Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.mft
File: lwj2W3tYEEJW4NM8xGwunXYou3g.mft (raw, json)
Hash identifier: lRelrN4gOiGJp0bScDFEYJbUk2qruHzwqWKmmU0ms0c=
Subject key identifier: 25:BC:14:4A:8A:DA:81:4D:BF:43:93:84:1A:CE:AF:54:31:E5:42:98
Authority key identifier: 97:08:F6:5B:7B:58:10:42:56:E0:D3:3C:C4:6C:2E:9D:76:28:BB:78
Certificate issuer: /CN=9708f65b7b58104256e0d33cc46c2e9d7628bb78
Certificate serial: 01A0CA0F9A541E758EE7DF64262557026051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwj2W3tYEEJW4NM8xGwunXYou3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.mft
Manifest number: 93
Signing time: Tue 22 Sep 2026 17:00:15 +0000
Manifest this update: Tue 22 Sep 2026 17:00:15 +0000
Manifest next update: Wed 23 Sep 2026 17:00:15 +0000
Files and hashes: 1: Cpm35s9Ka4hhJWZn8CGNJk4Go5w.roa (hash: QYqaTylwZdrWR4V7QHicMTlDarm+SapwyzyHuoF8w3Y=)
2: lwj2W3tYEEJW4NM8xGwunXYou3g.crl (hash: SSN29C/vwblygsyMd+XwjG4Yf1zecAWStmqgPpvc5sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwj2W3tYEEJW4NM8xGwunXYou3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:9a:54:1e:75:8e:e7:df:64:26:25:57:02:60:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9708f65b7b58104256e0d33cc46c2e9d7628bb78
Validity
Not Before: Sep 22 17:00:15 2026 GMT
Not After : Sep 23 17:00:15 2026 GMT
Subject: CN=25bc144a8ada814dbf4393841aceaf5431e54298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:ad:44:75:7d:a3:fe:84:b0:e3:3d:23:fd:
5d:eb:b7:ba:20:70:21:ba:3b:9b:e4:ce:25:5a:af:
d2:cc:61:4d:8c:2c:5b:a7:a7:56:fc:ed:bb:99:52:
1a:22:9b:87:35:b5:6c:5a:74:db:88:43:3e:48:78:
9c:e2:2d:5b:68:c0:f2:30:11:f3:54:0b:ab:e2:c2:
26:bd:55:b9:ea:97:e8:4d:89:96:2b:b5:81:66:db:
90:82:28:66:df:20:8b:5e:99:f7:d8:28:de:a4:34:
c7:24:c9:a0:6a:82:e1:ba:5d:46:b2:6d:47:da:74:
29:c4:95:3f:fa:06:8f:99:07:32:90:e2:3f:0f:ac:
2d:ce:38:a3:a5:e6:b1:a2:34:67:24:f2:85:6e:56:
72:57:84:1c:6b:79:ab:74:5a:c2:e1:12:04:6d:b0:
24:0d:33:cd:63:0b:d7:d1:f5:d8:f6:d9:3e:a2:77:
a9:27:ad:c5:72:d0:d0:4b:11:7a:ed:f6:14:2f:ef:
51:d3:02:eb:9c:4e:58:97:55:8b:34:d1:8e:b8:5a:
e7:d5:b9:66:ea:58:bf:d4:fc:3e:72:07:26:11:4e:
a5:12:5b:1d:70:b8:16:f7:81:1e:53:ed:ed:ea:a7:
60:10:84:dd:e0:4c:1d:1b:ee:ae:ed:34:72:94:fe:
c2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BC:14:4A:8A:DA:81:4D:BF:43:93:84:1A:CE:AF:54:31:E5:42:98
X509v3 Authority Key Identifier:
keyid:97:08:F6:5B:7B:58:10:42:56:E0:D3:3C:C4:6C:2E:9D:76:28:BB:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwj2W3tYEEJW4NM8xGwunXYou3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:df:69:0f:cd:8c:6b:1d:8e:81:87:6c:c5:72:da:1d:bc:d3:
