Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: jYBnsZMKUdibxHORu75ptjYwl5HKGqmaX+QeJ2fcnyc=
Subject key identifier: D1:3D:8B:EC:31:CA:09:99:16:BA:E8:F9:A9:E1:E2:B4:DB:37:68:7E
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 019FA974A21BB8C9D645545A61AE16ADEE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 125C
Signing time: Tue 28 Jul 2026 16:00:20 +0000
Manifest this update: Tue 28 Jul 2026 16:00:20 +0000
Manifest next update: Wed 29 Jul 2026 16:00:20 +0000
Files and hashes: 1: KhWNkr5gAw1c6ddmTPeSiEEfFWg.roa (hash: BfC/J8Ikas8k6I01UNkrtdj0AZZqj/UTxvhIrki0FuQ=)
2: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: 3hdEWN7dToxkomNMgvCH+pdvCRTu4r9YWw/tbrXxAxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:a2:1b:b8:c9:d6:45:54:5a:61:ae:16:ad:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Jul 28 16:00:20 2026 GMT
Not After : Jul 29 16:00:20 2026 GMT
Subject: CN=d13d8bec31ca099916bae8f9a9e1e2b4db37687e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:ed:69:b5:bc:09:4e:73:af:99:31:e1:68:
25:49:19:d7:e0:e0:38:da:6e:b0:63:20:c2:7f:79:
4b:57:83:ac:b4:a8:30:64:f3:55:39:c1:a3:c3:3c:
fa:d9:f9:3f:2a:3b:9c:9a:ab:a3:d3:6a:51:80:78:
5e:07:7b:56:e3:8c:ed:31:a1:f8:c8:3e:49:cc:21:
a8:d1:a8:c3:60:ea:d5:1f:40:80:15:bf:8f:ed:a7:
d1:d6:cb:ac:38:16:3c:e7:a3:1b:6f:bb:d7:c7:31:
28:38:9c:5d:aa:05:0e:15:d8:cf:c0:52:74:70:3e:
46:c1:05:14:fb:95:f5:c5:32:09:53:d3:e0:68:a9:
2a:15:76:27:c8:c0:47:b9:2e:ac:a1:a3:36:41:77:
57:12:ad:a7:6f:5d:af:6f:f6:3f:9a:42:f8:6e:54:
d7:e9:f1:fc:13:bc:49:e0:b6:7b:78:58:89:69:1d:
84:31:40:03:8e:55:38:3a:06:46:78:7a:f1:34:9c:
0c:50:86:9d:44:9a:41:7e:23:cd:22:a1:ed:0d:96:
0a:53:8c:4f:ab:45:a5:e7:bb:6c:95:e8:a2:30:46:
88:39:e0:86:85:c4:88:62:ef:f2:25:59:58:69:01:
c3:5d:ec:9e:7e:a9:c2:9e:4d:16:b6:86:90:ce:2e:
c2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3D:8B:EC:31:CA:09:99:16:BA:E8:F9:A9:E1:E2:B4:DB:37:68:7E
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bc:16:e5:24:14:e6:88:2e:7a:e6:b0:1b:b1:98:7e:9d:0a:
54:45:d4:19:2f:8d:02:4b:89:79:90:f4:0e:90:00:1d:14:5a:
e5:9e:2a:91:4e:22:64:21:a3:f7:c6:f7:d7:fe:b5:be:43:ec:
71:ff:a3:c5:1b:44:83:23:c2:c9:ac:48:a1:32:9d:87:68:82:
55:14:98:91:20:57:89:da:f4:9c:c7:64:2c:0c:7d:57:cc:0a:
f9:7e:a2:f4:6a:a4:3d:50:23:94:d2:71:95:3e:44:ec:ee:69:
87:f6:4d:98:b0:1a:20:8f:95:1b:cc:5c:f8:6c:ce:0f:9e:35:
a4:69:e6:6f:c5:e0:6e:2b:de:25:20:c6:6a:9f:c7:f2:e0:64:
4b:7c:3f:de:a6:39:2d:6b:a3:4e:87:0d:ec:9a:b5:e9:b6:a0:
70:ed:90:fe:04:33:4e:7b:2c:15:9a:5c:b8:06:9f:a0:6d:54:
19:09:23:f7:b9:1c:8d:90:09:82:ae:84:50:1e:73:04:5e:0d:
0c:22:f1:ae:ab:d9:d4:57:5c:da:f3:f2:6e:ec:45:cf:b2:26:
75:54:9d:8c:48:64:b6:90:20:2f:6a:19:63:e2:4f:f4:e8:68:
9e:37:4c:51:c0:d6:00:40:17:c2:3c:c2:a9:68:52:68:a1:fe:
ab:5f:32:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:43 2026 by rpki-client