Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.mft
File: LWHdlSWcJozW425VvLLLzFNbCog.mft (raw, json)
Hash identifier: OO1pUymQ9W3LmIXKT/gEaciGvkf6QAJ/KgaevlcXyyk=
Subject key identifier: C2:D8:19:BC:BF:C9:EC:10:A4:7E:74:07:19:EF:BE:92:15:07:66:F7
Authority key identifier: 2D:61:DD:95:25:9C:26:8C:D6:E3:6E:55:BC:B2:CB:CC:53:5B:0A:88
Certificate issuer: /CN=2d61dd95259c268cd6e36e55bcb2cbcc535b0a88
Certificate serial: 01A0D9BA67702E69DA39CF10FA638C3FD6D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWHdlSWcJozW425VvLLLzFNbCog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:01:07 +0000
Manifest this update: Fri 25 Sep 2026 18:01:07 +0000
Manifest next update: Sat 26 Sep 2026 18:01:07 +0000
Files and hashes: 1: LWHdlSWcJozW425VvLLLzFNbCog.crl (hash: KwGLO1gkhqSYC5TYy+pf9JcURCw4frd0dEREFuEb/MU=)
2: su82rcXot9m4Oy9K0FlOPXjQokA.roa (hash: NI3FeLiF5hrONml+ClMirVnRKzwaGy4tC2KGOZ7IoK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWHdlSWcJozW425VvLLLzFNbCog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:67:70:2e:69:da:39:cf:10:fa:63:8c:3f:d6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d61dd95259c268cd6e36e55bcb2cbcc535b0a88
Validity
Not Before: Sep 25 18:01:07 2026 GMT
Not After : Sep 26 18:01:07 2026 GMT
Subject: CN=c2d819bcbfc9ec10a47e740719efbe92150766f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c1:c1:97:0d:01:be:a7:0f:78:0b:c9:b9:d4:
e4:4e:22:de:33:63:92:a8:2f:8c:40:57:fa:fd:a0:
e8:e9:38:8f:4e:48:96:8b:66:39:a3:fc:ce:dd:df:
6d:8e:cd:29:33:c6:57:e0:8e:e4:0d:8d:ab:43:87:
bb:2f:a8:f0:89:6b:60:90:8b:75:b3:a0:a0:5a:06:
85:5d:76:58:b3:50:d4:44:72:9c:ca:86:66:9e:c5:
89:fa:d3:2f:f7:79:d0:22:66:64:19:a3:d1:4c:74:
0e:34:40:a6:e5:7e:d9:2c:d3:9c:67:58:08:3d:23:
1b:b3:14:4a:9d:c2:90:33:4d:58:38:c7:58:0c:e7:
e1:f8:9b:5e:4b:e4:f7:81:48:6d:99:95:46:39:29:
51:2f:24:bc:0b:9d:0f:13:b7:1d:16:ab:03:af:d5:
b3:40:8b:9a:d2:a7:54:91:1a:a5:40:a5:5a:53:6e:
c0:8a:88:9d:fc:14:b0:26:d8:b1:7b:ee:02:76:16:
c2:96:72:ea:d4:d0:b5:a3:ea:de:75:d8:93:b9:f1:
38:ce:64:b6:3c:aa:41:d3:f7:03:3f:f3:78:1d:d6:
7a:3d:c2:50:26:47:34:f8:60:5b:ad:e9:33:92:25:
df:d9:80:e1:17:a6:06:b1:33:7f:66:46:6e:1e:06:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:19:BC:BF:C9:EC:10:A4:7E:74:07:19:EF:BE:92:15:07:66:F7
X509v3 Authority Key Identifier:
keyid:2D:61:DD:95:25:9C:26:8C:D6:E3:6E:55:BC:B2:CB:CC:53:5B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWHdlSWcJozW425VvLLLzFNbCog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:99:c2:20:f5:d8:32:14:ec:6f:64:4c:4f:89:d8:f5:2a:1a:
3a:11:73:13:12:17:e6:07:bc:04:46:3b:44:a6:c3:ef:60:6e:
c5:a5:9e:c1:09:09:c1:72:d7:51:a1:78:2e:75:b6:0e:3d:3d:
de:02:66:78:8d:bc:bf:8c:02:f1:4c:1d:8a:3d:15:37:18:d0:
45:16:5d:eb:dd:e4:d3:81:e8:27:a1:ab:14:c0:15:e0:f5:0b:
c6:47:ac:ee:2b:6b:fa:26:62:64:f9:2c:06:f9:90:5f:1f:3d:
f4:38:a1:11:c1:0f:05:3d:ad:5a:05:5f:db:23:c5:c8:bd:17:
fd:3d:98:a7:61:c8:e5:c6:33:00:ba:48:40:31:eb:e2:8d:f4:
0f:f9:93:a7:23:3d:38:c3:e1:b0:0e:83:6d:d7:6d:bf:72:25:
27:1c:4b:9b:28:4d:1e:de:40:c7:c6:4a:83:fa:f1:70:00:0c:
56:3a:aa:84:5e:f7:9a:06:17:51:01:c9:16:30:d4:3b:4a:84:
81:2e:f3:d8:12:2a:31:d0:57:60:5c:f6:db:04:eb:a8:91:95:
e0:9b:3e:f8:01:60:fa:c6:ad:d4:26:80:ef:99:2d:67:45:a2:
54:cf:f8:91:11:6d:1d:8a:8d:48:93:49:5b:fb:7e:ac:40:0e:
86:5c:24:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:15:03 2026 by rpki-client