a9:3e:0d:32:fa:b7:14:9e:d6:11:ce:bb:33:05:ce:f3:42:38:
a7:98:af:38:7c:0a:66:f2:5b:8d:ef:63:56:9e:38:9f:9c:80:
f5:8c:17:31:bb:a2:fa:02:49:61:0b:7f:7f:88:44:b2:ec:d2:
be:b1:15:09:d4:ff:a1:1f:99:e7:12:74:10:88:76:40:25:cb:
ed:96:4b:f8:a8:0e:15:13:f3:1a:5f:70:23:53:98:cd:1e:03:
bb:8c:af:0e:94:3a:94:68:32:ca:86:ef:d0:a8:01:4b:d4:1c:
22:02:56:a9:97:46:95:b5:9c:5f:c7:1f:c5:e0:b1:09:8d:63:
7c:c7:39:ae:3e:55:19:75:0a:d9:24:62:e6:f1:9c:df:2d:e4:
b1:86:d4:6e:f4:1b:ff:4a:38:ab:3c:09:69:cc:da:1b:ef:5f:
60:be:51:75:8f:cf:e4:6c:43:d7:50:24:b2:f9:94:13:ad:57:
9a:a7:db:50:42:6e:d1:3c:dc:c0:21:da:ad:12:34:80:33:2c:
9a:66:ff:88:b4:58:a8:fc:19:b5:46:3c:48:94:4a:5b:8b:6b:
24:e1:c1:5f:db:97:40:4a:bb:ed:51:b5:5d:1a:db:82:fe:7d:
63:d1:ad:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKD5pUHnWO599kJiVXAmBRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MDhmNjViN2I1ODEwNDI1NmUwZDMzY2M0NmMyZTlkNzYy
OGJiNzgwHhcNMjYwOTIyMTcwMDE1WhcNMjYwOTIzMTcwMDE1WjAzMTEwLwYDVQQD
EygyNWJjMTQ0YThhZGE4MTRkYmY0MzkzODQxYWNlYWY1NDMxZTU0Mjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6qtRHV9o/6EsOM9I/1d67e6IHAh
ujub5M4lWq/SzGFNjCxbp6dW/O27mVIaIpuHNbVsWnTbiEM+SHic4i1baMDyMBHz
VAur4sImvVW56pfoTYmWK7WBZtuQgihm3yCLXpn32CjepDTHJMmgaoLhul1Gsm1H
2nQpxJU/+gaPmQcykOI/D6wtzjijpeaxojRnJPKFblZyV4Qca3mrdFrC4RIEbbAk
DTPNYwvX0fXY9tk+onepJ63FctDQSxF67fYUL+9R0wLrnE5Yl1WLNNGOuFrn1blm
6li/1Pw+cgcmEU6lElsdcLgW94EeU+3t6qdgEITd4EwdG+6u7TRylP7ClwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCW8FEqK2oFNv0OThBrOr1Qx5UKYMB8GA1UdIwQY
MBaAFJcI9lt7WBBCVuDTPMRsLp12KLt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHdqMlczdFlFRUpXNE5NOHhHd3VuWFlvdTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80OWVhYTEtNDQzZC00MGUzLWFjNWMt
NGI1ZTllOGZhNTBlLzEvbHdqMlczdFlFRUpXNE5NOHhHd3VuWFlvdTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80OWVhYTEtNDQzZC00MGUzLWFjNWMtNGI1ZTllOGZhNTBl
LzEvbHdqMlczdFlFRUpXNE5NOHhHd3VuWFlvdTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUN9pD82M
ax2OgYdsxXLaHbzTqT4NMvq3FJ7WEc67MwXO80I4p5ivOHwKZvJbje9jVp44n5yA
9YwXMbui+gJJYQt/f4hEsuzSvrEVCdT/oR+Z5xJ0EIh2QCXL7ZZL+KgOFRPzGl9w
I1OYzR4Du4yvDpQ6lGgyyobv0KgBS9QcIgJWqZdGlbWcX8cfxeCxCY1jfMc5rj5V
GXUK2SRi5vGc3y3ksYbUbvQb/0o4qzwJaczaG+9fYL5RdY/P5GxD11AksvmUE61X
mqfbUEJu0TzcwCHarRI0gDMsmmb/iLRYqPwZtUY8SJRKW4trJOHBX9uXQEq77VG1
XRrbgv59Y9Gt1A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:03:51 2026 by rpki-client