Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: p5k67183sAgdWQVipaROiWgFTTYRrRZouzwP29KW7I8=
Subject key identifier: 60:89:AE:28:44:0C:21:75:01:FD:F8:22:1E:2C:20:F1:4C:2D:76:F4
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 019F3F3E3C02AE1E0ED2C5632CE5A9DE0153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 0F64
Signing time: Wed 08 Jul 2026 01:01:10 +0000
Manifest this update: Wed 08 Jul 2026 01:01:10 +0000
Manifest next update: Thu 09 Jul 2026 01:01:10 +0000
Files and hashes: 1: 5qdQSXMecDihyNRRqtb0g1GYQQM.roa (hash: TGfWFcxitE8Z9AQAzw+iDeKkGzeTKjsma5tXWrC3vTk=)
2: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: skrsdxrZzrCAqZ6hY6WxNaTHWt8R/KuR3d6DxnwclCM=)
3: RJ4Jr5ARvg8uzwT__ax2jQCYRoU.roa (hash: iIWthZznSIIagTpHDFsUxljMcVGImDYRq7Y0D9Bst2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3f:3e:3c:02:ae:1e:0e:d2:c5:63:2c:e5:a9:de:01:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Jul 8 01:01:10 2026 GMT
Not After : Jul 9 01:01:10 2026 GMT
Subject: CN=6089ae28440c217501fdf8221e2c20f14c2d76f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:c4:28:c7:8e:60:ac:dd:84:72:d2:8c:3b:
1e:4d:74:d6:01:1f:1a:11:65:e5:98:31:fb:4b:a6:
88:6a:ef:36:c2:2b:34:0c:7f:a8:7a:ad:7d:7f:ef:
b2:cc:6e:0f:46:56:36:68:21:5c:69:2b:ba:1c:a9:
65:c8:0c:6a:f2:1f:49:32:58:1a:3d:2b:c0:6d:bb:
65:77:b4:9e:f9:82:d4:63:2d:a0:db:17:f2:51:e3:
8c:ea:78:f8:ce:36:f2:ce:ef:c9:82:9c:b8:34:ad:
81:30:2f:7a:a0:5b:a7:22:3e:97:60:a6:f1:30:db:
21:94:0b:22:18:07:82:f7:23:34:5d:08:ac:a6:96:
7a:8d:e4:96:da:35:f6:17:5f:e4:cf:0b:b8:93:28:
d5:18:46:fc:8b:8c:f5:65:93:c7:69:14:c8:dc:a3:
7d:90:3d:75:a2:f7:93:db:b6:b7:43:9b:44:d7:6a:
c9:f6:8b:b9:b4:d8:0a:d1:60:b3:93:83:6e:e0:a9:
96:35:98:e5:50:90:75:22:2a:8a:88:b9:1d:51:1f:
c2:77:33:b8:be:2a:e1:0a:65:2c:53:db:0f:94:f7:
2d:ed:5f:e9:0c:75:e2:93:5d:3f:63:ea:14:cf:7a:
74:be:7f:ac:95:21:6c:b7:a0:b6:02:2c:5d:4a:e1:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:89:AE:28:44:0C:21:75:01:FD:F8:22:1E:2C:20:F1:4C:2D:76:F4
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b4:14:bc:35:07:7e:9d:fc:89:50:64:92:ba:0b:1c:4a:44:
ae:e0:e1:e1:67:40:39:e4:95:70:a1:00:b6:3d:c9:2d:2e:4f:
82:d0:2f:8f:e6:81:12:0c:2f:e4:c5:19:fc:bf:48:95:21:44:
13:3a:da:53:63:56:4d:45:91:27:12:8d:c6:f9:23:57:e1:99:
1e:1c:6c:ec:30:83:d8:aa:c8:a9:2c:01:22:2c:35:56:e2:2b:
21:49:c7:e2:f2:b9:0e:a1:bc:df:08:b1:78:16:81:24:75:c7:
83:4a:6d:3e:2c:e4:b1:d9:c5:06:58:00:ba:2f:26:64:42:21:
84:c5:41:d5:4f:06:d3:27:e8:72:89:64:67:07:6c:6f:1a:f7:
2e:40:53:83:a2:3c:b5:17:e4:05:d6:da:37:be:ad:45:9f:b6:
c9:b6:65:09:f2:ba:af:d8:65:c7:4f:d4:41:1e:70:73:d4:47:
f4:49:a8:43:d2:54:02:25:9c:84:53:cd:3d:24:d1:b1:b1:2f:
0b:db:ae:d3:7e:4a:81:b7:ed:95:68:48:b5:3b:c9:00:5f:b1:
23:2a:ed:37:29:33:e6:0b:4c:0b:86:63:66:7d:82:3a:c7:3a:
29:dc:fc:ba:2c:ec:b7:14:f5:62:d3:6a:49:67:b6:1f:25:07:
0b:f6:dc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 09:11:29 2026 by rpki-client