Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier: WtSLAw8PqNYrv+86b3jnsg6A6KXl6w4NPJRar/LAO2A=
Subject key identifier: 9F:9C:02:45:65:2A:D9:0F:0C:43:CE:1E:F7:79:08:10:FD:3A:2E:30
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial: 01A134B50A3ABE10A685CDB749DCF14238AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number: 15DB
Signing time: Tue 13 Oct 2026 10:00:42 +0000
Manifest this update: Tue 13 Oct 2026 10:00:42 +0000
Manifest next update: Wed 14 Oct 2026 10:00:42 +0000
Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: MdToEQCAm+zCRtlfIPosxpAYHBulbNnskY0ofI6zh+0=)
2: mFiXzHrxbxRLCdJjqMjDV1qXsf0.roa (hash: xj8BfUXzJ6HgdFsCYVaF06L0rsBxHlnBN9flZ6X2gpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:b5:0a:3a:be:10:a6:85:cd:b7:49:dc:f1:42:38:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Validity
Not Before: Oct 13 10:00:42 2026 GMT
Not After : Oct 14 10:00:42 2026 GMT
Subject: CN=9f9c0245652ad90f0c43ce1ef7790810fd3a2e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:80:5a:b9:34:81:09:9f:79:c9:49:da:42:cf:
07:38:d8:d9:07:08:57:91:c0:ce:bb:5a:5a:4b:ac:
35:96:3f:17:04:61:c9:85:1a:60:b0:9d:1a:ca:b3:
c2:11:bf:ca:df:0a:79:0d:f3:91:11:a7:c7:f5:c3:
71:5a:9c:94:4a:3f:ae:d7:65:63:a8:74:84:dc:37:
33:56:a8:50:c5:30:31:cc:0f:1a:23:09:40:4a:6d:
52:3a:26:3f:bf:0e:dd:a6:97:c2:54:e1:9f:c7:3a:
07:2f:39:e9:73:57:46:88:b6:50:69:65:2d:7d:20:
88:22:02:8c:f4:e0:cd:ef:2f:a1:39:7f:45:70:2a:
b1:5d:ae:b3:c3:85:a1:c2:9a:e8:fc:8d:8d:2f:46:
8e:1a:5c:1c:33:06:70:c6:c4:f8:5e:3e:84:21:b0:
f9:62:64:63:94:b3:a5:28:d7:6f:93:09:0e:79:53:
c9:b1:5d:9a:88:d5:d0:8f:7d:5d:3d:86:f2:ff:fc:
aa:cb:f4:4c:31:8a:94:e3:79:c7:25:1b:f3:2a:71:
cb:c5:f6:81:44:fa:66:4a:9b:54:9d:27:ea:b8:f6:
bc:6a:00:aa:ca:59:21:b7:22:5f:d8:e0:3a:f7:71:
d4:b3:35:7a:f7:8e:48:bd:e1:7f:7b:e8:ec:5b:b8:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9C:02:45:65:2A:D9:0F:0C:43:CE:1E:F7:79:08:10:FD:3A:2E:30
X509v3 Authority Key Identifier:
keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:0a:01:f3:48:85:59:42:9a:90:6e:c9:1c:b5:5e:c8:76:02:
b8:43:cc:06:58:fd:10:36:5d:31:3d:63:9d:68:d0:06:0f:c1:
14:4e:a3:b0:c7:d1:5a:57:98:12:af:83:b2:23:40:e3:92:69:
8c:a9:33:b3:a0:1a:ef:12:e6:c2:4e:15:e4:ff:4e:22:b8:0a:
e8:0d:b1:1d:76:0e:d3:29:d4:7a:2c:b2:70:00:ff:e8:ef:a4:
e2:6a:f1:da:c4:f8:15:ea:29:87:06:b3:30:b7:f4:9d:34:5a:
83:2b:62:73:9f:38:63:76:1c:91:be:2a:8c:a0:bd:a4:c7:4d:
e8:c7:a3:b3:cc:e6:db:87:9e:40:3c:20:bc:53:3d:57:d6:f0:
2e:af:27:f4:a8:55:8c:7d:9b:dc:13:bb:e2:c0:03:59:19:9d:
65:01:1f:a5:88:71:90:19:99:70:26:7f:68:fa:42:3e:9e:28:
a4:f5:c2:ca:77:a2:64:4a:5f:38:93:40:b2:9f:9a:46:2c:07:
80:90:20:79:67:80:80:c5:73:cf:80:ea:09:66:4c:33:85:a4:
ab:e9:0e:45:0e:fa:6a:19:b3:d0:7d:3a:25:ae:28:ec:b5:e3:
d4:67:d7:a1:a1:9d:06:47:9e:ac:55:c7:62:80:2b:e3:42:7c:
4c:37:44:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:03:36 2026 by rpki-client