
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
File: LWNPtoGAIUTwZMGxnxH2qudZbc8.mft (raw, json)
Hash identifier: m5bRoeLJJZuxdDkgyIW4f5m4pEpGhQ4Z/GVxhWhhjl0=
Subject key identifier: 78:FF:89:DF:1A:75:B8:B9:B8:FD:6B:C2:B0:0F:BE:E1:48:C7:17:FE
Authority key identifier: 2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
Certificate issuer: /CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Certificate serial: 019D984F9CDFC5E7C1191400617335B8E9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
Manifest number: 0BB7
Signing time: Thu 16 Apr 2026 22:00:47 +0000
Manifest this update: Thu 16 Apr 2026 22:00:47 +0000
Manifest next update: Fri 17 Apr 2026 22:00:47 +0000
Files and hashes: 1: 8r5CCMNCOrF5UeZm--M1-L2_aNE.roa (hash: 5uZrQi9goTIW1VoDg15afLwiKtYpkz/EDyqXcTbpQqo=)
2: LWNPtoGAIUTwZMGxnxH2qudZbc8.crl (hash: rrSNcJZ/FA/DoXTW+rSiRvt+qWP5QuEhlARblRSpq1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:9c:df:c5:e7:c1:19:14:00:61:73:35:b8:e9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Validity
Not Before: Apr 16 22:00:47 2026 GMT
Not After : Apr 17 22:00:47 2026 GMT
Subject: CN=78ff89df1a75b8b9b8fd6bc2b00fbee148c717fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2a:01:b5:8a:25:67:9c:b1:3f:2a:f3:24:fe:
71:40:69:f9:61:c5:0c:5f:07:52:87:4e:28:cd:bf:
3c:9e:aa:61:da:05:16:4f:0f:9f:f5:5f:4f:4d:ad:
a6:40:69:a3:0e:38:0c:9b:b3:cd:23:82:18:ed:52:
84:c3:89:69:03:d0:aa:6e:6e:eb:39:d4:d0:19:0a:
cb:79:7c:b3:44:0e:34:4b:a7:0c:0f:72:8f:a6:fb:
13:1c:db:31:39:76:5a:6e:51:99:28:bd:09:3d:d2:
96:ca:a7:0a:bb:60:2f:c4:66:e5:c9:85:3d:78:95:
36:9d:61:f0:36:96:b5:72:3c:90:7b:d6:df:29:c3:
4b:b9:d9:d7:2c:2b:ee:e1:e0:a6:d1:6d:a0:48:d7:
c2:14:26:33:28:4e:d8:7a:ba:cb:33:d1:7b:d7:51:
2d:ee:9e:82:0f:8e:88:1f:6e:b0:36:e7:65:8a:09:
91:b8:ea:90:a8:71:68:8f:01:e2:b2:c3:1e:5a:75:
82:f9:c3:07:44:c3:ba:c4:05:ef:92:ec:a7:33:32:
a0:53:f9:14:b7:f3:c4:0f:db:78:6d:f2:e5:a9:d7:
ba:4f:5d:e4:92:7c:ed:42:f2:4e:b6:fb:ad:d2:63:
75:e4:2c:3b:98:07:e5:73:ac:45:9c:dd:83:b5:91:
90:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FF:89:DF:1A:75:B8:B9:B8:FD:6B:C2:B0:0F:BE:E1:48:C7:17:FE
X509v3 Authority Key Identifier:
keyid:2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:83:fa:5e:52:09:1e:19:a5:cd:55:b1:ee:c3:f6:39:90:5a:
79:45:16:16:b7:35:67:48:1e:30:d9:78:0a:22:ec:3a:b2:04:
80:40:d7:e4:1c:7b:89:6b:d5:96:94:78:5c:2e:fa:57:3a:bd:
e4:9b:ff:ec:c0:0f:9c:38:4e:c7:10:eb:27:0b:4a:fa:91:d9:
7a:6f:70:62:db:39:b1:27:5c:c0:da:e7:5c:77:0c:f9:9e:32:
46:c0:dc:67:2c:fa:80:3e:14:61:3d:35:d9:d3:72:87:1e:0e:
fa:0d:b0:bc:29:33:65:61:68:9f:d0:a6:3b:b2:f6:d3:bd:f5:
87:aa:15:b2:d4:e3:a1:d1:14:05:12:d0:1a:36:c6:e5:6b:09:
2d:cd:bd:7b:fc:4c:f0:9a:f2:85:44:c3:c0:7b:af:49:fa:9d:
54:38:d1:a2:5f:de:b1:b6:41:fd:8f:ee:75:f5:e5:e2:3c:a6:
5e:ec:1d:6c:90:a3:01:f7:8a:6f:a4:04:7a:e3:92:8d:06:8a:
a4:ad:e9:a3:c3:b1:e0:b3:7e:16:c1:78:2c:67:06:a3:6c:13:
3f:75:8b:17:a7:a8:a3:07:96:04:c4:a9:05:3b:53:c5:97:ec:
eb:95:be:a5:89:19:4f:49:c5:5d:8c:8f:1d:a7:ff:4f:c9:15:
10:7b:b4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:01 2026 by rpki-client