Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: /t7kl+9YV+fnWpOwBoQZWzgb2vwF+qglXbEo+yZthLY=
Subject key identifier: 51:96:88:FC:BF:A4:35:BE:FE:77:0B:58:2D:B6:4F:DE:DC:20:31:50
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 01A0C17B43F502C82BDBB3D9ED1970714FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 12ED
Signing time: Mon 21 Sep 2026 01:01:15 +0000
Manifest this update: Mon 21 Sep 2026 01:01:15 +0000
Manifest next update: Tue 22 Sep 2026 01:01:15 +0000
Files and hashes: 1: KhWNkr5gAw1c6ddmTPeSiEEfFWg.roa (hash: BfC/J8Ikas8k6I01UNkrtdj0AZZqj/UTxvhIrki0FuQ=)
2: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: YNrov7iDq8dBzXt6zCpIq/sDXxYS5bSXE9KylICDNwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7b:43:f5:02:c8:2b:db:b3:d9:ed:19:70:71:4f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Sep 21 01:01:15 2026 GMT
Not After : Sep 22 01:01:15 2026 GMT
Subject: CN=519688fcbfa435befe770b582db64fdedc203150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:d7:7e:98:f2:3d:fc:87:d9:fd:19:ab:99:
28:5d:98:82:a2:f3:7b:88:ca:bd:5b:1b:06:2b:24:
1b:4c:5a:16:46:c0:da:6c:8f:eb:07:11:4c:f7:98:
71:ca:af:3e:42:01:5d:a4:52:87:72:94:8f:0b:3e:
6e:b7:35:34:24:a5:45:77:ed:8d:a1:30:c3:b7:b1:
77:b5:fd:bc:bf:bf:cd:90:8c:b2:c2:bf:08:07:2c:
a5:25:2d:27:fc:0a:a8:e3:c9:50:c1:ea:a9:28:da:
ce:e3:c0:30:85:38:26:57:15:20:62:e2:a9:7f:c9:
79:64:6a:94:76:49:b3:57:1b:3c:b3:8e:78:d7:ca:
08:82:5d:eb:70:97:3e:e5:13:d5:fe:de:88:1b:ce:
50:dd:77:1a:10:22:00:c0:a6:ba:3b:40:17:92:34:
e6:30:cf:a1:c6:b9:39:16:60:d1:cd:d2:cf:0e:de:
eb:d5:0d:21:dd:c6:da:fc:9f:6e:49:48:db:44:82:
cc:ab:63:48:95:74:32:71:e2:8a:98:98:bc:70:25:
55:b1:da:92:70:fb:57:80:4f:14:d9:c9:bc:07:51:
d1:c7:ce:08:66:d4:f3:01:ed:fd:18:d7:79:77:7a:
1c:c1:bb:ee:f6:f3:c4:2b:e2:ab:47:35:f4:50:9e:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:96:88:FC:BF:A4:35:BE:FE:77:0B:58:2D:B6:4F:DE:DC:20:31:50
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:06:a8:fc:c6:3d:8c:94:61:96:c7:61:f2:db:f5:0b:2a:82:
0a:7e:c6:31:39:8d:08:9b:72:1d:49:4a:99:10:a4:6f:4e:8e:
0a:4c:ff:0e:c9:72:76:a7:f9:77:6b:4c:61:ca:65:92:db:a1:
47:16:09:f9:dd:45:dc:43:26:2f:22:81:a0:93:23:46:7d:d5:
85:a6:33:9c:33:5d:c3:92:62:20:78:9c:40:d1:5e:50:c8:94:
06:94:f8:c4:e9:ac:04:34:3f:7c:03:27:fe:2a:cb:86:9a:68:
2c:21:e8:1c:2d:69:e9:dd:5d:a7:fd:d1:cb:0a:46:2b:e3:20:
72:1b:8d:4f:2f:f1:e7:57:b8:0e:fc:d2:47:44:2f:7d:a2:bf:
e0:b7:ba:e8:ff:0d:9a:2c:a8:40:22:ec:02:8c:41:a1:eb:92:
2f:cd:34:c4:a6:5c:6a:82:ba:3c:e9:cb:67:0b:68:8e:26:4c:
fd:17:b3:52:a8:e6:38:d6:0b:ba:cd:05:6a:b6:b0:0c:ab:05:
88:8f:a7:45:95:ec:35:9b:e4:2c:48:6e:ee:98:0c:f7:e6:69:
81:02:e0:df:1f:3a:82:b8:cf:a1:9a:8e:40:a9:63:e7:a9:03:
f1:b6:93:f3:b1:3d:17:4b:ea:ad:73:cd:bf:6e:4b:95:cb:2d:
fa:b4:c5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:53:56 2026 by rpki-client