Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
File: LswQU0wEJcv21GXoQRT_euDwsFI.mft (raw, json)
Hash identifier: miqUBGvY9G6+UpgtgVHPhAeaQFBTZI7LTeM47bnyXws=
Subject key identifier: 0F:FE:C6:B6:66:4E:C2:A0:A7:0C:CF:19:41:78:DD:67:C0:2C:D4:1D
Authority key identifier: 2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
Certificate issuer: /CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Certificate serial: 019D9AE2F822440F9FCF0A648C6A61009E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
Manifest number: 0941
Signing time: Fri 17 Apr 2026 10:00:59 +0000
Manifest this update: Fri 17 Apr 2026 10:00:59 +0000
Manifest next update: Sat 18 Apr 2026 10:00:59 +0000
Files and hashes: 1: LswQU0wEJcv21GXoQRT_euDwsFI.crl (hash: wQtab3FUdj41TPDokTZqnQBmdhqsbYIamQQcQwMpzug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:f8:22:44:0f:9f:cf:0a:64:8c:6a:61:00:9e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Validity
Not Before: Apr 17 10:00:59 2026 GMT
Not After : Apr 18 10:00:59 2026 GMT
Subject: CN=0ffec6b6664ec2a0a70ccf194178dd67c02cd41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:ad:11:b4:85:22:03:1f:07:25:c1:04:be:
46:9e:c4:ed:97:4c:b3:f3:ed:ae:83:24:b4:b7:ce:
c8:62:b2:17:d4:67:ed:84:0a:ba:4b:f9:d4:7e:b3:
fe:90:4a:a3:9d:b0:98:ff:4f:27:f6:80:1e:fb:a6:
af:b0:e6:ad:26:5e:d3:d1:b1:31:86:10:d1:df:05:
30:b6:8d:85:9e:e0:a7:a4:e0:30:5a:03:4c:4c:0b:
7e:0a:e2:bb:26:2b:f8:bf:cb:84:9f:91:bd:20:81:
9c:e3:69:7c:50:50:49:bb:4d:27:f3:a1:c7:65:ce:
86:da:92:02:bf:33:a2:49:7f:d2:b5:b4:81:87:aa:
83:23:f8:09:d6:2a:e1:76:70:2b:14:76:8b:50:8b:
eb:32:dc:75:a6:c5:e6:9d:d2:ef:5b:b7:5c:07:49:
65:5f:31:c5:3b:6d:1f:9b:4b:02:68:04:2c:3b:8d:
11:cd:ab:3b:a8:3e:35:6f:e4:a9:5e:dd:74:68:09:
3f:3c:c0:2e:91:07:2b:9b:9e:93:7b:86:9a:d0:95:
a4:3b:a3:5c:05:33:12:93:a5:18:76:54:ac:a1:c5:
34:39:4d:0f:d8:27:de:bf:64:51:e9:54:17:65:0c:
f8:ae:e3:d7:5f:f5:42:04:9b:17:1c:aa:a8:f3:70:
da:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FE:C6:B6:66:4E:C2:A0:A7:0C:CF:19:41:78:DD:67:C0:2C:D4:1D
X509v3 Authority Key Identifier:
keyid:2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9f:78:b1:16:6d:0c:5b:18:fc:2c:10:49:e4:7a:e8:b1:39:
d0:ff:aa:8f:49:a3:6a:b5:b7:1e:4d:93:6b:e1:fe:4c:06:9f:
5a:b7:07:73:bd:1d:42:5f:b6:9d:c3:ce:85:82:be:84:b3:77:
