Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: QZOe1oMz0WwbiRasL/RtqUDiIV1IjIBkaKestI1P+2I=
Subject key identifier: F1:51:0A:6A:A5:CA:4C:B9:E0:1E:B0:1F:C6:FF:CF:86:0B:C6:03:8C
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 01A1DE02523DC48F9187AC8936BB32046BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 07:00:56 +0000
Manifest this update: Sun 15 Nov 2026 07:00:56 +0000
Manifest next update: Mon 16 Nov 2026 07:00:56 +0000
Files and hashes: 1: Osq7NSls-V_WRlR-W1mJHM_V258.roa (hash: HWPLwgiyrG1kWVohZBZUZ7KBJwPuiTXg/nt8CEnDueU=)
2: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: qK46+nE9XyAyUZUp5OS3mxVs4R5lEBGA+G3hOkZbgCU=)
3: mNxtgGXjngdFQsHjGvyBLr88vFA.roa (hash: WJI9HFPJItF3b8hNiZFDXBjcGbFTioYgXmE8KE+LjfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:52:3d:c4:8f:91:87:ac:89:36:bb:32:04:6b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Nov 15 07:00:56 2026 GMT
Not After : Nov 16 07:00:56 2026 GMT
Subject: CN=f1510a6aa5ca4cb9e01eb01fc6ffcf860bc6038c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:06:7e:de:ba:a0:53:c3:7d:2f:5b:18:ab:
b6:7e:81:a9:12:f8:16:52:6c:26:cc:e0:53:3c:26:
60:cc:e7:b5:06:e2:81:d2:35:f6:c3:40:c8:90:cc:
da:27:2f:b5:e0:e1:4b:13:f4:24:30:d6:a5:17:4d:
ef:4d:61:4a:e9:86:c0:96:71:81:b0:e0:44:a1:1b:
22:3b:eb:eb:62:c1:2a:13:ad:f7:c4:a0:92:3f:19:
5e:e7:35:5b:17:2a:ab:eb:44:57:d6:7e:1a:3d:33:
fa:76:99:69:71:64:30:b0:9e:37:f3:fa:cb:2e:77:
2a:b0:73:39:38:25:16:06:ce:e7:46:6c:95:34:ef:
c7:2c:a4:ea:70:09:ab:a7:f4:7a:2d:f1:c0:ac:61:
6f:3b:47:87:53:b2:e9:f4:fe:f0:6b:97:b3:07:9d:
9e:aa:e3:f4:aa:f8:0e:f5:0a:7a:0f:99:46:03:79:
e3:89:54:c7:64:11:64:17:a5:12:f0:f2:92:9e:bd:
95:6d:35:41:6d:80:c2:2f:13:7d:2f:3b:a4:aa:c4:
0a:1b:e1:62:07:bb:e5:de:dd:af:c3:b8:82:e4:ca:
1d:16:61:7a:75:62:47:4d:8e:8e:10:56:d1:94:91:
b1:e1:39:cb:ca:d9:1a:51:26:cd:3f:6b:d1:c5:9f:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:51:0A:6A:A5:CA:4C:B9:E0:1E:B0:1F:C6:FF:CF:86:0B:C6:03:8C
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:12:f6:9d:e4:ed:d7:17:9e:2c:c4:cb:5d:0c:ac:5e:35:0d:
6c:3f:99:99:4a:a1:76:f0:b5:66:0c:63:cf:3b:97:ee:32:de:
3b:6f:6e:5c:6b:4a:07:42:ed:5d:58:1b:f2:94:37:0e:46:88:
c3:9d:52:6b:48:6c:e6:47:4e:17:43:fb:ce:6c:12:02:9e:01:
fa:97:b3:0f:dc:13:2f:fc:8b:09:f6:4e:20:f3:25:8f:53:bb:
40:4e:73:dd:92:17:b6:f4:2c:69:82:3b:56:1c:6d:26:64:fa:
fc:82:f9:44:58:c9:12:33:58:b1:bb:33:c8:ac:9b:85:46:03:
3d:88:86:ce:61:b8:3d:1b:da:20:45:c5:49:02:ec:1d:0a:73:
d1:f4:b9:a4:36:69:11:78:c3:46:48:87:a7:05:b2:bc:98:ee:
48:66:98:d7:5a:28:0a:c8:52:9d:43:7f:dd:00:f0:69:18:b7:
a3:63:90:34:41:f5:c2:63:94:c6:60:f5:e8:2d:09:fd:55:51:
5d:cc:6e:3e:7a:68:f4:53:47:6d:e0:55:14:cf:6c:18:cd:89:
ca:a1:de:0c:16:18:8a:ed:bb:84:93:1e:38:fb:41:27:53:83:
92:bf:05:1d:72:49:3e:19:2b:f9:41:e3:54:c8:ca:ad:64:0a:
b8:35:56:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:04:18 2026 by rpki-client