Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: 00+DIBKOyQszZhNGSFcPqUHvreP1rrync7ZZq+SX6P0=
Subject key identifier: 77:7D:89:CB:95:7B:3E:0B:97:66:9E:23:87:A1:5F:15:34:A1:AC:BB
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 019CACB55C2C4CA97E2E23AD560B6377AE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 10D0
Signing time: Mon 02 Mar 2026 04:01:32 +0000
Manifest this update: Mon 02 Mar 2026 04:01:32 +0000
Manifest next update: Tue 03 Mar 2026 04:01:32 +0000
Files and hashes: 1: KhWNkr5gAw1c6ddmTPeSiEEfFWg.roa (hash: BfC/J8Ikas8k6I01UNkrtdj0AZZqj/UTxvhIrki0FuQ=)
2: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: BR7fr97P8gf0lvs9WUzM2HIfksypqzskMHXtrtWs+5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:5c:2c:4c:a9:7e:2e:23:ad:56:0b:63:77:ae:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Mar 2 04:01:32 2026 GMT
Not After : Mar 3 04:01:32 2026 GMT
Subject: CN=777d89cb957b3e0b97669e2387a15f1534a1acbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:18:24:20:00:40:eb:d6:5a:f5:14:88:5e:da:
a8:47:94:a9:dd:2e:9c:d3:70:ec:20:80:5a:21:2c:
b2:8e:10:94:c1:34:12:e5:54:1b:ec:c6:f3:24:ed:
d4:5c:8c:07:1a:91:ab:74:b3:40:e8:41:87:90:ab:
19:d0:83:7f:24:37:c4:bb:7a:32:77:b1:dd:79:21:
d9:b8:4b:25:4b:a8:ae:3e:ff:55:dd:dc:5f:18:95:
15:e2:bf:71:2d:1e:30:a5:33:78:d9:19:73:db:d9:
5e:f8:bc:2f:bc:24:d2:32:4a:93:9e:87:e5:b1:66:
23:6d:97:d1:66:cb:ad:b4:cc:52:a4:9d:f8:ce:f6:
98:a7:c9:4a:c7:4b:b7:76:7f:cc:e8:b6:eb:04:fb:
82:70:86:9e:a0:22:f7:26:92:1b:09:62:8e:c6:c3:
5c:70:69:a1:34:09:ea:69:22:3c:68:35:b0:06:d2:
5c:4b:15:e4:4b:d8:d4:fa:36:d8:77:2c:0b:e1:99:
16:ac:fb:07:dd:35:14:c4:58:f0:c5:bc:c0:68:44:
07:a8:99:db:1f:f9:26:68:c9:dc:e1:b7:32:36:60:
df:3c:1c:98:db:4c:bf:c1:85:56:5e:c4:98:14:20:
1c:dc:06:9c:47:35:9b:2d:ed:2c:59:20:72:15:38:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7D:89:CB:95:7B:3E:0B:97:66:9E:23:87:A1:5F:15:34:A1:AC:BB
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c0:52:19:89:23:3c:40:23:c3:23:c3:8b:ef:3c:e5:7d:01:
53:0a:03:b9:0e:2b:90:06:2a:15:38:b5:25:e1:9c:0c:0e:e1:
96:4b:97:38:eb:73:80:52:8b:89:71:e7:0a:24:a7:4c:e2:c9:
14:f5:73:8f:77:3f:cd:4c:f6:07:50:cf:58:04:ec:9b:be:0f:
05:e7:cd:3d:0e:4d:13:43:a5:a2:fa:4f:e5:12:e2:f0:0f:65:
ba:01:56:f4:ce:7c:43:18:6f:fd:e1:11:78:13:9b:0c:5d:80:
8b:f0:03:82:da:1c:20:b9:88:b7:e2:de:c2:43:fd:f5:25:db:
f6:46:7c:1b:a4:42:54:07:5d:cb:1f:6e:56:91:e0:93:44:93:
d3:c0:c9:b8:7b:4b:e4:91:9b:bc:7e:43:93:6e:78:ec:6f:cb:
68:86:d8:10:ce:a6:bf:5b:a6:4d:01:e1:16:18:b5:44:0d:1d:
1d:8a:24:33:24:50:6a:86:96:59:20:21:aa:c9:1b:5e:0a:95:
c9:5b:1a:e6:12:d3:60:20:0d:c4:69:7d:15:f0:e6:e6:a6:fc:
cd:9d:8c:3c:e4:fb:a0:1b:f2:45:54:54:0c:e8:15:7e:db:8a:
ad:06:81:99:62:66:e2:be:a1:df:df:0d:8c:bd:84:f3:12:11:
2f:d8:e4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:22:55 2026 by rpki-client