ce:d4:2b:2d:da:39:dd:26:e5:39:c3:78:c8:02:e9:25:aa:40:
d9:dc:4f:8e:f6:8e:a3:c3:1d:01:1c:e1:61:ae:a5:db:7d:a9:
1e:aa:45:0e:f3:3b:24:0e:33:e9:8c:0e:ef:28:3d:ce:7e:06:
77:e5:f3:cb:9c:a7:72:5a:dc:35:dc:ae:a8:63:eb:9e:33:de:
70:40:6b:9a:87:c7:8f:4d:96:1d:62:6b:98:bd:9c:a3:25:b6:
39:07:06:ee:87:8d:81:1f:89:ef:9d:04:6d:af:34:6a:fd:72:
65:01:4e:fb:7c:31:3d:84:80:ce:ff:4d:1e:53:6b:d9:bd:2b:
19:8c:1a:eb:b4:fe:0c:67:e2:68:a1:69:33:41:e7:e4:1a:b3:
89:61:f7:76:7f:5a:0e:5c:f3:94:3d:c4:95:f6:d8:ad:84:a8:
83:7c:f1:3d:74:87:fd:66:54:8e:31:24:97:b6:d8:ba:ae:34:
4c:7e:61:d0:14:ce:8f:98:2c:8c:e3:24:8f:8e:fe:a3:8d:e8:
d3:18:7e:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4vgiRA+fzwpkjGphAJ6SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlY2MxMDUzNGMwNDI1Y2JmNmQ0NjVlODQxMTRmZjdhZTBm
MGIwNTIwHhcNMjYwNDE3MTAwMDU5WhcNMjYwNDE4MTAwMDU5WjAzMTEwLwYDVQQD
EygwZmZlYzZiNjY2NGVjMmEwYTcwY2NmMTk0MTc4ZGQ2N2MwMmNkNDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKKtEbSFIgMfByXBBL5GnsTtl0yz
8+2ugyS0t87IYrIX1GfthAq6S/nUfrP+kEqjnbCY/08n9oAe+6avsOatJl7T0bEx
hhDR3wUwto2FnuCnpOAwWgNMTAt+CuK7Jiv4v8uEn5G9IIGc42l8UFBJu00n86HH
Zc6G2pICvzOiSX/StbSBh6qDI/gJ1irhdnArFHaLUIvrMtx1psXmndLvW7dcB0ll
XzHFO20fm0sCaAQsO40Rzas7qD41b+SpXt10aAk/PMAukQcrm56Te4aa0JWkO6Nc
BTMSk6UYdlSsocU0OU0P2Cfev2RR6VQXZQz4ruPXX/VCBJsXHKqo83DatQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/+xrZmTsKgpwzPGUF43WfALNQdMB8GA1UdIwQY
MBaAFC7MEFNMBCXL9tRl6EEU/3rg8LBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHN3UVUwd0VKY3YyMUdYb1FSVF9ldUR3c0ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZmZmNGEtZjk4NC00YjFmLTliMmIt
M2Q3OTJmYjkwNWVlLzEvTHN3UVUwd0VKY3YyMUdYb1FSVF9ldUR3c0ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZmZmNGEtZjk4NC00YjFmLTliMmItM2Q3OTJmYjkwNWVl
LzEvTHN3UVUwd0VKY3YyMUdYb1FSVF9ldUR3c0ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJ94sRZt
DFsY/CwQSeR66LE50P+qj0mjarW3Hk2Ta+H+TAafWrcHc70dQl+2ncPOhYK+hLN3
ztQrLdo53SblOcN4yALpJapA2dxPjvaOo8MdARzhYa6l232pHqpFDvM7JA4z6YwO
7yg9zn4Gd+Xzy5ynclrcNdyuqGPrnjPecEBrmofHj02WHWJrmL2coyW2OQcG7oeN
gR+J750Eba80av1yZQFO+3wxPYSAzv9NHlNr2b0rGYwa67T+DGfiaKFpM0Hn5Bqz
iWH3dn9aDlzzlD3ElfbYrYSog3zxPXSH/WZUjjEkl7bYuq40TH5h0BTOj5gsjOMk
j47+o43o0xh+yg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:06:26 2026 by rpki-client