Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier: 35ty13VDb/vZBo+JL2gf+7Tcp5mL6s4UvLuEgAnBZ5M=
Subject key identifier: 60:DD:D8:8F:F2:6F:B4:71:2B:C1:A9:A3:52:25:D3:2F:47:8E:A6:ED
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial: 019D27A89B32EDD87B19AD11F48253B500D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number: 13C2
Signing time: Thu 26 Mar 2026 01:00:54 +0000
Manifest this update: Thu 26 Mar 2026 01:00:54 +0000
Manifest next update: Fri 27 Mar 2026 01:00:54 +0000
Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: ByD+IZmXxID74w8CiLKfZjitzKXn20xsuoXUH/5XBxM=)
2: mFiXzHrxbxRLCdJjqMjDV1qXsf0.roa (hash: xj8BfUXzJ6HgdFsCYVaF06L0rsBxHlnBN9flZ6X2gpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:9b:32:ed:d8:7b:19:ad:11:f4:82:53:b5:00:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Validity
Not Before: Mar 26 01:00:54 2026 GMT
Not After : Mar 27 01:00:54 2026 GMT
Subject: CN=60ddd88ff26fb4712bc1a9a35225d32f478ea6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:12:53:c9:ba:b5:de:30:7b:a3:41:f2:93:
36:02:60:83:02:75:a4:dd:b6:23:30:99:e8:f5:f3:
da:86:c2:d1:f2:3d:c0:c1:1a:7a:ed:f3:e5:dc:87:
07:57:39:ed:87:88:22:bb:1a:62:31:7f:5c:23:f9:
ac:6e:e2:e6:95:9b:a6:ec:41:3a:df:66:59:b1:0b:
78:aa:55:84:bf:ee:99:a0:a5:fe:63:3d:80:a9:bf:
56:97:0f:28:9a:57:53:dd:40:ad:fc:b7:23:4d:bd:
dd:e6:4f:f0:a8:22:b7:31:2a:3e:8f:de:76:4b:bb:
0a:a3:e3:a0:3c:8b:5e:8d:94:52:8a:21:16:1d:8a:
7d:14:16:86:8d:06:47:72:cb:7c:09:78:96:32:22:
d4:cc:47:b1:7c:e5:09:87:ad:8d:d5:aa:36:7b:c5:
77:7b:f5:90:d9:5b:d7:9f:71:72:9d:b3:83:cd:9f:
80:d9:1b:76:43:39:79:17:7f:97:da:2d:67:7f:17:
68:2d:47:db:24:10:ac:3f:77:b9:50:7d:4f:0a:4e:
87:52:9f:9f:6e:95:a5:e6:ae:f9:1c:8f:ce:34:5e:
1a:86:30:eb:69:67:5f:29:8c:3f:7c:a4:ff:6b:2a:
9d:32:67:55:96:49:f1:89:46:21:a1:4d:cf:eb:28:
03:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DD:D8:8F:F2:6F:B4:71:2B:C1:A9:A3:52:25:D3:2F:47:8E:A6:ED
X509v3 Authority Key Identifier:
keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2d:0d:72:f8:78:ac:58:c3:fa:de:10:e1:38:13:e0:e2:83:
e3:2d:90:16:eb:27:60:37:01:9f:88:59:dc:c3:6f:2a:72:5b:
40:45:28:7d:74:f4:13:ee:59:78:37:14:aa:d0:0c:d1:af:8a:
6b:46:56:80:0c:e1:9d:20:6d:e6:45:78:43:05:da:24:cd:3c:
bd:12:1f:f8:ec:fe:e4:44:94:a9:42:11:47:7a:52:75:b4:49:
5e:f3:8a:83:e3:6a:bb:dd:cd:0c:53:f1:8e:a0:16:46:bd:3b:
2a:8b:77:79:9f:5c:8b:ac:51:02:0c:ca:33:c1:28:14:55:57:
3a:ac:31:5d:6a:0c:32:ef:74:de:7c:dd:db:ba:65:5f:50:44:
66:fd:12:97:0f:af:b1:20:31:b2:29:2a:0f:03:f3:87:47:5a:
c2:ba:e6:26:72:e6:dd:da:70:7f:97:a5:2e:3e:df:2f:c5:b2:
cf:00:ed:2c:9f:6e:e4:cd:3b:75:66:50:20:bb:7c:48:8b:26:
32:28:3d:3f:29:3c:cd:19:60:0f:e8:92:ba:40:eb:0e:d5:6c:
f2:d2:05:51:83:47:0d:cc:d0:f2:8c:f8:fe:d0:1b:87:14:c9:
d5:90:2a:00:e9:07:f7:9e:90:2d:7f:e1:e7:2e:26:2e:1a:13:
10:c0:07:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqJsy7dh7Ga0R9IJTtQDZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMGJmMTA2MGFmOTM5MTdkYWZiNTY5YTgwY2NlYzlkYjA4
YTc2YzUwHhcNMjYwMzI2MDEwMDU0WhcNMjYwMzI3MDEwMDU0WjAzMTEwLwYDVQQD
Eyg2MGRkZDg4ZmYyNmZiNDcxMmJjMWE5YTM1MjI1ZDMyZjQ3OGVhNmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGMSU8m6td4we6NB8pM2AmCDAnWk
3bYjMJno9fPahsLR8j3AwRp67fPl3IcHVznth4giuxpiMX9cI/msbuLmlZum7EE6
32ZZsQt4qlWEv+6ZoKX+Yz2Aqb9Wlw8omldT3UCt/LcjTb3d5k/wqCK3MSo+j952
S7sKo+OgPItejZRSiiEWHYp9FBaGjQZHcst8CXiWMiLUzEexfOUJh62N1ao2e8V3
e/WQ2VvXn3FynbODzZ+A2Rt2Qzl5F3+X2i1nfxdoLUfbJBCsP3e5UH1PCk6HUp+f
bpWl5q75HI/ONF4ahjDraWdfKYw/fKT/ayqdMmdVlknxiUYhoU3P6ygDoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDd2I/yb7RxK8Gpo1Il0y9HjqbtMB8GA1UdIwQY
MBaAFC8L8QYK+TkX2vtWmoDM7J2winbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83M2Y3MzktODFiOC00NTExLTgxYTEt
YjNhMTY4MDMyMGFkLzEvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83M2Y3MzktODFiOC00NTExLTgxYTEtYjNhMTY4MDMyMGFk
LzEvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkS0Ncvh4
rFjD+t4Q4TgT4OKD4y2QFusnYDcBn4hZ3MNvKnJbQEUofXT0E+5ZeDcUqtAM0a+K
a0ZWgAzhnSBt5kV4QwXaJM08vRIf+Oz+5ESUqUIRR3pSdbRJXvOKg+Nqu93NDFPx
jqAWRr07Kot3eZ9ci6xRAgzKM8EoFFVXOqwxXWoMMu903nzd27plX1BEZv0Slw+v
sSAxsikqDwPzh0dawrrmJnLm3dpwf5elLj7fL8WyzwDtLJ9u5M07dWZQILt8SIsm
Mig9Pyk8zRlgD+iSukDrDtVs8tIFUYNHDczQ8oz4/tAbhxTJ1ZAqAOkH956QLX/h
5y4mLhoTEMAHEw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:16 2026 by rpki-client