Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
File: LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft (raw, json)
Hash identifier: KKdwU0bfEH2jApofhXnyAPU9NSPhhGqgl9MxJMrxcic=
Subject key identifier: 34:6C:D5:90:C4:E8:08:F2:13:F9:1A:79:24:B8:BD:17:D4:FE:BD:17
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial: 019CA8D7A2F48783AB79EF614AD8FD2CE303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 10:00:29 +0000
Manifest this update: Sun 01 Mar 2026 10:00:29 +0000
Manifest next update: Mon 02 Mar 2026 10:00:29 +0000
Files and hashes: 1: LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl (hash: 3iMJPvuuGbQGvG1foSUzqfDM32Z8MNo4Yl84UTaLSaI=)
2: ORdc8rOF3cmXKW-LWiAz__THMfA.roa (hash: triuUpxRCnM8+3tuTZ+dsMN43CvFMeIZzgQgorkji7A=)
3: RUhmJdqw-3Gaw_JLROAhLOvB2IM.roa (hash: XdtV4zgfYLmkDs8xTK/8Ot/KM7BnvRi+tSC9tgSlImI=)
4: jYiU8bv569WiEs-qGefdtilWB8Y.roa (hash: kPGKYpkrFjV7H4hDvAWisI7rvp3jwldiGMNdXvER2ok=)
5: yV2ta5YIqZOtbWWi5XnowuWeO2Y.roa (hash: FMj28W2Mwf91c8T9pAxRJIkM3TCaa6JGRs6VpNG02T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d7:a2:f4:87:83:ab:79:ef:61:4a:d8:fd:2c:e3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Validity
Not Before: Mar 1 10:00:29 2026 GMT
Not After : Mar 2 10:00:29 2026 GMT
Subject: CN=346cd590c4e808f213f91a7924b8bd17d4febd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:02:ec:36:bf:59:42:1a:ae:27:a4:c4:c8:b2:
5e:08:67:90:04:62:6c:47:b4:49:a4:44:4d:ff:cb:
0d:4d:dd:82:b6:50:f8:a9:eb:18:69:cc:1b:86:5e:
af:f2:2c:6b:36:67:c2:9e:e4:35:ab:25:5e:db:c1:
24:93:f8:0a:d4:38:4e:49:ad:87:64:c3:0e:73:3f:
0f:a5:f6:be:e7:49:8e:ee:36:e7:ea:f0:2d:77:bf:
0f:09:24:61:9b:3b:64:ea:fe:2d:f1:f7:02:c9:2b:
c6:1c:12:ae:31:77:eb:58:0b:39:46:4c:22:ee:d3:
d9:e5:dc:9b:e6:bb:17:b9:41:ae:b5:7e:9b:ce:e5:
ad:53:ac:c8:22:5e:66:f8:27:a7:ab:8b:b3:e4:35:
eb:ca:e7:8f:dc:c8:df:89:c5:b3:67:c2:02:be:c7:
0f:d6:84:91:19:bb:5f:0e:a5:1b:2f:f0:e9:78:fa:
93:d7:be:b8:37:74:8b:e9:00:95:ab:01:4a:7d:8f:
2e:3f:a2:3e:ce:7e:ae:aa:aa:ba:ae:5c:4f:bf:06:
2a:0c:bb:f7:41:04:40:a8:19:76:03:58:12:13:31:
b7:dd:c9:70:5d:c9:62:72:de:ee:4f:55:3d:a4:11:
6a:65:a2:70:5f:d4:5a:4e:8c:32:90:2c:92:20:13:
c9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6C:D5:90:C4:E8:08:F2:13:F9:1A:79:24:B8:BD:17:D4:FE:BD:17
X509v3 Authority Key Identifier:
keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:74:72:7b:6e:07:a6:5d:5c:2e:fb:ac:5f:07:36:90:ff:16:
69:a1:7d:bd:dc:45:82:f9:11:a7:1a:c1:f0:18:3c:13:ba:1e:
2a:9b:33:d3:fb:08:da:4d:cc:30:54:09:03:db:9f:cc:54:da:
a0:15:b3:c5:60:b3:16:a5:e0:dc:c1:28:fe:cc:7d:e2:64:5c:
b9:bf:e3:ea:87:87:e0:0b:04:ac:d6:78:55:85:0c:16:6a:19:
35:46:03:ca:ec:25:7f:b5:ed:e3:ea:fa:33:42:39:4e:5c:fc:
26:86:3a:15:5f:22:eb:c7:be:6d:ac:f7:69:28:4d:49:0a:f8:
dc:29:d1:dc:8c:ec:46:f0:43:f1:44:46:52:9c:d4:61:37:81:
cd:3e:37:96:57:c7:f4:a2:96:fe:c6:5e:03:1f:0e:f0:86:aa:
37:2a:34:61:14:ef:3e:c0:36:bd:65:58:1b:b2:dd:57:b6:7a:
9f:e6:4a:50:13:ed:fa:24:be:34:6d:92:fe:97:3f:4a:70:8a:
e2:47:95:a1:fc:97:60:11:fd:f1:1c:98:5f:ae:00:b4:6b:7d:
0e:46:40:42:a6:b9:cf:68:84:bb:35:60:e3:ce:11:ad:f3:06:
57:aa:c8:49:f2:e9:1f:3d:ab:6f:96:0a:80:08:87:be:e1:98:
fb:6c:6c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:38 2026 by rpki-client