Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: 2WZnurjsL5W0VBsAYZ74hdE5f8PL4b6e7+hZb0zhhBg=
Subject key identifier: 3A:A1:9D:57:DD:A7:C3:FB:5F:C4:48:A8:0C:ED:E1:E2:B1:01:AC:ED
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 019D284DD55F795E9AEFA7FF1B1D51C5E54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 1110
Signing time: Thu 26 Mar 2026 04:01:22 +0000
Manifest this update: Thu 26 Mar 2026 04:01:22 +0000
Manifest next update: Fri 27 Mar 2026 04:01:22 +0000
Files and hashes: 1: KhWNkr5gAw1c6ddmTPeSiEEfFWg.roa (hash: BfC/J8Ikas8k6I01UNkrtdj0AZZqj/UTxvhIrki0FuQ=)
2: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: MVC5F6kv4KRi8208u8kMeUtptuPl4OS96q2CY7fAixE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d5:5f:79:5e:9a:ef:a7:ff:1b:1d:51:c5:e5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Mar 26 04:01:22 2026 GMT
Not After : Mar 27 04:01:22 2026 GMT
Subject: CN=3aa19d57dda7c3fb5fc448a80cede1e2b101aced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d8:5e:49:72:ac:49:f5:4e:ec:b4:8f:4a:d7:
1b:eb:c0:05:d8:13:04:50:59:da:fd:5b:cf:3b:34:
cc:f0:90:5b:59:73:6b:f4:97:f1:ef:b5:c9:d7:ac:
7e:73:eb:41:00:1a:13:9a:79:60:6c:97:94:8a:23:
81:0f:44:71:5e:18:32:91:e7:81:b9:3b:df:26:5c:
5f:e8:37:a5:10:34:fd:85:b2:7c:54:fb:f7:10:f4:
13:c8:45:fb:6f:a4:fd:43:79:5f:d1:19:d3:e0:67:
e5:07:7b:8d:5e:b6:7b:b2:a8:4a:35:bc:1e:09:4a:
df:ff:cc:ea:73:5f:ea:c2:ff:4b:e2:75:f8:1a:c5:
76:af:a9:dc:b3:08:f7:f5:12:f3:d8:b2:5c:d0:66:
9a:97:0b:b6:7d:10:e3:d0:24:23:ee:53:f9:af:ec:
a3:15:49:ec:07:ef:c8:3c:2d:55:4b:82:75:37:0d:
12:76:66:07:1c:b4:04:0b:18:6c:34:f3:4c:9c:93:
cc:e2:ed:a4:be:e0:c8:ca:b7:14:50:2d:02:84:21:
49:1d:2e:77:83:22:71:79:52:07:e0:ca:93:29:8d:
85:5e:2d:61:72:3d:e9:41:9e:ed:1c:02:c0:6e:3d:
3a:3d:f5:e0:64:b3:01:8e:43:cb:3a:19:65:54:5d:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A1:9D:57:DD:A7:C3:FB:5F:C4:48:A8:0C:ED:E1:E2:B1:01:AC:ED
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6e:21:05:9f:08:1b:ff:f8:53:af:27:40:99:0e:78:bd:30:
87:3d:c6:7d:69:c7:ad:6c:2c:ce:72:8c:73:cb:7f:40:6b:7e:
1e:46:8e:eb:ec:44:9e:83:3a:96:b5:34:e5:91:8a:6e:c2:33:
e1:f8:67:e9:83:10:bd:ac:53:65:7b:d1:bd:69:af:3e:37:97:
61:ec:02:2d:7e:d8:8d:8e:ba:ff:c8:11:e7:16:2f:41:89:00:
87:34:1a:30:b7:dd:47:63:d2:62:14:c3:be:16:5d:b3:74:2b:
f6:e8:0a:13:3e:4c:ce:b6:b1:5f:7d:57:47:e8:b5:45:f7:7b:
54:e4:e4:1c:f8:d0:ef:63:ad:c3:a5:5e:da:c1:d1:38:10:0d:
f2:8f:8b:38:bd:ea:5c:c0:2f:ba:d0:30:19:1c:e1:d6:08:3d:
02:c8:3e:cc:e7:ba:bc:ba:cd:ae:7b:34:8f:57:bd:65:c0:f1:
c4:00:ea:6c:55:7e:68:2b:70:77:ed:98:65:59:55:35:47:74:
9d:44:43:98:ed:4a:c9:79:1b:de:42:0c:a7:1b:4c:23:5f:f1:
58:03:2f:b9:71:dd:61:0e:c2:57:13:7c:8c:9a:a3:8b:44:b2:
43:83:81:16:0c:97:ea:a5:70:70:69:15:ec:a5:7e:f5:0a:13:
85:46:72:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:09:33 2026 by rpki-client