Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
File: LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft (raw, json)
Hash identifier: XWHCKqpmU9S06Ib6OwRcjY1z/DP6Po+9HDSwM482cZs=
Subject key identifier: 92:7A:A8:A5:C1:A4:A1:60:35:DC:F4:EE:EE:81:C4:CA:16:95:BC:1B
Authority key identifier: 2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
Certificate issuer: /CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Certificate serial: 019D273ADF000620D2D66862F926C3E15F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:01:02 +0000
Manifest this update: Wed 25 Mar 2026 23:01:02 +0000
Manifest next update: Thu 26 Mar 2026 23:01:02 +0000
Files and hashes: 1: LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl (hash: MP0pwk+0ptB1F0+3IERmTH7/aFA3jcN0Up3fMZWmyoo=)
2: iH-W1KrCxFHlEwTj-N3qmKRJjJM.roa (hash: KY2lJTniA4rnCiE0KdvRBg56MPlz79jziBGeziSB/MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:df:00:06:20:d2:d6:68:62:f9:26:c3:e1:5f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Validity
Not Before: Mar 25 23:01:02 2026 GMT
Not After : Mar 26 23:01:02 2026 GMT
Subject: CN=927aa8a5c1a4a16035dcf4eeee81c4ca1695bc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6b:1d:59:a3:59:e0:b2:7d:6d:75:5c:aa:19:
52:68:d7:7d:68:98:18:d5:d7:e9:ea:fc:9e:c0:e2:
b7:24:0c:b1:22:62:31:42:60:dc:44:73:33:01:00:
33:d6:4a:1f:59:dc:86:24:c5:d1:aa:7e:fc:11:e3:
39:a3:0a:f3:00:c8:a7:11:10:d9:a8:ac:dc:1b:c5:
90:05:72:b1:1e:c5:cc:d0:5a:eb:cf:1e:b7:92:1c:
94:48:fc:dd:e0:8e:ee:75:ad:8b:1f:2f:eb:ea:4a:
e9:2a:79:c9:d4:17:1c:dd:93:45:10:b8:a7:44:69:
84:50:fa:34:7c:28:1e:41:3e:ca:b6:18:fc:56:5f:
0f:3c:25:2f:c4:83:48:42:c3:ee:54:d9:f7:e9:56:
2e:7b:ed:a9:4b:71:0c:d6:67:e5:0d:98:14:d8:d1:
68:84:1a:e6:e7:5d:01:9d:2a:e1:fc:df:f3:6d:bc:
b0:dd:ab:43:4d:10:cf:86:5f:6b:66:37:5e:7c:15:
34:58:14:0d:f4:4c:7b:09:8f:43:03:38:e0:a2:88:
9d:b5:75:2c:b8:10:b4:87:65:5b:25:8c:e2:de:04:
a9:b5:1a:11:c9:d3:f8:e2:c8:bd:d5:3a:61:e8:d2:
25:84:8a:21:0e:4e:f0:f5:f3:25:5e:0f:49:d0:20:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7A:A8:A5:C1:A4:A1:60:35:DC:F4:EE:EE:81:C4:CA:16:95:BC:1B
X509v3 Authority Key Identifier:
keyid:2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ac:7b:d3:eb:b7:10:d3:ef:20:fc:6b:34:aa:4e:65:a0:fa:
1d:9c:c7:49:f4:c1:19:70:c1:80:6c:b9:7f:97:66:ce:76:79:
55:30:20:0d:7c:bc:36:7c:37:86:74:ef:f0:e5:f5:1a:24:7c:
1a:ea:8d:10:e8:c9:a1:c7:79:4c:2c:42:f6:40:c8:41:d5:2d:
95:98:5d:35:c3:ae:c8:8f:49:8f:bd:8f:60:a1:92:dd:57:a4:
bb:5a:07:45:c6:26:97:9d:0e:31:63:d0:45:ae:b5:7e:11:f4:
62:6b:84:47:1b:0c:3b:55:78:b7:66:c7:32:b7:21:71:6c:ef:
e8:79:c9:48:96:67:c8:bb:aa:6f:60:be:05:c3:54:29:22:f9:
6b:f9:f2:f5:36:23:9e:44:c1:4c:55:40:9c:29:7f:19:9c:85:
af:47:d4:22:85:70:63:fa:11:6d:4d:70:f2:02:0f:ad:88:91:
34:87:f5:07:4d:12:2a:0b:c6:2b:c1:a8:4b:cc:68:00:86:4e:
c2:be:eb:05:53:f1:6e:f9:e8:47:de:12:42:9f:13:48:e0:d2:
be:60:c5:10:09:8b:aa:f3:c2:54:aa:75:86:12:bc:7f:ec:37:
76:dc:73:05:e9:92:25:94:75:dd:51:d3:54:ce:24:c3:cb:0b:
58:60:0e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:52:46 2026 by rpki-client