Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: QUFo9PzHM4bLQt0w1y6YbuVjz1CtU5CBIQD6std+qVI=
Subject key identifier: 44:8F:A9:8E:33:51:EC:C7:BC:9F:4E:9C:87:D9:5E:8E:14:C7:E5:60
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 019E1E35920757B099FC393DD7C27E22591F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 22:01:27 +0000
Manifest this update: Tue 12 May 2026 22:01:27 +0000
Manifest next update: Wed 13 May 2026 22:01:27 +0000
Files and hashes: 1: Osq7NSls-V_WRlR-W1mJHM_V258.roa (hash: HWPLwgiyrG1kWVohZBZUZ7KBJwPuiTXg/nt8CEnDueU=)
2: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: Lyqt7TSMP7nxztyyypw49kUStf4yiJuP0Aq/rH+778A=)
3: mNxtgGXjngdFQsHjGvyBLr88vFA.roa (hash: WJI9HFPJItF3b8hNiZFDXBjcGbFTioYgXmE8KE+LjfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:92:07:57:b0:99:fc:39:3d:d7:c2:7e:22:59:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: May 12 22:01:27 2026 GMT
Not After : May 13 22:01:27 2026 GMT
Subject: CN=448fa98e3351ecc7bc9f4e9c87d95e8e14c7e560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0b:93:6c:fc:db:2b:aa:d5:9e:95:da:0e:de:
34:37:c7:4c:13:f7:90:bc:97:58:db:91:e2:da:8e:
5e:63:d1:7e:d7:38:4c:1b:c6:a0:d9:f1:76:aa:be:
ce:57:ee:02:54:a0:6a:5b:40:31:63:9a:36:07:6e:
b8:3f:63:46:d6:66:6e:23:ab:cc:a6:e7:a5:57:2e:
7f:98:b0:be:61:1f:a3:37:20:bf:6b:4f:b9:8e:96:
b4:16:15:39:8e:72:31:d6:2d:3d:03:38:aa:fe:78:
34:d6:2d:97:42:c8:4a:48:d1:61:95:a3:40:5e:70:
a3:cd:c9:77:a3:dc:6e:a8:f6:9b:03:a6:2f:1b:79:
5a:49:82:a4:36:30:fb:9b:e4:80:fc:46:2a:26:44:
b0:6d:60:73:01:ab:51:f9:68:bc:01:3a:ba:ca:2d:
77:9b:d3:96:5a:47:e1:25:8c:0c:fe:75:92:82:08:
32:bd:3c:94:65:cb:7d:13:1c:54:29:67:7d:49:4d:
bc:4e:eb:43:89:e0:d0:5c:09:c4:39:0d:50:f1:b9:
56:4b:ff:ab:76:fc:33:46:11:ab:94:da:36:8b:29:
72:92:7a:f9:ae:c1:e5:94:cd:d3:d0:24:c1:b2:9e:
0d:8c:9a:f2:7c:7e:99:79:16:20:40:68:ff:72:da:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8F:A9:8E:33:51:EC:C7:BC:9F:4E:9C:87:D9:5E:8E:14:C7:E5:60
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ea:ec:19:06:03:23:ea:29:de:34:e6:ec:3c:dd:58:2c:6b:
04:4a:8c:d5:10:7f:be:2a:b6:33:f8:1e:51:18:84:6d:92:08:
ea:81:83:a8:70:3e:b6:12:6f:64:ae:4a:1d:3d:5c:c8:df:41:
54:7a:b9:af:c8:1d:cb:23:21:72:0d:05:28:64:f4:64:20:92:
e0:b5:5b:86:3c:65:1d:8d:44:c2:b2:6f:ed:78:43:2a:f5:18:
d4:1a:6c:e1:f6:56:77:c4:71:f1:26:7b:7f:47:c1:fb:9d:2f:
dd:4b:b4:45:88:bd:41:b7:16:be:a4:35:9f:2f:8c:73:09:4e:
06:05:21:07:ce:5a:38:f6:e9:dc:12:91:c1:27:9d:07:8a:ac:
2c:89:88:23:58:47:8c:7f:0b:4f:0e:85:c0:bb:97:2f:a4:19:
2d:b8:11:f5:72:8a:9c:a7:33:11:71:65:59:e8:95:fa:cd:ee:
5a:29:45:ea:6e:3d:43:77:f2:90:ae:3a:7c:05:c1:7e:62:8b:
5d:bf:7e:6d:b7:5b:68:06:df:1b:6b:24:59:18:d2:0c:f0:58:
19:8d:ac:24:5e:26:e7:9a:73:42:76:7a:73:27:f3:c5:88:f3:
e6:77:dc:81:00:e3:2e:40:75:bb:34:4a:97:26:ae:b5:56:93:
87:a6:bd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:23 2026 by rpki-client