Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
File: lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json)
Hash identifier: L3tEytHCpfGWX0ubc8tL0FYXi3/DYQRCb6YnOXAHBf8=
Subject key identifier: DD:75:1B:07:CB:36:6E:FF:BC:9A:25:F6:54:9A:03:07:9F:76:1F:CC
Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Certificate issuer: /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Certificate serial: 019D38659A01196B3C364975E573E086545A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:01:15 +0000
Manifest this update: Sun 29 Mar 2026 07:01:15 +0000
Manifest next update: Mon 30 Mar 2026 07:01:15 +0000
Files and hashes: 1: 5Oaq_9l3ZmhaBOhjzGbGvS7HRKc.roa (hash: cXhkDcDKqif8H6682mKwtEo2AE55St9SA93gZ7arpO0=)
2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: tGMqJd+sPdE6Xr73DbOgLCohKK1Y9eERFqx8xYCl8ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9a:01:19:6b:3c:36:49:75:e5:73:e0:86:54:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Validity
Not Before: Mar 29 07:01:15 2026 GMT
Not After : Mar 30 07:01:15 2026 GMT
Subject: CN=dd751b07cb366effbc9a25f6549a03079f761fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:1f:af:25:a6:2e:3d:fd:4d:91:95:e4:2d:
42:71:0a:67:47:63:56:fa:71:0b:9e:7d:80:fd:7a:
6a:3e:96:02:71:06:35:0a:c6:03:75:91:6a:fa:c4:
88:3c:a0:e3:0a:6c:95:7e:7c:b6:d1:1c:a1:3e:4a:
7a:20:24:f2:81:92:7d:9b:28:d3:6a:aa:a5:c1:ad:
3f:95:a8:7f:50:a3:9a:4d:1d:7c:1c:05:70:f9:8e:
02:b6:92:de:70:96:eb:26:34:61:68:fd:30:e5:52:
0d:b2:38:a4:ce:13:36:36:b6:54:a9:53:3e:fc:0a:
0c:ae:e4:9a:ea:98:15:45:1b:b5:f5:6f:e9:c5:e9:
06:e6:04:43:c2:8f:1a:09:2c:de:58:30:72:32:b5:
a3:26:34:1e:c9:7b:61:11:88:51:d1:8d:7e:b1:bd:
80:8f:80:54:5c:0f:8a:8d:79:a6:c6:10:7f:7f:37:
6b:2e:87:93:fe:05:0d:4d:0d:6d:e4:86:d6:1a:23:
24:8f:ac:bd:60:53:95:06:38:1a:21:2c:17:25:a2:
1c:1b:a1:e6:a1:29:5c:cf:a9:2d:e5:f0:f5:30:31:
b0:01:2b:c3:a9:2b:b1:55:5e:72:6f:36:37:4e:0a:
26:91:bb:74:c2:db:3a:84:cc:f8:99:6e:7b:bb:b9:
b1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:75:1B:07:CB:36:6E:FF:BC:9A:25:F6:54:9A:03:07:9F:76:1F:CC
X509v3 Authority Key Identifier:
keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cf:46:75:21:cc:f9:85:91:c3:fb:66:3d:f7:b3:ec:cb:c5:
f2:09:38:e1:84:7f:6e:e8:ae:3f:22:20:88:e3:0c:6f:e5:cb:
06:fb:cc:7d:f2:71:c2:0a:58:7b:8a:f1:df:cb:34:52:e2:bc:
2c:eb:bc:dc:62:e2:87:27:0d:3c:d1:70:70:09:03:c7:93:b6:
a1:50:d7:22:aa:9b:33:30:21:fb:e3:ff:db:29:15:4c:a1:5e:
62:76:8c:3f:fc:7f:bf:62:14:33:da:e0:65:70:3a:ee:50:bc:
52:eb:36:b8:a8:96:24:fa:77:58:99:2b:c6:dc:99:a0:ba:4a:
97:d1:b3:a3:d5:12:2e:8e:c6:27:7f:19:89:90:c8:c0:9d:e9:
05:83:da:2f:1f:87:18:27:c4:bf:14:34:20:7b:92:2e:6c:4f:
10:e0:70:d2:21:4a:85:09:f4:4e:d0:96:ad:76:44:82:e1:d4:
a8:d5:49:c3:1f:be:df:e1:e2:8a:2c:85:37:d6:60:e9:b4:b0:
75:75:d1:08:db:3c:25:c7:ac:a2:76:77:55:33:7c:c4:8c:89:
8b:3a:d6:7d:1f:72:69:14:13:db:80:9c:6d:8a:d7:5c:55:50:
df:e9:bb:83:0c:b6:1f:b6:e6:d1:da:92:7a:d5:1d:30:2e:39:
29:12:ba:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZZoBGWs8Nkl15XPghlRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NmFmYzE0ZDRhMTlhN2MyYzE2OGViMmM4MWQ1NjIyYjMw
MTQ5ZWIwHhcNMjYwMzI5MDcwMTE1WhcNMjYwMzMwMDcwMTE1WjAzMTEwLwYDVQQD
EyhkZDc1MWIwN2NiMzY2ZWZmYmM5YTI1ZjY1NDlhMDMwNzlmNzYxZmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjkfryWmLj39TZGV5C1CcQpnR2NW
+nELnn2A/XpqPpYCcQY1CsYDdZFq+sSIPKDjCmyVfny20RyhPkp6ICTygZJ9myjT
aqqlwa0/lah/UKOaTR18HAVw+Y4CtpLecJbrJjRhaP0w5VINsjikzhM2NrZUqVM+
/AoMruSa6pgVRRu19W/pxekG5gRDwo8aCSzeWDByMrWjJjQeyXthEYhR0Y1+sb2A
j4BUXA+KjXmmxhB/fzdrLoeT/gUNTQ1t5IbWGiMkj6y9YFOVBjgaISwXJaIcG6Hm
oSlcz6kt5fD1MDGwASvDqSuxVV5ybzY3Tgomkbt0wts6hMz4mW57u7mxmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN11GwfLNm7/vJol9lSaAwefdh/MMB8GA1UdIwQY
MBaAFJZq/BTUoZp8LBaOssgdViKzAUnrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG1yOEZOU2htbndzRm82eXlCMVdJck1CU2VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xZjdjOTgtMThhYS00N2Q4LWFiNDEt
MTE2MWVkYjliZjBlLzEvbG1yOEZOU2htbndzRm82eXlCMVdJck1CU2VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xZjdjOTgtMThhYS00N2Q4LWFiNDEtMTE2MWVkYjliZjBl
LzEvbG1yOEZOU2htbndzRm82eXlCMVdJck1CU2VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATs9GdSHM
+YWRw/tmPfez7MvF8gk44YR/buiuPyIgiOMMb+XLBvvMffJxwgpYe4rx38s0UuK8
LOu83GLihycNPNFwcAkDx5O2oVDXIqqbMzAh++P/2ykVTKFeYnaMP/x/v2IUM9rg
ZXA67lC8Uus2uKiWJPp3WJkrxtyZoLpKl9Gzo9USLo7GJ38ZiZDIwJ3pBYPaLx+H
GCfEvxQ0IHuSLmxPEOBw0iFKhQn0TtCWrXZEguHUqNVJwx++3+HiiiyFN9Zg6bSw
dXXRCNs8JcesonZ3VTN8xIyJizrWfR9yaRQT24CcbYrXXFVQ3+m7gwy2H7bm0dqS
etUdMC45KRK6Ag==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:45 2026 by rpki-client