
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File: LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier: 6q3eB12w2967Ru37+jjBCCl+p0gaFJKaBLDLZZ1d3Do=
Subject key identifier: 24:4C:C9:20:A2:08:57:40:6C:E3:D5:A7:3B:C4:7F:C2:DB:D3:C1:B2
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer: /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial: 01A0D8DF50C032395940C5BE5216BB828CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number: 0875
Signing time: Fri 25 Sep 2026 14:01:48 +0000
Manifest this update: Fri 25 Sep 2026 14:01:48 +0000
Manifest next update: Sat 26 Sep 2026 14:01:48 +0000
Files and hashes: 1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: IvC7BUSecrJ3fzk32+dfMgAtrUqVdSo0tQ2pShF9Ew8=)
2: v3xovZ6ex1RS8yXpvjTxnMF_a-4.roa (hash: x4aNx2jmSAXUPJWnM7IfmYiwoUK7G3tuxZu7KLeQ7ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:50:c0:32:39:59:40:c5:be:52:16:bb:82:8c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Validity
Not Before: Sep 25 14:01:48 2026 GMT
Not After : Sep 26 14:01:48 2026 GMT
Subject: CN=244cc920a20857406ce3d5a73bc47fc2dbd3c1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:d5:e3:30:4c:68:29:46:38:45:a8:64:fc:
ae:58:d3:00:7b:7b:53:8f:25:ac:86:10:e1:02:1f:
56:15:09:a2:19:4f:e7:90:e0:18:39:a7:52:66:2d:
c7:7b:bd:e0:65:ce:c4:36:57:d5:ed:e2:88:90:b6:
4f:60:fe:b0:98:2e:46:cd:a8:e3:db:f4:39:fd:b9:
38:04:43:33:9f:0f:36:0c:fb:d6:e5:01:98:f8:f8:
8d:e5:09:fc:3a:85:f9:59:a2:f1:32:ac:26:89:2b:
6c:63:c6:70:82:45:7c:21:08:f8:78:f6:06:86:0c:
94:ce:64:63:4f:a4:dd:f4:44:a1:f6:f4:87:0c:7f:
ce:3b:1d:e8:50:63:73:5f:7b:10:c9:93:1f:d6:7d:
2c:0a:93:f3:3b:18:cf:43:97:50:f7:56:c4:e5:db:
12:27:01:3d:b9:40:49:0a:22:74:19:9e:39:c1:d7:
32:21:d3:25:e9:34:19:c9:9f:7a:16:df:97:b4:1d:
a6:b2:03:73:bb:33:4a:47:b4:d6:8c:33:79:ec:8b:
4e:89:64:5e:69:93:67:60:8a:07:f7:48:fe:18:e6:
c8:82:dd:9a:45:0e:9a:2d:dd:ae:44:97:30:e5:f9:
ed:e9:47:70:66:13:0d:ff:35:c1:52:c8:4e:a9:a1:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4C:C9:20:A2:08:57:40:6C:E3:D5:A7:3B:C4:7F:C2:DB:D3:C1:B2
X509v3 Authority Key Identifier:
keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f2:85:da:f2:48:b0:48:63:94:d7:fa:6f:e2:e4:e3:d0:83:
e8:ac:7a:09:e0:2d:d7:bc:84:71:57:67:39:f8:f2:23:10:27:
11:df:76:3c:2d:d3:45:bf:2d:aa:62:bb:b3:79:43:0e:7e:d1:
22:10:a6:a8:e3:e9:c1:e2:00:50:ea:fd:cc:dd:74:5c:d4:af:
50:76:20:19:48:9d:04:e0:dc:4c:a9:2c:c8:52:d8:2f:67:13:
52:62:13:41:5d:a4:e8:04:e8:46:d8:9b:25:fe:87:ce:27:eb:
51:ff:66:90:1f:4a:72:18:fa:d3:5f:21:49:a4:cc:1f:7a:7c:
ed:d9:2a:73:f2:5b:b6:62:6c:48:ba:81:c6:60:b0:1f:60:b5:
ce:a7:2d:eb:3d:39:d3:b3:ed:35:bf:9a:23:66:c6:cc:a8:d3:
f3:9d:1b:4c:16:df:5f:b3:01:82:5b:18:db:6f:d0:24:f5:14:
86:9b:bf:cc:63:b3:cf:b8:21:52:01:52:f7:64:e0:ea:e3:5d:
f4:1e:f8:6f:4a:57:9e:29:48:f6:30:14:53:32:d3:fe:9d:63:
72:35:bd:84:8d:b7:4c:5e:0d:70:94:1e:4b:42:71:4d:23:8b:
13:ef:98:1e:2b:f1:53:a5:d4:6b:7c:38:e3:34:f1:3c:f2:d2:
36:5d:2b:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY31DAMjlZQMW+Uha7gozkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjVmNWRjNzg0M2Y1Yjc2Njg5ZjM2YWI5MTZhMGQ5OTRi
OTk3OWMwHhcNMjYwOTI1MTQwMTQ4WhcNMjYwOTI2MTQwMTQ4WjAzMTEwLwYDVQQD
EygyNDRjYzkyMGEyMDg1NzQwNmNlM2Q1YTczYmM0N2ZjMmRiZDNjMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3vV4zBMaClGOEWoZPyuWNMAe3tT
jyWshhDhAh9WFQmiGU/nkOAYOadSZi3He73gZc7ENlfV7eKIkLZPYP6wmC5Gzajj
2/Q5/bk4BEMznw82DPvW5QGY+PiN5Qn8OoX5WaLxMqwmiStsY8ZwgkV8IQj4ePYG
hgyUzmRjT6Td9ESh9vSHDH/OOx3oUGNzX3sQyZMf1n0sCpPzOxjPQ5dQ91bE5dsS
JwE9uUBJCiJ0GZ45wdcyIdMl6TQZyZ96Ft+XtB2msgNzuzNKR7TWjDN57ItOiWRe
aZNnYIoH90j+GObIgt2aRQ6aLd2uRJcw5fnt6UdwZhMN/zXBUshOqaGjKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRMySCiCFdAbOPVpzvEf8Lb08GyMB8GA1UdIwQY
MBaAFC1l9dx4Q/W3ZonzarkWoNmUuZecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdYMTNIaEQ5YmRtaWZOcXVSYWcyWlM1bDV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84NTBhZjgtNDhkNS00Mjk3LTlkYmUt
OGU2MzNlMGYwNzlkLzEvTFdYMTNIaEQ5YmRtaWZOcXVSYWcyWlM1bDV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84NTBhZjgtNDhkNS00Mjk3LTlkYmUtOGU2MzNlMGYwNzlk
LzEvTFdYMTNIaEQ5YmRtaWZOcXVSYWcyWlM1bDV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/KF2vJI
sEhjlNf6b+Lk49CD6Kx6CeAt17yEcVdnOfjyIxAnEd92PC3TRb8tqmK7s3lDDn7R
IhCmqOPpweIAUOr9zN10XNSvUHYgGUidBODcTKksyFLYL2cTUmITQV2k6AToRtib
Jf6HzifrUf9mkB9Kchj6018hSaTMH3p87dkqc/JbtmJsSLqBxmCwH2C1zqct6z05
07PtNb+aI2bGzKjT850bTBbfX7MBglsY22/QJPUUhpu/zGOzz7ghUgFS92Tg6uNd
9B74b0pXnilI9jAUUzLT/p1jcjW9hI23TF4NcJQeS0JxTSOLE++YHivxU6XUa3w4
4zTxPPLSNl0rdA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:27 2026 by rpki-client