Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: Pg01WjAcusl0wDlygv445sJ6SRS2gf3bxwF7snvKuoM=
Subject key identifier: 80:EE:25:7D:8F:72:D9:95:54:10:17:A7:A9:7D:66:C4:27:52:28:8B
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 019D329B3C4B901CA01477A4FB91E03F29D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 1890
Signing time: Sat 28 Mar 2026 04:02:07 +0000
Manifest this update: Sat 28 Mar 2026 04:02:07 +0000
Manifest next update: Sun 29 Mar 2026 04:02:07 +0000
Files and hashes: 1: Osq7NSls-V_WRlR-W1mJHM_V258.roa (hash: HWPLwgiyrG1kWVohZBZUZ7KBJwPuiTXg/nt8CEnDueU=)
2: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: +rLI8wJHqwrZGjhfABEuZdwuICI/yXNn2Get8fY04MI=)
3: mNxtgGXjngdFQsHjGvyBLr88vFA.roa (hash: WJI9HFPJItF3b8hNiZFDXBjcGbFTioYgXmE8KE+LjfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9b:3c:4b:90:1c:a0:14:77:a4:fb:91:e0:3f:29:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Mar 28 04:02:07 2026 GMT
Not After : Mar 29 04:02:07 2026 GMT
Subject: CN=80ee257d8f72d995541017a7a97d66c42752288b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:b3:0e:d1:d3:a8:77:bc:26:9e:82:7e:02:
ad:24:a4:d3:12:90:6e:ee:be:60:83:0d:63:08:56:
a0:52:bc:6f:2c:62:c6:3c:d6:ba:14:72:27:3a:3e:
a4:9f:90:c5:96:28:ab:f2:7c:75:6c:20:e3:87:94:
d7:13:dd:ae:f9:4f:d4:55:ff:61:b8:3e:03:6a:51:
7c:81:2c:be:86:37:22:7c:14:d0:73:95:36:99:b1:
2e:12:7e:23:a6:23:e3:99:cb:91:35:4a:d7:84:7a:
2f:70:71:55:52:f9:12:7b:f9:c8:3d:fe:6b:d3:43:
d3:22:3a:07:9c:5b:3d:e1:c4:bf:b7:e2:6e:13:c6:
4c:5d:5f:73:6f:88:da:02:f4:c4:2e:eb:44:03:09:
83:2b:5e:47:8d:e7:d8:a6:a4:f7:7f:ae:58:1b:20:
c0:79:da:ed:d9:dc:3f:40:9b:1b:90:93:00:03:80:
9c:bd:74:db:06:fb:5d:1b:48:e4:c3:e4:cd:e8:57:
31:16:d6:a2:90:5f:dc:dd:af:7e:47:f6:c4:bb:af:
f1:4a:16:60:52:b7:ba:85:f0:14:37:28:8c:c7:0e:
ff:43:15:2f:50:14:f5:57:a4:a5:89:d1:6e:4b:a6:
06:df:34:f8:96:16:9d:de:50:3f:05:a8:83:ed:f7:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EE:25:7D:8F:72:D9:95:54:10:17:A7:A9:7D:66:C4:27:52:28:8B
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:97:5d:fd:a4:b1:65:2f:6a:ae:87:76:74:26:08:4f:f1:38:
3a:67:e2:5c:4a:76:d8:22:03:ed:ab:38:1b:5b:cb:ca:6e:0a:
d2:04:84:50:76:62:06:9e:a4:b4:a8:d9:02:a4:7c:66:c6:bc:
2a:55:58:f6:98:35:ff:3f:98:75:04:47:d3:2a:51:27:f1:e2:
93:80:9b:0c:c5:2a:ef:a3:90:6b:3d:b0:7a:1b:5b:f7:b8:ed:
d1:b8:08:20:98:cc:81:18:8c:ab:9f:82:d5:b7:78:39:4c:7f:
19:dd:82:73:b1:04:2e:d0:96:6d:2e:8a:29:9a:e7:ea:6b:98:
ba:b2:46:f4:78:86:60:4a:9d:4e:71:d8:f1:62:2e:50:a3:c7:
ed:35:69:8f:c8:ee:9d:e8:f7:2e:21:84:76:52:06:ef:a7:36:
b1:5c:43:e8:c2:e4:93:bd:06:91:14:29:99:3c:f7:bb:b8:9b:
78:ad:07:2c:14:b1:c3:cc:95:cb:b7:cd:cf:a2:b4:f7:a8:3e:
56:f0:5b:37:b5:a5:b9:d6:d4:f5:d7:98:da:43:43:56:15:38:
1d:d4:41:49:cb:1e:09:58:9f:c5:74:88:de:ce:0e:d5:dc:87:
1d:45:72:91:cc:01:77:74:2f:b8:5e:0b:33:6e:80:d8:2e:64:
f7:9d:e3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:51 2026 by rpki-client