
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
File: lwJP_Eknv-NSiUNdnQKAQguOzcs.mft (raw, json)
Hash identifier: Hb1uHq6XQd/wLx8BUsz2WTkTnBZuar6hdfXrmvAxd9o=
Subject key identifier: B3:03:E3:0D:62:20:0B:4D:E3:1A:07:36:5E:B8:96:B1:F9:60:C1:0B
Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Certificate serial: 019D25840FA05A990C17E17D516D7A543C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
Manifest number: 056A
Signing time: Wed 25 Mar 2026 15:01:44 +0000
Manifest this update: Wed 25 Mar 2026 15:01:44 +0000
Manifest next update: Thu 26 Mar 2026 15:01:44 +0000
Files and hashes: 1: 0pi2CRh8v5FDGjuuAyr_ynjNU4M.roa (hash: gEFkbWU3I4/+RhLgSRyNGP/VSE7D27H+Iby5qJquk8k=)
2: 1eGYTZkzkTnzgcwMjAg4TYC4oMg.roa (hash: N0Pwrl6Apuf0Y0kUqHgS0KkfrpMsU0M2q1pXnEawL28=)
3: 56EYdVdPARTza2xcs8WALSYXTOQ.roa (hash: zmgqXldif1WCq/XR13fNKgAfLW2J2LNZ/H94SIzJybg=)
4: HTGpA29r_p96fZCnIs8rHPCaAWg.roa (hash: 0NEOZclYkdeZ3p/EmP0YoypOQ8XIb7jGpt4K1aPjz6Q=)
5: JDbJ4jj6LMlC-0bdOFoUGyLzn3o.roa (hash: YHGXUN1Q0a2Vx/s6owli3h6abJzr4EpARqQpGM7kkOI=)
6: Ny2iyxeuZXEsORd19mLonGlTc1o.roa (hash: IHzsSFmGLhjoSc5ovg8f9ByPO12qJhMupxXp5WM/rZs=)
7: YnuWSiECKs46KqAQH2-p7CjlQBQ.roa (hash: CGPSpK9CwDyzIaayrss+ySc2HPgoYOHHQO7gmEb9KdE=)
8: aHYCTQnedLqhGc1eCePJguTFgjA.roa (hash: T87S5Ags8vNBHX+M2V+S2A8cRf0mGsTOhPjCp5GuLK4=)
9: eRUram9FiygBh410Dn1i-De_Uv0.roa (hash: 0UT7pykP+ViP/ePf2YhJafI90nKn0use/xYGNVGDsGI=)
10: lwJP_Eknv-NSiUNdnQKAQguOzcs.crl (hash: Lb0o0BYUhuqvrhbuVP5UslWMEUaGIUbhRWZXJFfCKjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:0f:a0:5a:99:0c:17:e1:7d:51:6d:7a:54:3c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Validity
Not Before: Mar 25 15:01:44 2026 GMT
Not After : Mar 26 15:01:44 2026 GMT
Subject: CN=b303e30d62200b4de31a07365eb896b1f960c10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:99:8f:91:00:21:e8:24:2a:e7:01:60:17:9c:
18:3c:f8:33:fd:13:91:29:d3:ba:34:d0:6a:d4:a1:
2d:fd:b1:e8:f7:dc:21:f9:6b:1c:93:1c:90:0c:23:
2b:22:e2:a4:c2:1d:3f:2c:b0:09:b0:38:92:8a:78:
9d:d6:8d:8f:87:84:bb:4b:1f:bf:46:b7:4f:75:7c:
31:28:17:e5:8a:d3:09:de:14:05:5d:6b:98:ea:d2:
9b:4c:cb:10:4f:1f:ad:da:bb:94:d7:8f:17:15:ad:
a4:0b:ab:c4:34:d1:bf:93:26:b7:c6:b8:49:98:34:
7b:35:f9:69:b1:df:93:8d:18:a6:a6:0b:29:80:63:
3e:7a:a3:37:64:5c:cd:11:60:d3:63:a8:d2:4f:fd:
3b:b2:24:be:ab:e1:06:6c:b2:ec:00:71:dc:fa:d4:
b2:4a:60:ca:f9:75:0f:42:91:73:a6:73:8b:52:78:
f8:a7:0f:87:be:7a:b7:67:89:61:0e:fb:61:f3:f4:
8b:d6:1a:f5:32:78:0c:77:13:27:a7:90:a0:a7:4d:
31:61:fd:be:15:9b:f0:d3:9d:76:74:cb:56:40:98:
17:46:57:a8:c2:87:26:9e:36:d7:b1:0c:0e:75:f9:
f2:9c:ae:3b:34:89:55:11:8e:a3:65:e1:9e:14:ec:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:03:E3:0D:62:20:0B:4D:E3:1A:07:36:5E:B8:96:B1:F9:60:C1:0B
X509v3 Authority Key Identifier:
keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e9:ca:ac:fd:a9:3c:47:77:9f:1c:ca:29:69:a1:05:94:f6:
5b:56:f1:55:49:ed:4b:b8:e1:cf:0f:2d:7a:cd:a2:73:8e:28:
14:28:66:81:70:fd:29:45:ee:0e:14:27:e7:02:c8:ba:6c:68:
9a:9a:54:2b:ef:ab:67:e4:d5:3d:5c:c8:df:91:74:b0:78:a4:
eb:6a:64:75:69:71:22:2c:ef:ef:a6:b9:10:47:ce:76:37:24:
1f:33:29:ff:5a:3e:af:79:c8:b9:a2:ac:59:20:33:9c:cd:df:
4b:f3:be:02:0d:df:49:b3:b4:e6:23:df:7e:21:7b:84:34:fb:
ac:00:07:f2:bc:df:eb:ae:5a:93:b9:bb:ad:60:a4:96:91:cc:
89:7f:d3:59:c9:f6:1e:37:3f:00:bb:b3:b9:44:bf:4b:b5:e6:
ed:37:54:73:ed:8f:59:a5:8c:2d:68:40:99:91:7e:6a:26:e1:
8f:6c:70:02:96:cc:20:57:75:e9:5d:19:1f:81:74:52:3b:60:
03:cb:fd:86:85:25:da:95:28:c6:5a:89:e0:5c:d1:d2:2e:04:
48:96:d0:ba:b1:35:d8:d7:87:a8:4d:79:41:bf:2a:a4:be:58:
fa:c8:46:6a:ab:a9:d3:6f:e0:73:9c:08:ba:4f:5a:6c:47:65:
6b:4f:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:33 2026 by rpki-client