Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File: LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier: RMoOlWvwhz6L/Ns3Pv2HhvbSblU9gMI9/v076jn8sfs=
Subject key identifier: 9B:28:30:0C:34:68:44:B3:A8:93:24:6C:13:43:AC:AD:C2:F4:56:2A
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer: /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial: 019D2695C971BDF2E1C1AC372DCD87DB26A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number: 068B
Signing time: Wed 25 Mar 2026 20:00:43 +0000
Manifest this update: Wed 25 Mar 2026 20:00:43 +0000
Manifest next update: Thu 26 Mar 2026 20:00:43 +0000
Files and hashes: 1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: xnFqlvJ8Tkc2P1RyfbP0X0rg8q7DC9HxFbxLZa1fHEY=)
2: v3xovZ6ex1RS8yXpvjTxnMF_a-4.roa (hash: x4aNx2jmSAXUPJWnM7IfmYiwoUK7G3tuxZu7KLeQ7ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c9:71:bd:f2:e1:c1:ac:37:2d:cd:87:db:26:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Validity
Not Before: Mar 25 20:00:43 2026 GMT
Not After : Mar 26 20:00:43 2026 GMT
Subject: CN=9b28300c346844b3a893246c1343acadc2f4562a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:d6:de:75:71:53:97:ff:32:47:1b:46:02:
ec:06:19:30:6a:ac:2b:44:3c:df:0b:70:e3:7e:d5:
3f:83:79:5f:89:d3:15:00:77:88:7d:95:02:2a:61:
b6:52:81:25:cb:08:d0:dc:fd:77:c4:42:6c:b6:be:
a4:fd:9f:97:fd:b5:b4:6e:cb:65:ae:b1:ad:34:76:
af:30:b5:87:81:c3:87:b7:9f:1e:8f:41:4b:d7:cb:
43:3b:31:54:c2:d0:4d:dd:96:06:5e:0e:54:9d:13:
30:1f:36:d2:a9:45:74:6e:c8:06:c6:d0:56:05:9e:
cb:5b:6b:c5:93:6f:cd:da:a3:6e:10:a4:f8:a1:f7:
e3:00:e9:c6:60:a7:04:03:0a:7a:6f:24:b8:3c:8f:
87:51:06:75:19:f3:c0:f6:b8:bc:cd:87:83:06:17:
e1:b8:df:6d:f6:ab:be:0d:57:5c:bc:3f:38:80:2d:
0b:d5:7f:f7:a3:e4:72:40:aa:26:c2:d7:90:34:23:
a3:64:99:f1:d8:43:a1:89:6d:9f:b8:5a:c9:04:51:
d5:57:3a:57:87:74:9b:02:57:38:a2:06:09:4b:5c:
d0:82:f3:05:c4:4a:e3:36:e5:b8:28:82:8c:8a:0b:
ce:69:4a:57:c1:d0:fd:40:c3:86:0c:b4:71:80:97:
8e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:28:30:0C:34:68:44:B3:A8:93:24:6C:13:43:AC:AD:C2:F4:56:2A
X509v3 Authority Key Identifier:
keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:98:bb:64:3b:ae:7e:d3:45:98:1b:72:4a:20:31:36:1a:d7:
cf:74:99:0d:ae:50:d3:14:d8:44:b0:f1:95:9e:26:b4:0a:e5:
9a:06:d3:9c:3f:19:15:15:59:27:6f:75:54:56:b8:64:e7:0f:
cf:b6:27:78:2b:5d:f2:6c:e3:d7:ba:c6:ff:53:57:f9:50:99:
ac:25:a1:6f:8a:76:f1:c6:9b:62:4e:d2:92:dc:ae:df:55:b7:
9d:5a:09:c1:bb:a2:7b:6a:cc:c7:da:d9:e8:c7:6e:60:d2:58:
3e:d3:62:99:2b:81:0a:5a:39:db:91:d2:62:c8:1b:f1:89:f5:
31:61:06:77:1b:c5:d6:0e:c9:de:4b:62:3b:32:41:8f:38:75:
9b:3a:2a:8c:ef:75:4d:81:cd:59:ce:ea:06:48:69:c1:d9:61:
0f:03:0c:76:1f:20:aa:76:f5:45:52:5a:bd:f1:53:5e:e2:a0:
0d:e1:71:2f:a1:5f:0f:30:98:b5:e8:2c:99:f1:55:76:b8:64:
b1:6a:6c:ab:70:38:0a:84:5f:31:a3:52:4e:83:44:5f:5f:83:
3c:8a:e4:ae:fd:75:fc:6e:e2:f1:73:d8:59:d5:98:f6:0b:71:
f0:23:dc:7d:9e:58:72:2b:85:52:dd:b3:22:19:bf:6d:aa:29:
6a:ef:4b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:36 2026 by rpki-client