Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
File: LMJf8ykY8LSTBiWdSDr7njgaORU.mft (raw, json)
Hash identifier: 648xYWMAxwd9Au095nkdGAklGy8eb83xLT8D0mk05rM=
Subject key identifier: CC:75:3A:74:72:2B:70:9B:11:E0:9E:E1:CD:0D:5E:3F:E1:16:EC:C1
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial: 019CE5FEE7A0F1550B6D39CD9A432614093E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
Manifest number: 1870
Signing time: Fri 13 Mar 2026 07:00:13 +0000
Manifest this update: Fri 13 Mar 2026 07:00:13 +0000
Manifest next update: Sat 14 Mar 2026 07:00:13 +0000
Files and hashes: 1: LMJf8ykY8LSTBiWdSDr7njgaORU.crl (hash: hi5nsSgLyF4ozB3FZ7EJ3Kf7bwbgGge4r+daomXnORk=)
2: kwn4ZdvrIv6hl400pgtVWpsd9lk.roa (hash: eyoTNP4CeFTLuxttmf6toqGd/JyyxtdCqToHMpNrH6E=)
3: oCe9xKAx3gPI7iUETaqklwJOVSg.roa (hash: Hl/RVZt4ha0REz41RabhXwcOue4AeE9NninK5nqE8vY=)
4: r5nJTgvmGErgj92PgnmHG4Q55HQ.roa (hash: 6MNQfyzaahoWRGsiDwsnjFka/uy5pB/S92sxE6Waevs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:fe:e7:a0:f1:55:0b:6d:39:cd:9a:43:26:14:09:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
Validity
Not Before: Mar 13 07:00:13 2026 GMT
Not After : Mar 14 07:00:13 2026 GMT
Subject: CN=cc753a74722b709b11e09ee1cd0d5e3fe116ecc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5e:b4:f4:29:94:65:46:4b:ae:97:fc:42:51:
3f:0c:ce:83:8c:40:0a:37:68:90:66:ca:78:6a:a3:
18:87:79:45:ff:5c:ff:16:b7:94:ca:4a:6a:05:29:
d0:8a:63:d9:5b:8c:4b:46:4c:a2:b2:8a:c9:77:bc:
b7:37:e1:e7:ec:f8:12:49:05:db:2f:41:51:77:7c:
03:f1:aa:84:9d:2b:18:6f:ad:f5:75:8d:97:84:f5:
03:5c:e3:ea:09:a6:ff:c1:85:2d:41:b8:26:e8:32:
44:a5:37:d0:43:6e:36:b0:92:6e:85:91:b0:d7:70:
63:ca:f1:9d:d3:49:fa:da:c0:64:41:49:9e:14:2f:
54:ff:3e:9f:fd:2f:b1:65:4a:84:54:9e:71:04:31:
52:d8:81:be:ad:1d:7b:85:35:f5:f1:79:6b:f7:09:
5f:6e:d9:db:ff:e6:46:13:76:36:d6:c0:94:e3:64:
34:30:ba:b8:82:6e:8f:83:5b:05:71:1f:4f:34:20:
f5:a1:3a:da:81:26:97:8f:94:50:15:e5:77:ed:b0:
ee:2e:e1:54:10:07:ba:16:88:db:65:e2:f4:aa:1b:
67:fc:b6:be:42:1e:29:1a:77:eb:7e:9a:a0:05:1b:
a9:7c:fe:79:e2:12:84:92:e1:9c:da:a8:f9:a2:8b:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:75:3A:74:72:2B:70:9B:11:E0:9E:E1:CD:0D:5E:3F:E1:16:EC:C1
X509v3 Authority Key Identifier:
keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e5:2d:ba:da:50:7d:eb:80:31:67:35:7f:d0:69:14:b9:89:
63:b6:73:e7:a5:55:d5:e6:d9:06:ce:b4:cb:d1:ab:8f:8b:bd:
3e:79:74:ab:01:eb:46:12:d7:18:c7:00:88:83:4a:45:d5:72:
cd:2e:4f:58:b3:ce:49:8d:58:e3:b6:06:3d:c5:43:45:9c:ca:
e5:c0:27:7d:5d:98:6d:f2:5f:41:42:0f:f1:0f:2c:e5:79:57:
bf:d2:3a:a7:54:52:53:07:02:9f:b7:1a:cb:32:da:17:58:53:
95:ff:d5:72:87:2d:82:16:7b:20:fe:13:55:87:b8:ab:aa:13:
0a:1b:60:13:47:f2:26:c9:cd:34:51:f4:00:3f:0d:46:fc:6f:
d2:de:cf:98:3a:7b:95:d9:f4:82:0d:00:8e:36:d5:1e:e8:a8:
c1:7c:2c:69:87:ce:f3:4c:f7:94:42:72:e0:56:2d:bf:ab:0a:
19:f5:2b:b5:c0:bd:f3:cf:1c:39:ca:a5:ab:5c:67:aa:89:26:
11:46:94:f9:15:32:a8:5d:ca:df:86:53:b3:a7:14:cd:ca:a3:
be:47:9b:35:27:b5:01:3b:6e:43:a3:7c:b9:67:23:1d:d2:41:
10:c8:5f:e8:a0:8d:17:5e:c7:5d:bb:5b:40:f5:05:92:db:40:
85:bc:62:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:45:44 2026 by rpki-client