Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
File: LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft (raw, json)
Hash identifier: nj1JQwqf1/Goyh1KTDRkMS+v93MQV88FQAqjmW8wXk0=
Subject key identifier: 11:D2:1B:DB:5D:A4:43:3A:2E:0C:4A:25:6E:1D:C1:2A:7F:D6:01:F4
Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
Certificate issuer: /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Certificate serial: 01A16F49C8B173D9DBDBAEFC72D16790F3FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
Manifest number: 1AC1
Signing time: Sat 24 Oct 2026 19:01:08 +0000
Manifest this update: Sat 24 Oct 2026 19:01:08 +0000
Manifest next update: Sun 25 Oct 2026 19:01:08 +0000
Files and hashes: 1: 7SVxOyfDTdVmUsWmgURrDRQqatM.roa (hash: kbRt8SjM7r5zHztQmiuG8W05HbVb928re2uT+S2QpLY=)
2: IWFu4PcIHs7L8thEAkF3lVO_2XI.roa (hash: 4zilbczhiZchZfoj7btdnHaec0KUj97xB6CgD8W5sFw=)
3: LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl (hash: mSMgPCpEj5vwFMTa86MMttaZsnd2uloIdL1vYF97LIM=)
4: lDkFS134PLdNwq1XhPeVSuXWQw0.roa (hash: sWC1chnNML5lu5ldTASbLUnaff4GQPJ6rkXZBHVvz6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:49:c8:b1:73:d9:db:db:ae:fc:72:d1:67:90:f3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Validity
Not Before: Oct 24 19:01:08 2026 GMT
Not After : Oct 25 19:01:08 2026 GMT
Subject: CN=11d21bdb5da4433a2e0c4a256e1dc12a7fd601f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:6b:2f:cf:8e:bd:7c:46:16:15:43:78:6c:
33:e5:ff:3e:1d:cb:86:43:e0:13:c2:70:df:d6:9f:
dd:be:46:14:7c:fe:80:62:70:cc:12:40:66:a1:f9:
82:10:8d:4d:9b:4c:84:2d:c2:94:c5:0d:3b:ce:20:
79:73:69:b5:7f:4f:47:71:ea:85:eb:f1:5e:60:a5:
39:53:2c:b2:dd:c8:f6:04:66:cb:b4:85:36:f3:92:
01:54:b1:df:1f:3a:ce:63:e4:fb:75:4e:ec:b5:48:
fa:cb:b4:03:54:33:6e:78:b2:1a:1d:16:dc:89:99:
9a:eb:23:e3:8d:02:b3:8e:9f:ea:68:88:1d:43:fa:
73:32:cf:fc:8d:b7:79:d4:12:ca:8c:fe:68:db:40:
b5:d7:23:34:eb:a0:40:43:35:1c:61:82:44:b6:6e:
95:ca:86:97:d7:17:65:31:a7:4e:c5:ea:c2:e9:fa:
85:a6:ae:65:29:e7:74:eb:5c:67:e3:3f:2f:e4:ad:
3d:48:22:ce:52:1e:8d:24:07:0b:14:95:7d:9c:2f:
fb:d0:b3:60:41:a5:01:08:82:9c:ef:9d:f6:bd:9a:
ce:ac:d6:c6:6c:74:af:da:82:d6:e2:51:3b:35:3c:
6b:d0:6e:9e:d9:d2:0f:46:8d:4d:99:5b:33:db:48:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D2:1B:DB:5D:A4:43:3A:2E:0C:4A:25:6E:1D:C1:2A:7F:D6:01:F4
X509v3 Authority Key Identifier:
keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ce:3c:46:69:fd:ba:b9:18:09:4e:e0:4c:2b:44:dc:8b:6f:
da:9f:df:4c:1e:2e:99:0e:e8:b9:be:5d:bf:7a:f0:72:2b:67:
fb:cc:46:d4:b7:c5:18:dc:1a:cb:76:2e:0d:af:29:7e:54:4c:
d1:cc:1a:e6:c3:6e:80:06:a1:68:2c:1e:77:84:0a:b2:39:5e:
92:fa:6f:0d:17:c9:c9:c5:7d:fe:fc:50:81:71:21:d9:2d:02:
e4:84:db:39:2e:75:c1:c2:70:cb:4b:33:14:30:21:5c:c6:40:
89:71:14:bd:14:2b:67:98:6d:f9:8e:b3:5d:ab:68:c4:99:3c:
3f:f0:83:cb:dc:19:f1:be:02:c4:56:70:cd:98:da:82:fc:b2:
71:4f:1d:0b:87:f5:8d:a2:c1:d5:eb:71:2f:41:c3:ce:92:0e:
ef:75:84:bc:a7:e9:20:fd:82:bf:33:50:00:68:54:7e:a5:11:
cb:6c:b0:03:b5:a7:2b:bf:43:51:fe:79:0e:e1:47:af:bd:cf:
ba:7e:58:a8:39:c1:5b:bf:32:4b:31:2e:ed:fd:28:55:b0:f4:
50:f2:c7:87:b9:f8:81:35:db:00:0f:2c:7a:6f:60:5f:f5:2e:
3b:f1:12:de:c2:ff:00:76:63:97:3a:6c:53:f6:62:8a:75:f7:
e3:94:53:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:49:30 2026 by rpki-client