Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: MR7fZ2U+KNymCyzjAckk+o6mVlIo+q43xBl2rQQaqFM=
Subject key identifier: 45:CD:71:80:03:A0:9A:D8:C0:F1:20:7B:7F:7F:E6:E2:B5:F2:B5:C1
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 019EBFC88115760D4F04B546FC39F857814D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 0851
Signing time: Sat 13 Jun 2026 07:00:48 +0000
Manifest this update: Sat 13 Jun 2026 07:00:48 +0000
Manifest next update: Sun 14 Jun 2026 07:00:48 +0000
Files and hashes: 1: XCAs1bdvDVK0mf6fnpHwHSrCy_s.roa (hash: vPe5QDgsOEWj+wwao+43Qg6PstZ+Q+ujB68nk8LOfvM=)
2: lMbrVRARiCtxbw4rV7uiKYJABbQ.roa (hash: ArJG5NTDy7CYItxIRIVnQaO1q2a53EHq1s7L+RB3qkw=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: FV+nn/RqJ2i8kqh03PsfDxerSVoeGSapQ7o9M2+6wzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:81:15:76:0d:4f:04:b5:46:fc:39:f8:57:81:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Jun 13 07:00:48 2026 GMT
Not After : Jun 14 07:00:48 2026 GMT
Subject: CN=45cd718003a09ad8c0f1207b7f7fe6e2b5f2b5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:b0:76:cb:bd:5c:e2:24:fc:2f:28:8c:94:
a5:ea:0b:1a:f4:d3:1c:03:19:36:e6:ec:c0:82:e2:
61:f7:82:b4:8a:3b:ac:63:40:56:4e:6c:6a:5a:58:
0b:57:5e:15:99:7c:1c:2f:f2:d2:77:14:13:e4:37:
2c:81:c6:da:c5:73:1d:2a:a8:3d:61:e3:a1:e5:18:
3d:10:3e:d4:46:da:a7:f0:d5:b6:36:42:4c:aa:5b:
d6:06:23:29:67:a9:74:af:3b:3a:07:e0:c9:db:6f:
a1:5e:f0:58:ae:0f:3b:0f:a2:99:d6:bd:b0:15:f8:
63:72:a5:51:03:3f:f3:da:7b:54:ee:44:8e:48:28:
68:f2:34:4f:89:bd:a1:cd:08:06:e4:ea:be:6b:4f:
1d:6d:cb:c7:b7:f5:41:a3:b2:4f:67:74:13:ea:35:
3c:47:c3:3d:1f:ec:c7:a1:d9:40:2b:56:38:2f:93:
e0:88:a0:46:8e:33:a8:b8:92:bc:ce:d0:5b:48:2d:
e6:aa:9d:db:9a:15:0b:6a:c9:ca:e1:9c:b6:45:2a:
b7:1e:a5:3d:4c:7c:7b:01:05:ec:35:13:3e:9a:89:
52:a5:8b:22:22:e9:86:75:ba:28:5e:da:df:32:cf:
0c:b9:5a:40:e0:d3:e9:6f:4c:d5:f3:0b:4b:28:4c:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CD:71:80:03:A0:9A:D8:C0:F1:20:7B:7F:7F:E6:E2:B5:F2:B5:C1
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b1:22:97:42:4c:02:68:93:78:f4:47:ec:61:40:d2:5b:05:
fc:6d:25:bc:88:39:a2:0d:be:48:93:96:0b:1d:2c:a1:12:5b:
4f:bd:ac:a9:28:f8:0b:44:b1:fa:b4:e8:07:00:c8:39:8c:77:
41:f4:5d:0d:e8:73:d6:ca:9f:49:8d:7b:c6:6c:41:83:a3:ad:
93:29:69:96:42:3d:df:2d:e5:69:38:55:5e:35:b5:e9:53:96:
8d:05:2b:13:4a:5a:be:2d:56:4f:de:ee:90:d6:47:d4:bf:7d:
23:bd:44:e5:0e:6b:06:5a:c8:a3:8a:3e:ab:1f:b3:21:75:1a:
3f:e6:6f:d8:42:f5:0f:0a:ab:86:c1:f9:63:40:c0:c7:35:95:
ad:73:60:99:83:76:97:22:d4:d8:ba:d7:54:8a:90:b6:91:63:
fb:e3:80:32:a1:b2:94:f2:da:88:7d:bc:bd:1b:fe:c9:3f:c6:
97:ec:0d:34:2c:82:1b:21:40:c1:1a:08:68:58:fc:a6:ab:11:
35:15:77:25:1a:af:dc:78:a3:64:dc:6a:b4:63:86:0a:14:ec:
41:cc:f9:4b:47:ed:bd:c2:3a:3e:cf:70:ce:9c:fd:a4:00:98:
0e:b1:0c:07:4b:0f:6a:3c:99:9c:ec:62:d4:a8:1f:b8:62:fe:
ea:69:80:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:52:02 2026 by rpki-client