Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
File: lwhyRZO0dTF1shSBLPaJGmRfhMU.mft (raw, json)
Hash identifier: 50G+RKsZl8XPh7ti841StIsbTngA+HFxUEyOwt2zvzU=
Subject key identifier: 50:B1:6E:ED:CC:3F:E7:8A:1C:46:A7:4E:1B:F5:40:BC:6D:49:F2:97
Authority key identifier: 97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
Certificate issuer: /CN=9708724593b4753175b214812cf6891a645f84c5
Certificate serial: 019D2695EF6396113E92E68648ADA3D01D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
Manifest number: 03AC
Signing time: Wed 25 Mar 2026 20:00:53 +0000
Manifest this update: Wed 25 Mar 2026 20:00:53 +0000
Manifest next update: Thu 26 Mar 2026 20:00:53 +0000
Files and hashes: 1: cGIbIuyd_-GcZFAPYp_iRhjY8Fs.roa (hash: 4l9uaitU/oM93/Oha9XHLDc9sPtfot6T5F/wqRyQOyk=)
2: lwhyRZO0dTF1shSBLPaJGmRfhMU.crl (hash: /JXTppN2UrYFjW0c4vTtsqkcsrgjntTylXFYP+dzGaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ef:63:96:11:3e:92:e6:86:48:ad:a3:d0:1d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9708724593b4753175b214812cf6891a645f84c5
Validity
Not Before: Mar 25 20:00:53 2026 GMT
Not After : Mar 26 20:00:53 2026 GMT
Subject: CN=50b16eedcc3fe78a1c46a74e1bf540bc6d49f297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:48:be:a8:54:81:21:24:63:ae:63:21:56:
11:09:e6:40:ca:93:01:1e:4f:7a:95:ae:6c:1c:ee:
d2:c1:4a:d5:e3:12:fc:42:26:66:19:b1:f2:0f:7c:
24:f8:78:2a:c8:e9:bc:79:3b:1a:fa:75:1d:d3:7d:
a4:86:ec:07:0b:6a:4d:a1:a1:2e:3e:87:88:b7:3c:
4d:e1:16:20:a1:06:f1:6f:b0:75:c6:4b:3d:5b:d6:
0c:24:3b:ef:92:04:f0:29:2d:d7:96:31:6d:fd:b6:
8b:db:c0:13:37:7e:f0:8a:b8:4f:48:31:40:0e:72:
9a:6b:ed:29:2e:85:72:3a:5e:4b:9b:0f:a4:f7:c1:
e0:99:10:d7:2d:57:7e:3d:5b:c7:00:13:55:64:b9:
88:df:74:91:e3:87:10:6a:59:05:f7:d1:e6:0a:f6:
f9:b4:ab:81:eb:a2:5d:4d:65:ce:de:10:df:4e:9e:
d4:86:05:8d:c0:b4:5a:b6:85:74:40:ad:71:7b:57:
91:51:33:f7:b7:c9:5f:e1:cd:2b:4d:35:4d:3c:02:
00:e8:4e:46:ab:8c:cc:c8:23:14:66:f4:af:a4:68:
29:97:8e:6d:0b:ac:72:45:c8:3d:6f:f0:70:d7:47:
50:9d:23:96:4d:81:0a:21:5f:f5:f9:0b:73:1d:7a:
ab:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B1:6E:ED:CC:3F:E7:8A:1C:46:A7:4E:1B:F5:40:BC:6D:49:F2:97
X509v3 Authority Key Identifier:
keyid:97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4b:d4:2d:f6:d5:83:2f:16:cf:c0:b7:f9:ec:e7:5f:f0:d0:
de:1e:da:4e:72:3b:e3:12:1e:ae:f5:fa:be:20:a7:42:c9:d2:
ae:f6:73:4f:d0:de:7b:6a:e3:ea:fb:05:6d:47:40:f1:91:9d:
8b:0a:4c:fc:59:22:b1:b6:25:b5:24:d4:6b:22:63:c0:59:ff:
f1:d3:bd:d0:b9:8b:ad:2f:76:03:c7:31:e0:12:54:91:03:dc:
70:1c:33:2a:1c:df:5f:03:b2:6e:a0:6b:12:85:c3:52:ff:91:
45:87:15:9b:f9:1e:42:ed:7a:9e:31:4d:99:f6:bd:0a:5f:1f:
55:3f:7b:17:10:e3:a7:9e:94:b2:4a:8e:81:45:55:75:b2:29:
d0:0d:77:fc:13:8f:0f:f5:82:9e:c7:64:33:1d:c9:26:4d:12:
91:76:e6:24:7f:22:6c:f7:35:78:78:b9:b2:bd:bd:e9:ec:1f:
59:05:41:63:8b:b7:1d:73:96:ce:bd:dc:67:11:65:4d:80:dc:
0a:8c:6a:d0:5c:7d:f3:0e:31:b3:20:ba:12:a7:f4:63:ff:77:
b6:0d:03:0a:08:fc:b9:72:8c:27:67:8a:fd:c9:93:af:32:a1:
a5:26:6d:15:ec:41:db:9a:35:9f:53:9d:76:4b:de:e1:c8:bb:
4a:01:60:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:10 2026 by rpki-client