Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier: z+wp8LOSdkTjm4zDiT7/VFpcWNvUSNp8iZ+UW36ZW8E=
Subject key identifier: EC:66:AA:A6:A5:6A:E5:C0:A3:1D:66:21:04:B0:2A:BD:75:1C:FA:DB
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial: 019F958062774B2F2A8469AFDAE6FBDF741C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number: 1504
Signing time: Fri 24 Jul 2026 19:00:46 +0000
Manifest this update: Fri 24 Jul 2026 19:00:46 +0000
Manifest next update: Sat 25 Jul 2026 19:00:46 +0000
Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: DLX+fb51NNz4qtwcXC0+6dLL9Uy91WRRIYwHowfkXls=)
2: mFiXzHrxbxRLCdJjqMjDV1qXsf0.roa (hash: xj8BfUXzJ6HgdFsCYVaF06L0rsBxHlnBN9flZ6X2gpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:62:77:4b:2f:2a:84:69:af:da:e6:fb:df:74:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Validity
Not Before: Jul 24 19:00:46 2026 GMT
Not After : Jul 25 19:00:46 2026 GMT
Subject: CN=ec66aaa6a56ae5c0a31d662104b02abd751cfadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:18:2d:96:58:80:8c:9c:3f:2a:f4:64:d6:
72:fc:36:f5:4d:a2:11:42:7d:c3:21:a4:2f:41:d6:
41:c7:0f:2e:4d:f0:3d:2a:94:cb:09:be:d9:b0:e2:
90:d1:6a:0b:1a:37:ab:64:c7:5b:74:24:ed:f8:43:
24:fd:2e:56:fe:d9:3e:a5:51:9d:1c:0e:34:04:17:
08:5e:c7:fe:af:92:51:b4:b6:85:ea:60:70:f6:ee:
81:fb:27:84:20:6d:5a:c5:cd:db:cf:ac:53:4f:8d:
40:b9:6f:bf:dd:e8:30:c8:5a:12:c2:2d:4e:60:bd:
45:ff:93:2c:b3:62:08:42:04:a0:22:18:c4:58:1a:
e9:5e:55:24:20:d3:3c:7b:53:b5:64:c7:57:bc:c3:
c9:20:b2:e1:96:4f:bb:66:57:89:e8:96:52:56:03:
74:e4:3f:46:4b:db:0f:3d:1b:48:c6:e9:b7:d3:f1:
67:5d:2e:29:07:3f:bb:4f:f5:51:3d:eb:b3:2e:0e:
15:5f:70:d5:aa:c9:56:e2:78:fd:27:9d:65:73:83:
bd:ca:55:49:6e:26:4b:57:d2:43:c6:1f:6e:34:19:
df:bb:62:c6:74:3b:e0:44:05:69:3b:3b:29:a3:0a:
d0:30:e7:37:6e:57:cd:23:bc:8e:ab:a1:cc:1d:48:
c9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:66:AA:A6:A5:6A:E5:C0:A3:1D:66:21:04:B0:2A:BD:75:1C:FA:DB
X509v3 Authority Key Identifier:
keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b8:02:28:88:76:00:70:4a:66:78:45:26:47:0a:52:8c:13:
88:59:35:66:0b:b6:ea:ef:fd:6b:c1:26:95:d5:05:5d:e6:3d:
ec:58:40:96:ad:80:e3:1e:22:a1:2c:4e:a2:c8:51:e0:97:07:
ea:d7:0b:ae:11:8e:fe:e6:96:4b:13:ca:9d:32:e3:02:63:dd:
92:41:60:77:d6:f4:5b:94:26:eb:8f:32:15:20:be:52:31:bc:
6b:ad:00:af:15:1d:34:64:6f:bd:73:b7:5d:ad:d7:45:a8:43:
32:70:09:f9:d7:7e:d5:7b:59:d1:3f:9a:19:45:9c:62:3b:01:
1e:bf:cf:06:b0:ac:09:89:d7:ce:65:86:e8:9b:74:13:4e:64:
d9:65:db:07:dd:d4:8a:22:98:ea:56:b4:c6:da:9a:8a:f1:ee:
4d:e2:54:ae:99:60:b1:d1:63:b9:7c:d0:f6:cd:05:50:b0:3b:
e1:ae:32:3e:9f:78:26:5e:76:fc:0b:80:a7:de:8a:7b:2c:87:
40:15:f4:70:b0:bb:51:2c:d2:cd:a1:ff:98:93:9b:bb:07:bf:
64:76:d8:97:72:09:03:1a:b4:64:dc:c5:0c:3a:74:a3:33:8f:
c5:6e:e7:f5:bb:5f:db:0b:37:da:40:f4:25:94:82:c7:41:67:
0f:18:f1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:38:58 2026 by rpki-client