Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
File: LWNPtoGAIUTwZMGxnxH2qudZbc8.mft (raw, json)
Hash identifier: THIATqyPIav0xFW3MDl5VtiHHAg1LU6Wywnup1wof2g=
Subject key identifier: 82:6E:A0:DB:A6:48:04:6B:C9:F8:6E:54:58:77:34:80:44:E2:30:A0
Authority key identifier: 2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
Certificate issuer: /CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Certificate serial: 019CAAC6C788BB6E141A63F221A1FD44E142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
Manifest number: 0B3C
Signing time: Sun 01 Mar 2026 19:01:19 +0000
Manifest this update: Sun 01 Mar 2026 19:01:19 +0000
Manifest next update: Mon 02 Mar 2026 19:01:19 +0000
Files and hashes: 1: 8r5CCMNCOrF5UeZm--M1-L2_aNE.roa (hash: 5uZrQi9goTIW1VoDg15afLwiKtYpkz/EDyqXcTbpQqo=)
2: LWNPtoGAIUTwZMGxnxH2qudZbc8.crl (hash: iLn0IdXNIhG+VS+irDX2BvbTvkVevgJNnP1eT7nZQUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c7:88:bb:6e:14:1a:63:f2:21:a1:fd:44:e1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Validity
Not Before: Mar 1 19:01:19 2026 GMT
Not After : Mar 2 19:01:19 2026 GMT
Subject: CN=826ea0dba648046bc9f86e545877348044e230a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c1:03:0a:98:ef:fb:b5:18:9d:ce:36:02:d9:
b5:6d:83:d1:80:f3:ae:18:e2:07:14:bf:74:49:ef:
fc:26:8f:4f:18:51:2d:e0:dd:29:43:a2:33:9c:c7:
77:42:c0:36:01:f6:61:8f:48:ea:3e:88:f2:02:a8:
35:d5:13:4e:7f:27:3b:68:f8:fc:8e:02:46:04:6b:
d2:d2:94:a4:ff:7e:51:b5:bc:c1:97:1c:b8:62:87:
67:ce:cd:9e:9e:79:a6:96:52:f1:b2:5e:fb:e3:b9:
c8:bf:88:79:38:72:35:7c:78:a0:91:45:de:40:1c:
2b:a8:e8:75:46:12:3d:10:c5:54:b2:e8:e4:f2:26:
36:21:44:5d:4e:07:81:c6:b8:b3:a9:0c:38:3f:2d:
df:ef:c2:71:a1:cb:50:a6:fb:cc:2e:18:71:f2:b5:
31:33:47:f2:87:9a:fa:d3:79:17:ef:29:d0:fb:a8:
28:fb:3b:d8:de:08:f1:a2:da:2c:82:eb:71:da:2f:
2f:7c:92:d4:36:b1:04:c2:82:6b:e9:e8:1c:18:19:
c2:10:0c:05:c3:90:53:3c:e0:f8:c8:bc:9e:24:d0:
92:c9:c0:53:c2:78:8e:8f:84:67:0f:84:c1:0b:f0:
52:08:63:d8:66:5e:1f:3d:1b:4f:4d:73:54:73:ac:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6E:A0:DB:A6:48:04:6B:C9:F8:6E:54:58:77:34:80:44:E2:30:A0
X509v3 Authority Key Identifier:
keyid:2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:43:8e:b3:38:d7:bc:34:c6:8e:3e:75:be:bb:ec:b0:13:2f:
e3:ee:cb:b6:46:0b:bd:00:21:bd:dd:ef:91:47:c1:fd:a4:4f:
