Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
File: LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft (raw, json)
Hash identifier: bKAnSUp2PJOdH693c4C6BCKtliLLLmrZ23vScSwbDTU=
Subject key identifier: B4:56:88:59:1C:EB:1C:94:4E:6C:9B:FF:CF:B8:E6:99:E8:7D:8E:79
Authority key identifier: 2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
Certificate issuer: /CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Certificate serial: 019CABA200ECC1B3C523A3C81A63645A1A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 23:00:46 +0000
Manifest this update: Sun 01 Mar 2026 23:00:46 +0000
Manifest next update: Mon 02 Mar 2026 23:00:46 +0000
Files and hashes: 1: LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl (hash: MkFQhf0JPfbyRGLVM2Y/FWOz2tbWBGyND318YfuUHIQ=)
2: iH-W1KrCxFHlEwTj-N3qmKRJjJM.roa (hash: KY2lJTniA4rnCiE0KdvRBg56MPlz79jziBGeziSB/MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:00:ec:c1:b3:c5:23:a3:c8:1a:63:64:5a:1a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Validity
Not Before: Mar 1 23:00:46 2026 GMT
Not After : Mar 2 23:00:46 2026 GMT
Subject: CN=b45688591ceb1c944e6c9bffcfb8e699e87d8e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:91:36:0b:af:1c:41:2e:0f:a8:bb:09:2a:
6f:18:40:2d:65:9b:dc:85:96:14:b1:a5:97:89:cd:
28:e8:28:92:d8:3d:66:8b:a9:50:46:05:3f:5b:72:
14:ee:a5:9c:d5:dd:7b:80:af:12:11:ab:f1:b3:28:
29:ef:90:53:1a:25:e3:da:53:6f:59:2e:b3:0d:91:
e5:58:c1:bc:b6:4d:7f:47:c7:66:7e:d5:93:20:e6:
6d:0e:33:7c:b2:09:12:f8:1f:fe:ee:ce:dd:ad:f8:
c1:30:0c:98:64:a4:93:9a:d2:f0:76:b7:ff:2b:bd:
88:b4:09:f9:98:cd:8c:7c:a7:3e:d3:2c:0c:44:05:
71:68:44:9e:74:3c:19:f4:31:2b:19:52:87:29:b4:
e2:48:9c:d3:e8:ae:01:8b:80:83:39:19:ce:a2:c1:
a7:5e:72:81:37:67:a5:a7:4f:11:0f:af:61:23:60:
af:a3:b9:c1:83:f7:b4:45:8f:51:96:6a:05:4b:e0:
13:40:c0:28:a7:c4:47:c7:7d:a4:62:e2:58:86:ee:
60:ad:9f:88:7d:5b:76:eb:aa:ec:2c:2e:0d:45:7f:
04:1d:cc:da:ab:54:bd:d8:f8:f1:08:03:ac:89:61:
5b:18:36:dd:6a:a6:41:ff:9f:05:57:42:f1:f2:0d:
bb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:56:88:59:1C:EB:1C:94:4E:6C:9B:FF:CF:B8:E6:99:E8:7D:8E:79
X509v3 Authority Key Identifier:
keyid:2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:99:a3:d8:7c:4d:30:53:d6:6c:90:be:c5:a8:e8:11:87:64:
98:98:60:7d:03:df:5a:6a:9d:3e:73:59:3d:bf:1b:0b:f1:f1:
1e:07:04:bc:92:08:71:db:c7:19:f4:08:1d:29:e3:ca:6d:7e:
3b:19:ae:90:60:35:da:39:b7:9d:3d:4b:02:d2:78:81:0e:cc:
10:81:e7:ee:b4:b4:56:20:03:c0:5b:2c:94:92:bf:c0:5e:39:
57:09:52:bb:d8:8d:57:9c:2b:34:0f:41:6e:db:f3:e3:66:ec:
9d:a1:12:cb:f3:1d:a4:68:0b:4e:d2:2f:fd:16:af:b1:97:47:
a8:33:fe:c0:38:c6:e8:80:9d:e2:70:60:f3:e6:ce:5a:e3:6a:
bf:18:b8:95:05:69:0d:26:aa:d2:96:4d:4b:a5:3d:4b:82:a0:
be:44:ef:01:af:8c:5c:97:dc:5c:b8:eb:e5:51:36:4b:fb:9f:
6a:f2:03:7f:7f:4c:36:98:72:ec:1e:3c:77:c1:7a:5f:6d:13:
75:70:4a:cf:82:60:7c:1d:f8:46:be:b0:6b:41:53:fb:76:fa:
57:3e:c2:47:dc:db:8a:b3:6a:46:02:51:75:2b:98:c9:9a:54:
af:79:22:57:7f:38:7d:0a:30:3a:61:bb:37:03:c0:41:14:9c:
46:aa:32:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:16 2026 by rpki-client