Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
File: lwaqkFRlWGQk84f9vYNki3LZRt4.mft (raw, json)
Hash identifier: +HoRucLH6IAfzFodZHVdGP9goNlBerzl0zb6/iaU2VM=
Subject key identifier: 6E:35:14:20:97:1D:97:48:3C:8C:16:E0:5B:EB:BA:B8:D6:CF:0F:81
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial: 019D284DC43521D45C7B8A2688C9A617D875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 04:01:18 +0000
Manifest this update: Thu 26 Mar 2026 04:01:18 +0000
Manifest next update: Fri 27 Mar 2026 04:01:18 +0000
Files and hashes: 1: axFCojXUhSkytCN0atEZfj9fkA8.roa (hash: I3PEkjutyOX2FwIEMplxrCsf4ez6AG70VNxYovdKhQs=)
2: dp2gXrpfvOMg65Z1sl0IeonKbxM.roa (hash: 8Vzr1PEVztWf+5QEVA47vH/IaL1dnxwbEHxKX7SEwVU=)
3: lwaqkFRlWGQk84f9vYNki3LZRt4.crl (hash: e6iGkDIJIXKSdKcHFgsEOz0HB2w7O5cgzbDHAK7SJXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c4:35:21:d4:5c:7b:8a:26:88:c9:a6:17:d8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
Validity
Not Before: Mar 26 04:01:18 2026 GMT
Not After : Mar 27 04:01:18 2026 GMT
Subject: CN=6e351420971d97483c8c16e05bebbab8d6cf0f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:87:91:31:53:88:93:97:b2:f7:08:fe:f5:
35:cb:2a:53:06:6f:df:e8:61:d9:d2:d8:59:c5:f6:
b6:12:e1:c6:c6:6c:07:eb:e5:56:99:b0:c8:b4:4b:
2d:41:c1:6c:ed:77:b4:36:92:da:0b:2b:8e:2d:96:
b5:1f:0a:85:dc:e1:68:27:81:dd:ea:e3:42:e0:4f:
6b:ab:e3:8c:75:51:66:98:61:2b:91:7e:15:d5:e3:
c0:f1:81:d6:ba:09:94:5b:ed:f3:99:47:89:09:06:
67:d9:ae:bd:be:d9:a4:ae:5b:da:fa:4c:b6:59:9d:
d0:f7:69:01:9d:5d:d5:22:69:fd:18:74:9e:5a:b8:
37:d3:f8:ac:bc:b9:e9:cb:e7:39:2d:22:07:ab:ca:
c9:ce:b4:89:cb:7f:33:17:46:56:c4:19:7e:b7:42:
11:58:e5:df:b0:5f:3d:28:68:85:4d:6e:45:bb:c4:
75:32:59:90:34:83:8f:37:c3:c3:62:a7:75:93:07:
7d:13:70:43:0a:5c:79:5d:9e:92:0b:cf:d0:07:c0:
10:9d:3e:10:2a:f8:24:db:32:5e:e5:05:d4:86:e7:
b7:0e:a2:84:4d:da:c5:97:fc:b3:60:93:8f:60:6a:
39:95:26:2d:d6:17:c7:b5:ba:fb:44:d9:3c:5e:f3:
22:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:35:14:20:97:1D:97:48:3C:8C:16:E0:5B:EB:BA:B8:D6:CF:0F:81
X509v3 Authority Key Identifier:
keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:57:c7:b6:19:64:87:69:85:5d:48:f8:3b:63:9b:db:5c:47:
ab:7f:3e:01:59:9a:c4:d6:5e:ad:9f:e4:a0:08:94:1b:b0:51:
ec:51:71:e0:4f:50:aa:3e:f1:c1:39:e7:46:fa:9e:45:9d:6e:
f1:21:31:2b:71:31:fe:2c:14:04:81:63:07:d1:94:5b:2a:3d:
1f:28:b5:2c:e0:ba:77:f8:1f:84:67:94:cf:bf:de:5e:60:e7:
4c:d2:76:37:d5:e7:a1:d2:2a:b3:d7:88:4c:db:da:eb:6f:07:
b6:72:61:30:53:85:05:01:99:67:fc:74:8a:66:b3:1f:5c:7e:
cc:15:41:2f:a0:35:3a:b4:a3:e4:35:bb:46:ac:40:a8:a3:3c:
74:cc:af:54:1c:81:f8:25:e1:6f:7e:df:94:16:91:95:92:ba:
04:2b:bb:78:96:70:a2:f9:22:c3:e8:90:52:a0:0b:b3:ee:e9:
a9:98:3c:7d:f2:eb:68:39:02:0a:20:08:9f:7a:81:f8:9a:a0:
8b:f0:85:a0:cb:b6:e0:5d:5a:4d:6e:9a:35:f3:29:76:8f:c1:
c2:4e:c0:c0:80:a0:1c:c3:03:99:89:d6:ad:11:a4:88:20:67:
2a:fc:59:a0:16:1f:27:17:9a:1c:d0:68:e9:6c:f7:29:c6:8b:
27:24:df:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:24:58 2026 by rpki-client