Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: DmHES4K09tlZGSwUJUHDFIO7ZmIA5dvwYHfEYBW2RfM=
Subject key identifier: 83:A4:F5:5C:9B:9B:84:74:DD:E1:77:7D:3F:CE:4C:92:12:D8:D6:B9
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 019D9C2D7870436E657CA6FDA2FD1CB20F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 114C
Signing time: Fri 17 Apr 2026 16:01:58 +0000
Manifest this update: Fri 17 Apr 2026 16:01:58 +0000
Manifest next update: Sat 18 Apr 2026 16:01:58 +0000
Files and hashes: 1: KhWNkr5gAw1c6ddmTPeSiEEfFWg.roa (hash: BfC/J8Ikas8k6I01UNkrtdj0AZZqj/UTxvhIrki0FuQ=)
2: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: ThnrZiSa8//RGKCwwYdmJTgwnRRjsj1luvx3DaoNEMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:78:70:43:6e:65:7c:a6:fd:a2:fd:1c:b2:0f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Apr 17 16:01:58 2026 GMT
Not After : Apr 18 16:01:58 2026 GMT
Subject: CN=83a4f55c9b9b8474dde1777d3fce4c9212d8d6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:5d:50:2b:fc:c3:5c:67:29:dd:57:93:0e:
f8:00:c5:f4:c8:1d:74:41:1c:ba:a0:24:a8:8a:5c:
5f:28:e6:c2:91:3a:e1:bc:2f:f9:71:53:02:d4:03:
06:d4:c7:00:25:f7:2e:c5:d2:0c:7d:4b:40:dd:27:
7a:bd:ad:f1:55:2c:4e:66:b7:f1:f3:26:d6:68:12:
9e:35:99:21:9b:3f:3a:25:82:8a:c7:fe:57:c7:87:
b8:e0:1c:c1:f1:8a:e7:11:a5:b4:e8:ec:06:2d:b5:
ec:c9:28:75:0d:ae:b7:f4:41:ac:35:70:23:7f:75:
5d:16:69:4b:ac:cd:b0:43:68:01:de:95:19:af:92:
68:04:68:af:1e:55:ef:82:93:a4:6a:4e:71:49:e3:
98:76:fd:70:2d:60:65:57:19:80:8d:5b:52:fb:07:
6a:ce:db:17:6b:6d:ca:d6:7e:7d:a3:ab:80:af:cc:
08:cd:7d:3c:5d:14:e9:09:30:b3:f5:84:2d:0d:85:
ae:1e:df:cb:3e:b5:24:19:b9:2a:97:dc:2e:b6:65:
48:fe:d4:ce:b0:2f:c4:db:7f:58:2b:36:59:1b:b8:
d2:6e:85:be:ae:ed:29:4a:5d:ff:12:72:1b:c5:ad:
e5:76:e7:43:f2:c5:07:90:e6:c5:96:fd:74:08:6a:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A4:F5:5C:9B:9B:84:74:DD:E1:77:7D:3F:CE:4C:92:12:D8:D6:B9
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:25:b1:7e:bb:83:4c:cf:2a:5a:fe:a7:08:36:04:92:01:c6:
c6:fe:e9:8d:4f:37:93:10:53:52:1b:57:0b:ce:01:dc:06:0b:
64:61:57:23:c4:29:15:10:d0:f1:a4:95:62:d9:2f:14:9a:b4:
f1:44:92:c5:6b:6f:64:80:5c:3f:c1:03:e5:f8:57:06:88:8e:
8f:22:44:fc:ee:ad:99:5e:2d:0b:01:2b:5f:68:9f:9b:22:d0:
17:bc:11:e8:ef:eb:da:7a:3e:63:97:9a:d9:70:f7:ef:9c:89:
3f:ac:33:c0:95:42:56:57:3e:bf:d2:7f:4c:98:70:d6:29:af:
08:33:a3:63:80:5c:ad:17:91:94:77:c3:9f:a5:04:7f:2c:a4:
13:f4:b8:39:89:69:79:4d:83:b8:b3:d0:1b:13:e7:06:e2:bf:
fe:ca:0e:d0:61:48:a4:c1:6a:3e:71:8a:56:9d:08:07:82:c9:
62:96:2a:c2:d7:0a:ea:db:d9:82:b5:65:95:2a:e1:66:85:2f:
ee:4c:13:55:8e:18:f5:d1:a0:bb:78:4e:bd:9c:c1:4e:c4:a4:
d5:53:80:e0:30:7f:97:e9:ab:01:b9:b9:60:8a:d1:5b:ab:51:
7d:ef:aa:15:96:4e:59:b4:0d:67:cd:e6:16:34:5d:44:7e:e8:
55:68:49:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLXhwQ25lfKb9ov0csg9KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjk4YmFmOWZmM2VlZWJlNjYyODQ4ODlmYmY2ODlkNGU2
ODNjODEwHhcNMjYwNDE3MTYwMTU4WhcNMjYwNDE4MTYwMTU4WjAzMTEwLwYDVQQD
Eyg4M2E0ZjU1YzliOWI4NDc0ZGRlMTc3N2QzZmNlNGM5MjEyZDhkNmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2stdUCv8w1xnKd1Xkw74AMX0yB10
QRy6oCSoilxfKObCkTrhvC/5cVMC1AMG1McAJfcuxdIMfUtA3Sd6va3xVSxOZrfx
8ybWaBKeNZkhmz86JYKKx/5Xx4e44BzB8YrnEaW06OwGLbXsySh1Da639EGsNXAj
f3VdFmlLrM2wQ2gB3pUZr5JoBGivHlXvgpOkak5xSeOYdv1wLWBlVxmAjVtS+wdq
ztsXa23K1n59o6uAr8wIzX08XRTpCTCz9YQtDYWuHt/LPrUkGbkql9wutmVI/tTO
sC/E239YKzZZG7jSboW+ru0pSl3/EnIbxa3ldudD8sUHkObFlv10CGqopQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOk9Vybm4R03eF3fT/OTJIS2Na5MB8GA1UdIwQY
MBaAFC1pi6+f8+7r5mKEiJ+/aJ1OaDyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzkt
ZGZmNWEwOWE4MmNiLzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzktZGZmNWEwOWE4MmNi
LzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyWxfruD
TM8qWv6nCDYEkgHGxv7pjU83kxBTUhtXC84B3AYLZGFXI8QpFRDQ8aSVYtkvFJq0
8USSxWtvZIBcP8ED5fhXBoiOjyJE/O6tmV4tCwErX2ifmyLQF7wR6O/r2no+Y5ea
2XD375yJP6wzwJVCVlc+v9J/TJhw1imvCDOjY4BcrReRlHfDn6UEfyykE/S4OYlp
eU2DuLPQGxPnBuK//soO0GFIpMFqPnGKVp0IB4LJYpYqwtcK6tvZgrVllSrhZoUv
7kwTVY4Y9dGgu3hOvZzBTsSk1VOA4DB/l+mrAbm5YIrRW6tRfe+qFZZOWbQNZ83m
FjRdRH7oVWhJhg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:49:03 2026 by rpki-client