Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: Rzdqns0VFEpnl1iGY8kRL28asOKUOQ8df6db8InAJzE=
Subject key identifier: F9:86:8B:33:11:04:E2:4B:B0:60:C9:85:A3:37:94:8A:9A:FB:B8:B1
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 01A02CC70D29339ECA7421199336C97311F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 0FDF
Signing time: Sun 23 Aug 2026 04:00:37 +0000
Manifest this update: Sun 23 Aug 2026 04:00:37 +0000
Manifest next update: Mon 24 Aug 2026 04:00:37 +0000
Files and hashes: 1: 5qdQSXMecDihyNRRqtb0g1GYQQM.roa (hash: TGfWFcxitE8Z9AQAzw+iDeKkGzeTKjsma5tXWrC3vTk=)
2: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: rMXhdA4SfSHosUclZXgEVJwCXpdPk74noEKQwYT0nCY=)
3: RJ4Jr5ARvg8uzwT__ax2jQCYRoU.roa (hash: iIWthZznSIIagTpHDFsUxljMcVGImDYRq7Y0D9Bst2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 02:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2c:c7:0d:29:33:9e:ca:74:21:19:93:36:c9:73:11:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Aug 23 04:00:37 2026 GMT
Not After : Aug 24 04:00:37 2026 GMT
Subject: CN=f9868b331104e24bb060c985a337948a9afbb8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:83:0f:7f:9c:87:04:29:6d:0a:d4:03:7a:
2d:2f:19:0d:2f:5b:e0:d8:b9:9f:0c:29:00:51:6a:
21:a9:9c:5a:a4:44:99:68:09:f1:12:56:59:3e:74:
af:8d:0d:5d:b7:e3:36:27:bb:40:65:96:9d:ab:ae:
72:db:59:55:e0:77:44:77:e9:f6:f8:73:d3:f6:b1:
42:39:ad:cb:5d:61:2c:a4:9f:45:89:2c:9e:ec:da:
75:4f:03:28:e4:f3:12:cd:50:fa:f9:af:0e:6a:b0:
fc:1d:f5:ff:e5:4b:3a:b4:04:83:dc:c0:e0:13:52:
ab:eb:12:81:a7:c9:f5:80:5e:52:d7:18:1b:57:90:
4a:9c:0c:c4:e3:09:60:5f:88:fb:29:48:75:a3:0b:
ac:ee:a3:2b:f8:e0:47:7d:2c:33:bb:e4:76:87:09:
06:f4:6c:d8:b9:38:10:37:03:d3:23:10:42:73:d8:
cb:11:06:48:82:c9:3b:36:97:09:1e:7b:6b:6e:25:
2d:24:ee:ce:09:95:c9:6b:54:68:fa:dc:e0:41:51:
e6:86:51:ad:e4:a6:c8:64:2a:98:3e:dc:55:f4:ac:
b6:0b:f3:3e:41:f8:9f:19:0a:0f:4b:4d:ea:ee:11:
b6:30:51:60:ed:a4:ad:58:e6:c4:e4:1b:00:da:66:
be:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:86:8B:33:11:04:E2:4B:B0:60:C9:85:A3:37:94:8A:9A:FB:B8:B1
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:27:bf:1a:3e:5e:2c:5c:52:0a:fa:71:8f:cc:be:a1:87:1f:
53:3a:73:5e:c1:3a:d9:11:e6:f7:8e:15:c3:b5:5c:05:52:05:
7d:dd:c4:61:64:93:bd:6e:83:f3:be:79:6d:30:06:43:b9:e8:
5c:28:4e:ae:b9:57:49:b4:c5:90:db:ef:4b:69:f6:8d:e2:83:
15:32:7f:29:fd:a5:94:a8:56:77:5a:88:92:1f:92:ac:b1:5a:
4e:25:95:89:a9:a4:46:75:fc:7e:19:8b:e3:0e:03:ed:06:ec:
3a:66:2b:99:cf:fa:b2:52:f0:74:39:40:92:c6:00:4f:6c:0f:
bd:83:e9:62:d5:18:0d:b0:65:0a:9c:98:d9:ee:7d:3d:01:49:
a3:44:5c:3d:24:67:4f:9d:af:ea:8a:37:ac:5e:10:d5:58:91:
db:e0:44:57:7b:d3:88:ca:3a:a7:12:06:bb:c5:55:6d:56:ec:
43:d6:f6:f6:57:d7:b1:e4:67:30:75:f5:9d:ec:53:69:24:cc:
10:65:65:c9:e9:5f:69:e6:11:eb:7e:80:50:b9:2b:6c:11:6f:
39:cd:d5:27:d4:45:ba:f0:e3:b5:bd:f7:65:6c:18:d9:00:20:
40:76:f3:80:48:79:eb:93:c1:fc:38:94:d5:69:5a:d3:b7:75:
83:91:7c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:16:31 2026 by rpki-client