Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
File: LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft (raw, json)
Hash identifier: BnitwEggwZumxBXPJ6KnRGXAkb6SznnrMgI853h1Crk=
Subject key identifier: 4D:FA:9C:4D:2B:7C:BF:5F:9A:4C:58:96:3A:B6:91:51:E6:9C:D4:89
Authority key identifier: 2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
Certificate issuer: /CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Certificate serial: 019D9B1983B63F0CF55857C45985297F4B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 11:00:33 +0000
Manifest this update: Fri 17 Apr 2026 11:00:33 +0000
Manifest next update: Sat 18 Apr 2026 11:00:33 +0000
Files and hashes: 1: LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl (hash: zA8BQt+296FHfRomH9dcYxNAscsnwLAJL+ryIUqle6A=)
2: iH-W1KrCxFHlEwTj-N3qmKRJjJM.roa (hash: KY2lJTniA4rnCiE0KdvRBg56MPlz79jziBGeziSB/MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:83:b6:3f:0c:f5:58:57:c4:59:85:29:7f:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Validity
Not Before: Apr 17 11:00:33 2026 GMT
Not After : Apr 18 11:00:33 2026 GMT
Subject: CN=4dfa9c4d2b7cbf5f9a4c58963ab69151e69cd489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2f:2e:01:0c:79:89:c5:06:a0:18:5d:86:24:
72:b6:0a:c3:9f:dd:ab:32:6e:0d:62:45:81:e6:59:
08:26:20:8a:6e:b1:e8:58:a7:d0:34:26:e1:92:96:
2e:fc:63:26:4f:56:38:fe:9b:57:4d:f6:3e:9e:78:
e3:5a:40:76:c2:e7:0d:b4:18:49:77:0a:e9:df:3a:
5e:23:00:06:79:86:49:b8:71:7e:d2:bf:07:f9:b2:
c1:65:5c:4d:99:66:15:b4:85:3f:2b:9c:85:f8:f5:
0b:a9:f4:0c:0d:c7:0a:21:26:f1:66:47:f9:92:a3:
d2:d9:76:ad:72:4d:65:12:21:a9:6f:fe:1b:ea:d8:
46:d0:29:c5:fb:a1:77:98:c3:71:99:d6:34:41:1e:
89:d1:f7:bb:a0:ce:29:8a:4f:ce:02:49:cd:07:48:
aa:e9:ac:6c:a8:1b:b2:fd:74:84:40:7b:4c:99:dd:
76:f9:9e:3f:ae:6f:8d:3c:66:9b:9d:3d:03:f7:9c:
ae:d1:1b:18:51:c9:74:08:71:db:9f:7c:78:90:62:
a0:d2:1a:6a:05:78:a8:78:ff:8e:40:8e:4c:17:c4:
f5:40:a1:8c:3f:06:a3:09:92:f6:84:38:cf:fb:7e:
b4:e4:b8:2d:ca:3e:f7:b0:76:e0:61:8d:aa:43:ee:
60:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FA:9C:4D:2B:7C:BF:5F:9A:4C:58:96:3A:B6:91:51:E6:9C:D4:89
X509v3 Authority Key Identifier:
keyid:2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d8:82:05:4e:64:02:1b:02:41:75:d5:e6:63:dc:62:d7:33:
c8:4e:d9:4e:99:60:83:2a:38:d1:2b:ba:af:0f:1c:7e:78:82:
6b:c9:91:d0:7b:91:cc:ff:02:21:c3:95:6b:1f:43:b1:1a:5e:
01:e7:d4:37:d5:fe:00:ac:33:a5:f3:95:fc:63:ad:4f:ab:5a:
62:a0:7d:08:f7:86:7f:33:81:03:8a:f1:d7:a3:f2:3e:56:69:
55:40:c3:ca:ab:b1:55:38:46:2a:c9:68:e5:c5:99:4e:fa:71:
d8:0c:31:78:f3:67:8f:39:d0:50:94:0d:bb:85:4c:34:9a:0b:
b1:a3:f0:f5:53:45:9b:13:f7:7b:3d:5d:04:d0:8d:1c:93:41:
ce:b4:8f:ba:56:43:f4:f3:4d:de:95:62:29:de:e4:ff:45:25:
f9:3d:b2:a6:c0:16:6f:0c:11:a0:0a:5c:eb:15:18:3b:ba:d5:
15:29:2c:96:f8:b4:77:ce:7a:3a:81:f4:c3:21:4d:08:b5:4d:
44:36:ff:4d:04:64:31:03:fb:ce:cb:5a:0e:43:fd:1b:44:e6:
df:b7:54:47:90:aa:99:de:0a:fa:fa:51:03:04:20:fa:da:f1:
53:cd:8e:d7:1e:a7:45:6e:ce:c5:58:c2:75:2f:67:94:2c:54:
e8:ae:16:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:04:43 2026 by rpki-client