Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
File: LMJf8ykY8LSTBiWdSDr7njgaORU.mft (raw, json)
Hash identifier: Q3pUvbCJboL0o0pzRtjpPvsAaRPSCxOU+iR1I0SWHo0=
Subject key identifier: CC:2E:DE:09:77:BE:95:5B:85:CC:3E:6F:28:3C:AD:39:13:EF:84:8B
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial: 01A08AC3C7A967BFE22C559192927D6F575B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
Manifest number: 1A54
Signing time: Thu 10 Sep 2026 10:01:21 +0000
Manifest this update: Thu 10 Sep 2026 10:01:21 +0000
Manifest next update: Fri 11 Sep 2026 10:01:21 +0000
Files and hashes: 1: LMJf8ykY8LSTBiWdSDr7njgaORU.crl (hash: 7wKsM1F60DZgsZ+iZ6DaPEEui6bXNsHAo9gvPWVu2ww=)
2: kwn4ZdvrIv6hl400pgtVWpsd9lk.roa (hash: eyoTNP4CeFTLuxttmf6toqGd/JyyxtdCqToHMpNrH6E=)
3: oCe9xKAx3gPI7iUETaqklwJOVSg.roa (hash: Hl/RVZt4ha0REz41RabhXwcOue4AeE9NninK5nqE8vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:c7:a9:67:bf:e2:2c:55:91:92:92:7d:6f:57:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
Validity
Not Before: Sep 10 10:01:21 2026 GMT
Not After : Sep 11 10:01:21 2026 GMT
Subject: CN=cc2ede0977be955b85cc3e6f283cad3913ef848b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:e8:db:58:56:ea:ec:a5:7a:d4:f1:59:d5:
82:e1:ec:cc:6f:b0:fc:fc:7c:30:0b:04:ef:19:b5:
49:37:47:c2:f6:43:6a:74:4c:3b:41:33:ca:3f:84:
6e:55:83:29:c5:11:36:37:86:e4:33:6a:1c:04:4b:
5a:68:ee:c0:a7:be:fd:e0:a3:11:44:1a:df:5f:ba:
2d:81:aa:34:9d:bf:86:95:aa:16:a7:72:4b:c9:74:
3d:52:fb:0d:3e:61:d5:3e:64:86:5e:13:74:44:0f:
69:76:67:b6:d2:fb:99:ed:1e:a7:88:e3:4c:97:0a:
e5:6d:3d:63:09:bb:6f:fa:3d:bb:34:8a:73:4f:5e:
84:34:c7:97:5f:73:33:3d:e1:9f:61:45:b3:a5:4b:
bb:55:75:0d:2f:23:a7:1f:86:55:b2:cc:21:1f:cc:
22:90:56:7b:77:37:a0:cf:8e:ac:74:43:fd:df:e8:
a5:ac:d1:8a:c8:0e:97:4b:2d:fe:ea:03:ff:e7:4f:
d3:b4:a7:51:5c:c3:08:9f:fe:cb:91:d9:01:04:16:
e1:b5:f6:7a:cd:d3:56:fe:0a:e9:ec:90:c0:33:c3:
2e:4c:8a:61:ef:87:e5:79:96:b9:d6:0c:4d:2b:6a:
ea:3b:be:ab:a9:03:31:8a:f0:4d:dd:21:9a:3f:97:
ee:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2E:DE:09:77:BE:95:5B:85:CC:3E:6F:28:3C:AD:39:13:EF:84:8B
X509v3 Authority Key Identifier:
keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ce:f3:5a:48:9e:a8:1f:46:e7:35:6d:28:3c:47:f7:9c:8a:
a8:63:f6:aa:d4:50:5e:96:5f:df:43:18:14:d1:b0:fd:54:d4:
9f:db:9e:0c:fe:f9:7a:0c:1e:ad:1c:4e:3f:49:0e:4d:5b:3f:
5e:74:74:1c:c8:7d:d7:ba:69:ce:58:57:97:a7:b8:44:e5:5c:
76:d3:ae:fb:5a:6f:c8:02:d8:87:7d:e5:a1:49:86:a7:0e:fc:
86:d7:0c:d1:5c:7b:44:70:81:56:08:7f:87:fb:dd:20:c2:06:
72:4c:be:63:e3:f6:64:eb:d1:5d:62:81:c5:6a:44:66:e7:d4:
5f:a4:4f:14:56:14:58:a9:06:02:1b:15:f8:34:0a:aa:ef:56:
6d:c4:02:92:e0:62:58:1c:6e:cf:3e:a0:e7:cc:57:9b:7c:e3:
97:f3:59:f8:0b:cb:9a:7e:f4:09:c2:c5:24:46:a7:b9:78:5c:
6c:d0:e0:0f:5f:e7:e6:72:0f:4f:84:f9:a2:9a:47:e3:6c:65:
60:99:03:ce:98:a8:1f:62:d9:7f:f7:04:a7:9f:ed:dc:3e:59:
88:5c:d4:60:1d:7d:0c:4a:d7:c7:0d:b1:b1:19:7c:fc:f0:80:
bf:4a:fd:d1:84:9f:2d:dc:b6:4b:23:56:b3:29:3d:a0:ba:03:
56:80:4c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:51:44 2026 by rpki-client