b0:37:67:88:15:4b:ab:eb:26:1e:02:42:e4:7b:13:84:b2:00:
52:f9:bf:e7:e2:e5:11:9e:75:b6:8e:b3:7c:47:42:5b:ab:d9:
2f:90:0c:09:de:df:e6:c7:a1:cd:6b:f0:31:ca:4e:e9:21:b6:
33:05:fc:53:f8:cc:95:c3:82:b9:9c:ce:57:ea:9c:4f:26:8b:
6d:fc:16:c4:3a:c2:a4:49:e4:37:13:5d:a7:ca:bf:86:25:ad:
1d:bf:b0:6f:38:2c:13:2d:f7:cc:e8:b4:0b:5c:fe:78:40:d2:
3d:17:df:bb:45:5e:2a:c8:8a:b7:86:4e:62:dd:78:24:ac:73:
bf:51:4e:06:76:54:58:7e:8f:a4:a6:b5:95:73:61:93:20:e9:
f3:31:f2:3c:10:d3:54:10:57:b4:43:b1:b6:c9:14:49:d4:1b:
25:0a:d2:12:d4:db:33:8d:a7:2d:67:54:f1:3b:74:8f:22:88:
ca:51:b3:c3:58:6f:78:d8:1c:a7:90:62:bf:f4:f9:6a:e6:4f:
b7:e8:24:40:68:a8:c8:f9:de:4a:3d:7c:aa:8e:bd:d7:c0:58:
43:f5:5c:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxseIu24UGmPyIaH9ROFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjM0ZmI2ODE4MDIxNDRmMDY0YzFiMTlmMTFmNmFhZTc1
OTZkY2YwHhcNMjYwMzAxMTkwMTE5WhcNMjYwMzAyMTkwMTE5WjAzMTEwLwYDVQQD
Eyg4MjZlYTBkYmE2NDgwNDZiYzlmODZlNTQ1ODc3MzQ4MDQ0ZTIzMGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8EDCpjv+7UYnc42Atm1bYPRgPOu
GOIHFL90Se/8Jo9PGFEt4N0pQ6IznMd3QsA2AfZhj0jqPojyAqg11RNOfyc7aPj8
jgJGBGvS0pSk/35RtbzBlxy4Yodnzs2ennmmllLxsl7747nIv4h5OHI1fHigkUXe
QBwrqOh1RhI9EMVUsujk8iY2IURdTgeBxrizqQw4Py3f78JxoctQpvvMLhhx8rUx
M0fyh5r603kX7ynQ+6go+zvY3gjxotosgutx2i8vfJLUNrEEwoJr6egcGBnCEAwF
w5BTPOD4yLyeJNCSycBTwniOj4RnD4TBC/BSCGPYZl4fPRtPTXNUc6yiQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJuoNumSARryfhuVFh3NIBE4jCgMB8GA1UdIwQY
MBaAFC1jT7aBgCFE8GTBsZ8R9qrnWW3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdOUHRvR0FJVVR3Wk1HeG54SDJxdWRaYmM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iYTE5ODctNTIyZS00OThjLWEzNTkt
NzZhMGY3Yjg0MWRjLzEvTFdOUHRvR0FJVVR3Wk1HeG54SDJxdWRaYmM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9iYTE5ODctNTIyZS00OThjLWEzNTktNzZhMGY3Yjg0MWRj
LzEvTFdOUHRvR0FJVVR3Wk1HeG54SDJxdWRaYmM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkOOszjX
vDTGjj51vrvssBMv4+7LtkYLvQAhvd3vkUfB/aRPsDdniBVLq+smHgJC5HsThLIA
Uvm/5+LlEZ51to6zfEdCW6vZL5AMCd7f5sehzWvwMcpO6SG2MwX8U/jMlcOCuZzO
V+qcTyaLbfwWxDrCpEnkNxNdp8q/hiWtHb+wbzgsEy33zOi0C1z+eEDSPRffu0Ve
KsiKt4ZOYt14JKxzv1FOBnZUWH6PpKa1lXNhkyDp8zHyPBDTVBBXtEOxtskUSdQb
JQrSEtTbM42nLWdU8Tt0jyKIylGzw1hveNgcp5Biv/T5auZPt+gkQGioyPneSj18
qo6918BYQ/Vc2g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:38 2026 by rpki-client