
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
File: lwJP_Eknv-NSiUNdnQKAQguOzcs.mft (raw, json)
Hash identifier: 5hv2D3wWgwY2dXIO0o4rlsXpxe+/NZxwrsW4nDdf1t4=
Subject key identifier: E0:C7:94:79:A5:D6:6D:FD:AC:2F:33:11:7C:53:F5:B8:53:00:2E:DD
Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Certificate serial: 019CABD8FBB9BD296EE46B6220C146A906D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
Manifest number: 052B
Signing time: Mon 02 Mar 2026 00:00:50 +0000
Manifest this update: Mon 02 Mar 2026 00:00:50 +0000
Manifest next update: Tue 03 Mar 2026 00:00:50 +0000
Files and hashes: 1: 0pi2CRh8v5FDGjuuAyr_ynjNU4M.roa (hash: gEFkbWU3I4/+RhLgSRyNGP/VSE7D27H+Iby5qJquk8k=)
2: 1eGYTZkzkTnzgcwMjAg4TYC4oMg.roa (hash: N0Pwrl6Apuf0Y0kUqHgS0KkfrpMsU0M2q1pXnEawL28=)
3: 56EYdVdPARTza2xcs8WALSYXTOQ.roa (hash: zmgqXldif1WCq/XR13fNKgAfLW2J2LNZ/H94SIzJybg=)
4: HTGpA29r_p96fZCnIs8rHPCaAWg.roa (hash: 0NEOZclYkdeZ3p/EmP0YoypOQ8XIb7jGpt4K1aPjz6Q=)
5: JDbJ4jj6LMlC-0bdOFoUGyLzn3o.roa (hash: YHGXUN1Q0a2Vx/s6owli3h6abJzr4EpARqQpGM7kkOI=)
6: Ny2iyxeuZXEsORd19mLonGlTc1o.roa (hash: IHzsSFmGLhjoSc5ovg8f9ByPO12qJhMupxXp5WM/rZs=)
7: YnuWSiECKs46KqAQH2-p7CjlQBQ.roa (hash: CGPSpK9CwDyzIaayrss+ySc2HPgoYOHHQO7gmEb9KdE=)
8: aHYCTQnedLqhGc1eCePJguTFgjA.roa (hash: T87S5Ags8vNBHX+M2V+S2A8cRf0mGsTOhPjCp5GuLK4=)
9: eRUram9FiygBh410Dn1i-De_Uv0.roa (hash: 0UT7pykP+ViP/ePf2YhJafI90nKn0use/xYGNVGDsGI=)
10: lwJP_Eknv-NSiUNdnQKAQguOzcs.crl (hash: A8pvmkZFyeJFd0idkPyoQl14jR0CEanHTOuFtRI8MaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:fb:b9:bd:29:6e:e4:6b:62:20:c1:46:a9:06:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Validity
Not Before: Mar 2 00:00:50 2026 GMT
Not After : Mar 3 00:00:50 2026 GMT
Subject: CN=e0c79479a5d66dfdac2f33117c53f5b853002edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:1f:39:89:f8:e0:0e:a8:c3:c6:8d:1e:3e:
98:97:96:a0:9d:4c:b0:23:06:bf:ad:46:24:f3:ee:
d9:83:2d:fe:ec:4d:2e:dd:29:b2:b4:fb:09:e0:5b:
b6:de:c6:4a:5e:3d:6f:6c:1c:76:48:4c:58:b6:58:
6e:1b:a5:44:d6:8f:fc:33:30:28:de:7c:ae:0c:6f:
7e:d8:1d:a4:28:f5:7c:9f:8d:1a:d8:36:36:bc:3f:
97:99:53:b7:42:7d:20:0e:74:f6:fa:89:d0:e6:65:
76:cb:49:5a:4b:c3:2e:86:fa:ef:ce:dc:cc:d4:09:
14:d7:f8:c0:e0:52:05:be:c3:ba:68:15:25:c9:8b:
9a:c3:51:59:f9:68:ac:11:b7:c9:c6:53:31:3f:b6:
72:48:93:65:2f:67:fe:52:06:10:6c:d8:d9:7a:a7:
de:df:e2:0f:2d:d3:50:c2:ae:f9:33:ca:5d:23:ca:
20:b1:00:3e:db:6b:b5:53:4b:7d:1f:91:18:a3:9b:
8b:e1:32:05:38:21:45:28:f5:71:fe:ae:19:30:31:
e4:6d:03:e6:6a:e9:98:d8:69:20:5f:ba:7f:57:5d:
70:c1:75:d1:f0:63:25:bd:9d:b3:82:f8:52:5e:0f:
e1:5a:b0:75:bc:4e:49:63:f3:ee:23:88:86:f4:26:
10:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C7:94:79:A5:D6:6D:FD:AC:2F:33:11:7C:53:F5:B8:53:00:2E:DD
X509v3 Authority Key Identifier:
keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:51:88:14:e6:01:8b:8a:24:3c:e2:55:04:fc:67:c4:2a:ed:
95:f9:e8:c5:ee:14:f7:e4:9c:6b:8b:99:8c:37:f3:da:18:ac:
e6:3d:81:35:4e:ad:69:ea:c7:21:31:3f:d4:5f:0b:53:ba:00:
23:5e:14:cf:1e:f2:e5:29:1f:0c:ce:ee:aa:65:cb:cd:2b:28:
d7:c5:9c:74:27:a3:86:d7:31:ad:66:b4:47:2d:6e:5c:9e:a3:
0e:aa:fa:78:6b:f9:a3:37:7e:89:22:44:a6:8c:df:28:92:2b:
1e:16:2e:00:4c:4e:da:03:07:31:5d:94:e7:bc:28:05:f3:24:
fd:95:e2:ab:93:d5:39:e4:47:d3:79:35:f3:d6:0b:27:01:b4:
7d:6f:99:08:4c:ce:56:75:79:52:ef:b8:3d:3b:8c:85:9d:c7:
20:d0:d7:db:90:ee:9b:ef:3d:97:7d:79:8b:c0:91:4e:ee:40:
3a:87:e2:c3:a9:17:dc:99:1d:78:48:2d:b0:d1:ed:f6:df:69:
a0:89:c0:81:e7:f8:23:3c:de:da:f4:6b:28:88:16:49:6d:3a:
38:fe:92:3e:b6:ff:66:2f:01:3c:19:d2:16:d4:84:0b:a7:29:
30:9f:e1:be:6c:37:4a:c6:76:63:a9:82:e4:e7:00:02:b4:95:
e1:23:7c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:22 2026 by rpki-client