Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
File: LKw-jWOxw6_HxsC_2p1ayBe27m0.mft (raw, json)
Hash identifier: HO7ONK8qi1aHAGsti9SF2SZuy0C61Fg84X44bYfv3IA=
Subject key identifier: 21:A4:4A:33:11:C8:B4:81:C3:D1:51:F4:AC:8D:1F:CA:1C:48:00:09
Authority key identifier: 2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
Certificate issuer: /CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Certificate serial: 019D284D2F2DDB527FBC62485A10CCF74B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
Manifest number: 1263
Signing time: Thu 26 Mar 2026 04:00:40 +0000
Manifest this update: Thu 26 Mar 2026 04:00:40 +0000
Manifest next update: Fri 27 Mar 2026 04:00:40 +0000
Files and hashes: 1: LKw-jWOxw6_HxsC_2p1ayBe27m0.crl (hash: UBMBw26FFHv1jhZCyKSbOy5VlNsnDsDMX7UgQlISDDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:2f:2d:db:52:7f:bc:62:48:5a:10:cc:f7:4b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Validity
Not Before: Mar 26 04:00:40 2026 GMT
Not After : Mar 27 04:00:40 2026 GMT
Subject: CN=21a44a3311c8b481c3d151f4ac8d1fca1c480009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:e8:9c:76:9a:69:1b:77:82:ac:8a:ef:2a:
20:78:0f:8d:45:31:4f:50:f4:82:58:5e:8a:ef:49:
2f:8f:b4:0f:c7:4f:27:58:1a:60:bd:0b:0d:b0:02:
a5:63:b9:45:a0:7e:6d:81:cd:0e:c3:15:bc:73:86:
51:6e:4a:37:a1:5a:33:c6:1c:a6:98:e6:8f:86:3e:
82:f8:c8:51:d2:9b:6e:f3:2f:eb:42:5b:31:aa:da:
0d:94:61:ab:1f:d8:1a:1e:2b:1f:af:6a:af:98:43:
2c:90:a9:e5:2e:ca:56:f2:83:ce:86:0e:0c:74:e3:
44:9f:62:ba:f5:b4:22:7a:c3:87:4e:db:f4:c4:39:
2c:be:3e:8f:e5:64:bf:94:b3:46:28:5c:47:7e:98:
39:d4:ab:25:f0:77:cb:8b:08:d4:6f:94:37:bd:f6:
e0:31:9e:c4:f1:e7:a3:7d:d2:b8:e2:7e:76:6c:b5:
c7:99:a8:a6:df:77:45:c7:35:8a:d1:92:e6:bc:2f:
b3:08:7b:6f:c6:2f:74:40:5d:ca:0e:4e:a9:da:81:
d3:e8:85:48:95:63:1a:c8:7d:0f:63:16:85:a0:a3:
06:6f:cd:7b:7f:7f:50:1b:ea:4a:ba:2d:40:5a:07:
a6:ba:ab:9f:d7:f9:3d:96:26:1e:f2:5b:bd:39:d8:
17:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A4:4A:33:11:C8:B4:81:C3:D1:51:F4:AC:8D:1F:CA:1C:48:00:09
X509v3 Authority Key Identifier:
keyid:2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:a9:49:4c:2f:d9:ce:82:a2:77:fd:47:4c:19:7e:81:52:47:
8e:6c:07:9f:5c:e7:34:31:69:4f:fd:f0:a1:97:13:68:e2:2d:
19:da:f7:ce:3a:8b:74:00:6c:e8:e0:2a:ed:fe:62:af:6f:32:
82:99:a7:7c:c9:a1:3d:91:8c:ee:82:0b:e5:82:1f:70:95:32:
08:21:82:56:9c:3d:33:69:d1:0a:12:93:c4:e8:28:93:7c:d1:
ec:54:40:be:1e:76:aa:db:93:f8:b8:bf:d7:e5:90:0f:95:17:
c8:a2:5f:82:39:d1:e9:65:68:f3:25:69:af:cb:bf:4e:19:85:
95:f2:85:d1:fc:07:6f:0f:bb:b3:94:c1:45:b1:78:94:bb:88:
03:28:fc:d5:ae:2f:9d:b6:a8:7e:0c:1f:e2:dd:b3:45:ed:f5:
c4:96:5e:b6:fa:e5:80:1f:87:92:c3:17:05:33:a4:2a:a2:6e:
2e:b9:5c:de:1f:b0:0c:8f:54:25:44:36:2d:0b:fc:26:d0:e3:
87:4a:db:cb:d3:41:77:2c:fb:9d:6a:11:ce:5d:09:99:7d:27:
d6:83:9d:47:c6:91:b2:bc:bd:cc:0c:a0:3c:3e:52:15:a6:59:
d1:ab:06:17:ea:f0:37:d5:eb:54:52:52:88:d6:29:dd:5d:d7:
6f:60:1f:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTS8t21J/vGJIWhDM90sbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYWMzZThkNjNiMWMzYWZjN2M2YzBiZmRhOWQ1YWM4MTdi
NmVlNmQwHhcNMjYwMzI2MDQwMDQwWhcNMjYwMzI3MDQwMDQwWjAzMTEwLwYDVQQD
EygyMWE0NGEzMzExYzhiNDgxYzNkMTUxZjRhYzhkMWZjYTFjNDgwMDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz/onHaaaRt3gqyK7yogeA+NRTFP
UPSCWF6K70kvj7QPx08nWBpgvQsNsAKlY7lFoH5tgc0OwxW8c4ZRbko3oVozxhym
mOaPhj6C+MhR0ptu8y/rQlsxqtoNlGGrH9gaHisfr2qvmEMskKnlLspW8oPOhg4M
dONEn2K69bQiesOHTtv0xDksvj6P5WS/lLNGKFxHfpg51Ksl8HfLiwjUb5Q3vfbg
MZ7E8eejfdK44n52bLXHmaim33dFxzWK0ZLmvC+zCHtvxi90QF3KDk6p2oHT6IVI
lWMayH0PYxaFoKMGb817f39QG+pKui1AWgemuquf1/k9liYe8lu9OdgXiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGkSjMRyLSBw9FR9KyNH8ocSAAJMB8GA1UdIwQY
MBaAFCysPo1jscOvx8bAv9qdWsgXtu5tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEt3LWpXT3h3Nl9IeHNDXzJwMWF5QmUyN20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8xN2U5OTktZTUzZC00OGNhLTk4MGEt
OTVhZTY0YmQ1NmVjLzEvTEt3LWpXT3h3Nl9IeHNDXzJwMWF5QmUyN20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8xN2U5OTktZTUzZC00OGNhLTk4MGEtOTVhZTY0YmQ1NmVj
LzEvTEt3LWpXT3h3Nl9IeHNDXzJwMWF5QmUyN20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxKlJTC/Z
zoKid/1HTBl+gVJHjmwHn1znNDFpT/3woZcTaOItGdr3zjqLdABs6OAq7f5ir28y
gpmnfMmhPZGM7oIL5YIfcJUyCCGCVpw9M2nRChKTxOgok3zR7FRAvh52qtuT+Li/
1+WQD5UXyKJfgjnR6WVo8yVpr8u/ThmFlfKF0fwHbw+7s5TBRbF4lLuIAyj81a4v
nbaofgwf4t2zRe31xJZetvrlgB+HksMXBTOkKqJuLrlc3h+wDI9UJUQ2LQv8JtDj
h0rby9NBdyz7nWoRzl0JmX0n1oOdR8aRsry9zAygPD5SFaZZ0asGF+rwN9XrVFJS
iNYp3V3Xb2Afzw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:42 2026 by rpki-client