQzBfyetsJMmus7yWY1QlY1cVzrqE/s=)
4: LNmYMWn5YKDsQR3xdAWb3PvsgTI.crl (hash: xz832YnNsaZOoCgEQMs6s68dZOQBj9VdqOc8Lmz/0O4=)
5: eU8knBrv6CtLdOkcXTIWld4bJdM.roa (hash: 0xT4vRgU22+4fjdxxogH0BmoN4al/lT/KsPmMpP6+5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/LNmYMWn5YKDsQR3xdAWb3PvsgTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/LNmYMWn5YKDsQR3xdAWb3PvsgTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNmYMWn5YKDsQR3xdAWb3PvsgTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:65:df:ad:d0:59:b1:f1:ea:81:4b:1e:75:d2:20:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9983169f960a0ec411df174059bdcfbec8132
Validity
Not Before: Oct 19 09:02:27 2026 GMT
Not After : Oct 20 09:02:27 2026 GMT
Subject: CN=83c49a76bd236059e660a2244dd87ebc7344db61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:c3:40:67:3c:22:74:64:81:02:b2:2e:f3:
0e:36:13:06:58:31:0d:67:ee:5f:fb:9f:03:53:b9:
df:63:19:5f:42:fc:41:a2:21:54:3d:86:cd:85:bd:
bf:13:14:02:97:74:86:04:70:3b:6d:35:80:42:28:
cb:fd:ba:a8:d9:39:c4:8a:c7:5f:a2:35:38:39:ed:
7e:09:5d:38:6c:12:4d:14:fa:e8:2a:da:ff:83:e8:
6d:ea:c5:41:14:37:38:28:6b:41:de:98:c8:78:90:
86:52:b1:8e:d2:b7:1e:78:c3:e9:1a:f8:39:45:42:
ea:a2:eb:3a:b0:d2:81:25:01:a8:75:f6:a6:0c:07:
89:97:41:08:58:c7:cf:cb:45:bb:d7:f6:5d:9f:77:
00:fc:12:a7:65:dd:e7:37:29:35:5e:6d:95:5c:ff:
6c:77:c1:14:83:21:d7:ca:45:07:f7:f8:d8:0f:9c:
fc:45:cc:57:0d:95:1c:6e:ab:5f:e0:4d:a0:e0:d9:
88:64:18:ab:53:c7:d6:6f:41:d7:83:c1:01:26:60:
9e:3c:a7:d9:c2:22:96:01:c5:c0:77:a8:c5:cd:9e:
bf:a1:59:88:26:d3:9a:50:45:8c:36:b4:cb:e0:db:
c5:19:3c:09:02:62:23:48:c4:b0:73:3c:23:d3:a8:
08:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C4:9A:76:BD:23:60:59:E6:60:A2:24:4D:D8:7E:BC:73:44:DB:61
X509v3 Authority Key Identifier:
keyid:2C:D9:98:31:69:F9:60:A0:EC:41:1D:F1:74:05:9B:DC:FB:EC:81:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNmYMWn5YKDsQR3xdAWb3PvsgTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/LNmYMWn5YKDsQR3xdAWb3PvsgTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/LNmYMWn5YKDsQR3xdAWb3PvsgTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ec:f1:05:98:71:09:f9:e7:7f:64:f5:d4:91:f2:48:e1:09:
ca:51:de:97:15:84:9d:44:fb:b5:fc:09:48:a9:ec:32:d1:0e:
b2:df:a1:c6:f1:b6:ff:ce:bd:e0:dd:0b:76:d4:03:1a:fe:99:
5a:36:4f:a4:da:91:a5:7e:09:59:97:b9:89:17:9d:03:f6:e8:
8d:5e:f6:b9:1f:8a:78:72:a7:25:02:e3:02:a9:96:a6:4a:5d:
82:55:27:45:f9:ca:62:89:6a:1d:6e:22:a3:57:81:e3:11:b0:
55:fa:9a:f7:53:01:9d:99:0e:30:c6:e9:80:de:e7:06:41:7e:
a9:65:3b:3e:06:a9:a9:25:3c:2a:c0:ca:df:9b:9d:d5:b7:51:
db:58:dd:c1:99:43:cd:84:2e:85:3e:0a:fc:31:56:bc:de:85:
20:ae:ac:77:a8:f7:0b:49:aa:b8:e6:ef:ac:2f:24:79:dd:fd:
14:95:9f:06:46:b2:dd:e9:de:36:da:e5:1d:c4:ab:6a:7b:96:
9c:73:a3:3e:bf:df:f9:75:a0:3d:7e:3c:99:41:ca:f0:02:78:
57:b1:06:a1:16:6d:12:91:e5:8c:f6:9d:54:7a:46:f7:ab:5e:
4c:16:38:e4:57:68:57:21:b6:5c:f0:32:3c:1e:c4:2a:8b:f1:
c9:8d:71:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:43:18 2026 by rpki-client