Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.mft
File: lwj2W3tYEEJW4NM8xGwunXYou3g.mft (raw, json)
Hash identifier: L0AlH/xj6uAQyqoXRUuNlDa5vl+ZzEjAVzvu5AUGNk4=
Subject key identifier: A4:68:5A:5E:14:B7:19:74:7B:60:C4:7E:48:D9:63:1F:BF:27:7B:5B
Authority key identifier: 97:08:F6:5B:7B:58:10:42:56:E0:D3:3C:C4:6C:2E:9D:76:28:BB:78
Certificate issuer: /CN=9708f65b7b58104256e0d33cc46c2e9d7628bb78
Certificate serial: 01A0DB723207C049CC71B8B11C1C9DD54873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwj2W3tYEEJW4NM8xGwunXYou3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.mft
Manifest number: 9C
Signing time: Sat 26 Sep 2026 02:01:29 +0000
Manifest this update: Sat 26 Sep 2026 02:01:29 +0000
Manifest next update: Sun 27 Sep 2026 02:01:29 +0000
Files and hashes: 1: Cpm35s9Ka4hhJWZn8CGNJk4Go5w.roa (hash: QYqaTylwZdrWR4V7QHicMTlDarm+SapwyzyHuoF8w3Y=)
2: lwj2W3tYEEJW4NM8xGwunXYou3g.crl (hash: KIBfaOKgwd00hnmegWFYcI8384oQ9qVZiuifuChWHfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwj2W3tYEEJW4NM8xGwunXYou3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:32:07:c0:49:cc:71:b8:b1:1c:1c:9d:d5:48:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9708f65b7b58104256e0d33cc46c2e9d7628bb78
Validity
Not Before: Sep 26 02:01:29 2026 GMT
Not After : Sep 27 02:01:29 2026 GMT
Subject: CN=a4685a5e14b719747b60c47e48d9631fbf277b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a1:05:d1:d8:b2:7c:1e:a6:f2:db:95:97:f9:
c5:55:04:d1:de:a1:cb:aa:bd:ae:d7:c2:0f:b4:c2:
96:43:f8:a5:91:a9:8f:97:f3:08:7b:27:03:c6:37:
84:4f:ac:08:33:b6:80:78:64:c0:d7:a0:f8:df:69:
b7:05:dc:35:82:56:fb:3d:c1:bc:5e:97:86:d5:da:
df:a7:67:ff:8e:aa:5b:24:96:9b:35:80:25:bf:d8:
d8:60:09:5d:32:c1:f1:78:4a:0f:f6:aa:db:ce:95:
1a:37:c2:8b:0c:0e:a5:32:94:3b:c5:99:bb:9c:fa:
bc:b0:92:ad:ed:c7:08:df:b9:b9:93:6d:f1:5c:7c:
12:4d:be:27:b3:06:c6:8e:9b:36:11:56:8e:ee:a6:
74:5f:78:fb:06:60:0d:a9:d1:b0:a5:ca:08:43:aa:
65:32:cf:64:24:dc:c7:01:41:76:53:5c:6c:ad:66:
32:15:bd:4c:2d:f2:23:80:f6:6c:af:9e:5c:9c:c3:
3c:ab:da:14:6c:d0:80:34:e1:17:51:c8:19:0f:3a:
d2:c1:77:f8:76:dc:7d:63:3b:05:90:3a:47:5b:7d:
a9:15:eb:96:d4:97:e8:99:4c:49:5b:8f:6f:44:cf:
6a:f6:09:78:8b:ca:8e:80:8e:5a:6d:83:8d:b1:4c:
bf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:68:5A:5E:14:B7:19:74:7B:60:C4:7E:48:D9:63:1F:BF:27:7B:5B
X509v3 Authority Key Identifier:
keyid:97:08:F6:5B:7B:58:10:42:56:E0:D3:3C:C4:6C:2E:9D:76:28:BB:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwj2W3tYEEJW4NM8xGwunXYou3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b3:21:82:4f:ef:71:9f:13:be:f7:f5:15:57:61:4c:53:83:
d9:8c:f9:84:e8:04:ce:6b:ac:24:61:0c:91:c8:1c:37:7a:41:
aa:d7:6d:c9:99:fe:81:85:32:da:37:37:d4:e0:d8:38:a7:e4:
39:58:fd:56:d6:1d:b4:ad:c0:0f:dc:22:08:79:93:1a:3d:e9:
77:0d:7f:c5:89:93:a9:ea:2f:9e:a1:e9:00:88:12:44:bd:54:
19:00:99:2b:ab:94:81:f4:0c:96:95:8c:2c:7c:40:40:89:f9:
01:18:67:12:cc:94:23:dc:ec:21:ed:5a:fc:73:de:1c:e6:55:
08:8d:1e:96:bb:2d:94:e4:ca:95:4e:6b:c9:da:79:29:fc:12:
80:ec:4a:88:80:73:09:d8:df:06:41:ae:eb:ef:60:0f:e2:0d:
0c:16:e7:36:76:e3:f0:41:87:52:0b:2c:b5:d1:46:8e:f0:38:
14:ce:5f:4d:02:92:70:33:dd:f5:be:0b:b5:e0:3c:00:18:9f:
91:ad:50:1f:d3:23:b7:06:00:52:1d:8d:b2:4f:49:4a:b4:e4:
28:89:67:3b:9f:3d:69:4d:dd:34:a2:20:3c:4b:f7:da:a9:13:
e8:15:87:5f:a0:db:8a:b5:eb:e9:c0:fa:7b:e1:c6:60:d3:db:
fc:29:11:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:02:42 2026 by rpki-client