Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File: LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier: UwhiKmcKP6fnm5J18s9N3I+/OJVXGxvN1fAJ1uw04rc=
Subject key identifier: 31:2B:01:55:F0:AA:44:60:C8:E6:4D:A0:70:33:99:7E:17:A0:3F:0C
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer: /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial: 019CAAFCFEF197162142C96700F963BF4A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number: 064B
Signing time: Sun 01 Mar 2026 20:00:32 +0000
Manifest this update: Sun 01 Mar 2026 20:00:32 +0000
Manifest next update: Mon 02 Mar 2026 20:00:32 +0000
Files and hashes: 1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: GiYOeDW/vsvhw7ZvJX5bC0fXCFj3xNDL1NuodHhl/BY=)
2: v3xovZ6ex1RS8yXpvjTxnMF_a-4.roa (hash: x4aNx2jmSAXUPJWnM7IfmYiwoUK7G3tuxZu7KLeQ7ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:fe:f1:97:16:21:42:c9:67:00:f9:63:bf:4a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Validity
Not Before: Mar 1 20:00:32 2026 GMT
Not After : Mar 2 20:00:32 2026 GMT
Subject: CN=312b0155f0aa4460c8e64da07033997e17a03f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:eb:29:3d:fa:42:2b:1f:4d:1e:48:54:2f:
78:14:69:c1:57:3b:0d:7a:4b:c8:82:1d:04:cc:8b:
06:0d:61:a1:13:69:44:a0:56:10:d1:90:d8:0f:82:
40:cf:36:67:cf:9c:50:36:91:6e:12:69:5e:4f:f5:
a9:00:34:44:02:cb:cc:f3:7c:9b:73:79:32:84:b5:
98:8c:10:4b:7c:c0:8f:4d:22:7d:2e:6b:cf:3e:87:
0f:c8:4d:9f:51:37:10:80:ad:99:0d:c9:0f:31:96:
db:08:63:48:37:51:b5:06:90:b9:1f:c3:4d:ee:8f:
15:3a:a5:4e:c8:74:a5:dc:b4:7b:98:e3:f4:1f:2e:
f8:c4:be:cb:0e:9d:e7:60:2c:5e:17:b4:b2:5d:b7:
e2:5e:55:ea:23:54:8d:81:c1:ea:76:e2:89:c5:e6:
6c:60:87:12:3a:a4:07:14:a8:f3:54:eb:d9:d1:27:
19:81:0b:33:33:7e:f5:a0:f3:94:60:2f:77:b2:ae:
63:4a:54:e1:91:31:a1:1c:40:f5:8f:29:f6:88:96:
81:3c:fd:e7:27:77:75:4f:c9:91:d5:79:84:e3:c4:
fc:f8:80:84:29:f2:fb:c6:81:6b:02:a6:21:3d:56:
c5:49:55:b4:1b:6e:69:62:75:64:d7:6e:09:4f:17:
28:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2B:01:55:F0:AA:44:60:C8:E6:4D:A0:70:33:99:7E:17:A0:3F:0C
X509v3 Authority Key Identifier:
keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0c:43:e5:87:00:e0:e3:d0:30:78:37:51:54:a4:b3:86:59:
b7:1d:f1:ff:10:c4:10:90:2b:14:04:e3:76:42:ec:30:28:ab:
31:c0:16:80:2b:b1:dc:e0:0c:c1:51:2b:b2:1d:b0:95:3c:dc:
5f:94:c3:dc:6f:77:0f:00:ac:43:87:af:66:eb:f7:a5:32:38:
ff:13:3c:19:3c:ef:11:0e:7a:c8:28:bc:8f:b3:bb:10:fa:34:
2f:3a:8c:04:97:77:24:6f:e4:31:29:fb:77:d1:5b:ec:fd:b3:
c2:da:0f:85:bc:78:41:03:5f:55:0e:3e:59:a0:4f:4d:da:6c:
25:94:cb:85:0a:67:21:be:ec:53:c7:ff:8d:36:6a:a8:56:ef:
26:7f:0e:b1:55:3d:69:b9:0e:9f:59:02:86:94:96:44:26:50:
3e:e3:23:df:a1:5b:a9:5f:59:6f:53:4a:3c:09:52:4e:11:9d:
87:b6:fa:af:2e:94:f0:3b:5e:eb:73:3c:ad:80:74:ac:1f:33:
00:0a:50:93:57:b8:4e:84:90:49:e7:5f:52:21:ec:f0:5d:a2:
7c:4c:9c:e4:d7:72:94:a5:5c:a0:f0:85:91:a5:4a:de:7c:2f:
f7:4f:c8:8a:cd:7a:12:6f:4a:fe:2b:67:06:3b:56:5d:90:08:
ca:00:92:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:44 2026 by rpki-client