Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: R3Ltvoo3j/gb3AXT6j3kzGwzFzrtRjbByEqRY+RZsVQ=
Subject key identifier: C1:4F:27:9A:70:A8:F2:E3:FD:7A:78:A9:62:D6:B8:9A:E4:5E:9E:67
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 019F8F1087707162EB1C135586A6FB5C3F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 13:00:52 +0000
Manifest this update: Thu 23 Jul 2026 13:00:52 +0000
Manifest next update: Fri 24 Jul 2026 13:00:52 +0000
Files and hashes: 1: Osq7NSls-V_WRlR-W1mJHM_V258.roa (hash: HWPLwgiyrG1kWVohZBZUZ7KBJwPuiTXg/nt8CEnDueU=)
2: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: XqvKsiRKhWNooVh44aHI6XReOstenBzhvqdnR01ntFI=)
3: mNxtgGXjngdFQsHjGvyBLr88vFA.roa (hash: WJI9HFPJItF3b8hNiZFDXBjcGbFTioYgXmE8KE+LjfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:87:70:71:62:eb:1c:13:55:86:a6:fb:5c:3f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Jul 23 13:00:52 2026 GMT
Not After : Jul 24 13:00:52 2026 GMT
Subject: CN=c14f279a70a8f2e3fd7a78a962d6b89ae45e9e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:22:70:c6:0d:24:5a:db:3a:ca:9c:bf:2a:c8:
54:48:d6:2c:5e:9d:9f:24:5d:3c:bc:b1:dc:8e:29:
af:03:b9:8d:e9:3c:89:12:90:ad:17:68:90:de:29:
3f:a8:5f:68:4d:4b:30:a3:d6:71:76:b1:41:eb:3d:
4e:a8:6b:3a:be:cb:4c:a5:cf:d9:f2:9d:12:b0:03:
9e:6e:10:32:eb:9c:2d:9c:82:ca:64:02:99:0c:f7:
6f:f0:81:90:a3:8b:c9:29:2a:c7:43:23:0d:e8:ad:
d1:ce:ae:ed:ab:fa:cf:53:48:47:1a:92:48:9b:11:
65:11:77:6e:9a:a4:91:9d:de:d0:35:a0:b2:60:a7:
1f:2e:c5:c7:52:17:e0:a6:72:67:8f:0c:b5:48:e9:
5f:bb:1e:29:36:de:74:0c:5a:68:14:61:ff:26:4a:
b2:80:47:bd:78:82:12:f7:7f:2b:7d:5c:ba:e8:01:
83:76:69:d7:d5:ae:f3:31:89:15:98:c8:b9:15:ca:
ad:c6:2c:0a:53:13:8c:df:46:78:0d:71:4a:8e:65:
9f:d4:03:4d:86:08:d9:74:9d:57:61:8c:02:39:07:
fe:c0:ab:52:8d:3a:c7:c8:1a:0f:17:40:9f:f9:c4:
bd:94:90:bb:4a:e1:50:a1:7b:7c:9f:23:a2:a7:c5:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4F:27:9A:70:A8:F2:E3:FD:7A:78:A9:62:D6:B8:9A:E4:5E:9E:67
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9e:f9:dc:72:d5:14:3c:a5:54:78:27:55:d4:ad:89:de:87:
f0:37:28:7f:24:bc:c5:dd:8d:2c:79:ec:c7:a5:f8:fe:08:e6:
bd:3d:53:5b:6f:61:d9:09:12:d0:ed:32:78:ef:25:40:7c:57:
18:81:41:04:6e:e3:32:54:cb:c7:57:1f:ba:9b:5f:8d:99:0a:
69:c9:50:06:dc:e6:26:a3:4b:db:f3:a6:cb:22:af:9b:c0:13:
14:3e:cb:73:ad:81:c8:bc:15:4d:31:8e:d4:ab:83:d7:27:fa:
36:0f:24:62:e8:92:7d:a3:82:df:88:1c:1f:82:97:26:fa:0e:
69:8e:69:75:b0:a7:9f:88:ab:d1:db:63:6c:11:89:4a:4d:03:
a9:60:82:13:59:ed:71:cd:67:90:cb:95:4b:02:bd:fe:35:1c:
33:97:9f:fd:44:d7:fd:56:ba:f1:77:ec:e7:a4:6b:b1:73:21:
de:c9:4f:10:44:20:56:7b:59:fb:79:8b:be:45:03:6e:d1:c4:
53:46:10:35:0f:0f:b1:b9:ba:3c:6a:52:9a:42:4a:c1:8b:39:
2a:12:8b:52:3e:69:16:ff:30:e1:7d:13:8d:1a:c9:24:a7:3e:
03:75:5b:d2:1c:e2:e0:86:e1:83:f4:b4:4a:22:cd:e9:c4:1c:
50:ba:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:28 2026 by rpki-client