
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
File: lwJP_Eknv-NSiUNdnQKAQguOzcs.mft (raw, json)
Hash identifier: C3lJftducjpAvvjaljI/cJh3scqqbDYkPRcffYHJn7w=
Subject key identifier: 1D:73:E5:05:8A:1C:45:CA:F7:DD:6F:38:9C:63:1D:9F:FC:B3:98:39
Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Certificate serial: 019D99626403C74B65525069FCDD6FADD811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
Manifest number: 05A6
Signing time: Fri 17 Apr 2026 03:00:55 +0000
Manifest this update: Fri 17 Apr 2026 03:00:55 +0000
Manifest next update: Sat 18 Apr 2026 03:00:55 +0000
Files and hashes: 1: 0pi2CRh8v5FDGjuuAyr_ynjNU4M.roa (hash: gEFkbWU3I4/+RhLgSRyNGP/VSE7D27H+Iby5qJquk8k=)
2: 1eGYTZkzkTnzgcwMjAg4TYC4oMg.roa (hash: N0Pwrl6Apuf0Y0kUqHgS0KkfrpMsU0M2q1pXnEawL28=)
3: 56EYdVdPARTza2xcs8WALSYXTOQ.roa (hash: zmgqXldif1WCq/XR13fNKgAfLW2J2LNZ/H94SIzJybg=)
4: HTGpA29r_p96fZCnIs8rHPCaAWg.roa (hash: 0NEOZclYkdeZ3p/EmP0YoypOQ8XIb7jGpt4K1aPjz6Q=)
5: JDbJ4jj6LMlC-0bdOFoUGyLzn3o.roa (hash: YHGXUN1Q0a2Vx/s6owli3h6abJzr4EpARqQpGM7kkOI=)
6: Ny2iyxeuZXEsORd19mLonGlTc1o.roa (hash: IHzsSFmGLhjoSc5ovg8f9ByPO12qJhMupxXp5WM/rZs=)
7: YnuWSiECKs46KqAQH2-p7CjlQBQ.roa (hash: CGPSpK9CwDyzIaayrss+ySc2HPgoYOHHQO7gmEb9KdE=)
8: aHYCTQnedLqhGc1eCePJguTFgjA.roa (hash: T87S5Ags8vNBHX+M2V+S2A8cRf0mGsTOhPjCp5GuLK4=)
9: eRUram9FiygBh410Dn1i-De_Uv0.roa (hash: 0UT7pykP+ViP/ePf2YhJafI90nKn0use/xYGNVGDsGI=)
10: lwJP_Eknv-NSiUNdnQKAQguOzcs.crl (hash: zdUhOh10zwff72Lr2mvakpYxIVXzA6IbS78/fBGHI9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:64:03:c7:4b:65:52:50:69:fc:dd:6f:ad:d8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Validity
Not Before: Apr 17 03:00:55 2026 GMT
Not After : Apr 18 03:00:55 2026 GMT
Subject: CN=1d73e5058a1c45caf7dd6f389c631d9ffcb39839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:3b:ea:15:48:30:aa:58:c8:a8:2e:78:75:
65:7a:66:b0:08:1e:67:b3:7e:f0:78:9e:0e:cc:de:
99:60:89:ab:1a:2d:8f:36:a3:bc:bd:3d:bc:14:10:
6f:c8:16:10:f2:31:b6:5d:7e:20:a3:7f:7c:fc:cb:
39:84:0a:cf:08:58:3d:a9:15:a7:4a:b3:92:e9:26:
38:ca:07:b7:33:ff:b8:94:bd:1a:0f:6f:65:0e:b5:
10:8e:e5:d9:c6:36:44:20:d7:2e:f5:8a:63:fc:18:
9d:47:de:2b:a9:3f:ab:16:38:2f:1e:02:26:52:51:
8b:dd:17:43:81:5e:ba:6d:26:a4:a1:85:83:db:17:
81:5d:4e:fa:fb:e2:9b:0b:29:8d:7d:20:b5:d6:b6:
75:75:84:4e:83:bb:8c:93:35:72:37:5e:55:52:59:
37:ed:7b:51:81:39:a4:3c:e8:f5:a2:db:4b:33:84:
45:b3:bb:e9:02:42:fa:dc:de:46:6c:0e:63:e6:74:
86:1a:53:3f:b0:db:9d:df:c2:72:83:84:61:5a:cd:
8b:42:4b:55:53:84:5e:f8:87:ce:07:41:c1:1a:e5:
bf:8a:4f:25:51:30:bf:c7:e6:e0:7e:35:07:72:d2:
8d:af:c8:86:94:93:e8:e2:cd:9c:b7:e3:02:19:7d:
f0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:73:E5:05:8A:1C:45:CA:F7:DD:6F:38:9C:63:1D:9F:FC:B3:98:39
X509v3 Authority Key Identifier:
keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4c:8c:ce:77:6e:27:8d:8f:bf:5d:51:2c:72:a2:2c:f7:4f:
07:66:2e:34:a9:c9:4f:13:81:e3:b0:0a:98:09:c2:ae:d6:57:
3f:7c:02:6c:b5:e4:ee:e9:d8:dd:2b:b1:4f:fd:1b:db:48:79:
18:33:a8:e4:a1:ce:83:67:53:50:73:41:8c:f6:1a:09:d7:9f:
e0:35:d8:f2:29:b5:e6:ce:23:36:12:d8:91:2b:01:62:d3:71:
35:b6:41:f9:39:67:64:5a:29:8c:d2:e4:4f:c9:58:ff:8d:78:
0c:63:64:f4:9d:7f:76:f2:63:a0:e6:61:ca:ca:75:2e:70:e2:
bc:ba:61:a2:92:74:fa:56:1a:98:61:a2:ce:25:d5:7d:c7:83:
03:fd:e3:f4:ec:b6:5c:6d:f6:75:e1:6e:78:37:f0:05:64:d2:
fe:91:e0:df:61:3b:70:ff:5c:28:97:39:da:27:38:b7:94:d2:
3a:4e:23:1c:3b:6d:4d:a7:3e:b6:19:26:33:83:7f:12:9a:fe:
18:fa:07:70:b8:ab:b5:4f:e2:31:85:60:cb:f0:e3:f7:21:53:
e0:cc:a7:eb:57:c5:f5:85:af:53:c5:ea:df:03:a4:a3:70:c5:
59:ca:43:7c:c6:ff:3a:e1:8b:3e:57:1e:b0:2b:38:ac:c6:4c:
35:71:26:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:19:50 2026 by rpki-client