Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier: plE6nA5YqUPruhicULnsP+O/izGatw4WwF/YokuWnp4=
Subject key identifier: 54:0F:7E:C5:38:55:18:9A:16:EF:3A:75:6F:74:F7:92:79:FB:D5:49
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial: 019D9998DAA5711F6069E5243E2709B75862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number: 13FD
Signing time: Fri 17 Apr 2026 04:00:24 +0000
Manifest this update: Fri 17 Apr 2026 04:00:24 +0000
Manifest next update: Sat 18 Apr 2026 04:00:24 +0000
Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: LgsYSOk1ieth4xeQFlI4rVFe8xzKL6IV5vgTufmOyho=)
2: mFiXzHrxbxRLCdJjqMjDV1qXsf0.roa (hash: xj8BfUXzJ6HgdFsCYVaF06L0rsBxHlnBN9flZ6X2gpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:da:a5:71:1f:60:69:e5:24:3e:27:09:b7:58:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Validity
Not Before: Apr 17 04:00:24 2026 GMT
Not After : Apr 18 04:00:24 2026 GMT
Subject: CN=540f7ec53855189a16ef3a756f74f79279fbd549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:a6:90:be:e2:c2:ff:0c:fe:c8:62:15:56:
90:5b:7d:d6:db:60:8d:da:55:53:96:37:4c:66:37:
61:76:39:13:88:1d:a7:63:ee:15:65:8e:77:b2:8f:
6a:f4:3e:fd:79:72:b8:fd:cc:14:f5:db:43:12:07:
57:a4:53:fb:b0:8f:dc:ae:0c:12:96:c5:64:fe:ac:
98:40:9d:9d:f5:cf:a9:85:48:3b:ae:5f:60:c5:b8:
71:52:82:ce:b4:52:3a:e6:22:ee:0b:62:90:fc:89:
fd:f5:5e:4f:4e:7f:dd:f4:63:14:86:2a:2e:a2:db:
a8:47:03:5b:cd:ea:27:1d:09:32:29:3e:2e:55:d1:
93:7a:f5:7e:c0:83:d5:3e:27:43:41:36:c3:d4:53:
ac:e7:df:35:3c:90:2b:0d:08:07:8f:33:38:a2:f2:
bc:f9:f7:62:a3:52:70:e3:b3:30:93:31:f9:52:39:
b7:1f:0d:93:cd:97:b2:ba:01:15:8b:b1:fd:8b:ef:
f1:a4:c9:85:df:4b:ce:cd:e7:73:7d:01:f3:bc:1d:
ad:b8:ab:43:be:4c:3f:e3:4d:87:a9:26:61:3c:e1:
7f:93:bf:99:8c:c9:13:70:7a:d1:6a:9d:3f:73:cb:
48:7a:ea:f1:13:ee:09:2d:8c:91:d2:2e:e4:73:fa:
63:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0F:7E:C5:38:55:18:9A:16:EF:3A:75:6F:74:F7:92:79:FB:D5:49
X509v3 Authority Key Identifier:
keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7a:6d:2c:21:cb:c5:ea:b7:a2:26:76:54:33:b1:5e:fb:fc:
58:c0:93:2f:13:07:25:37:1f:04:64:ac:9e:d6:40:93:38:41:
4e:cd:d5:a0:2e:c6:f1:c2:27:88:55:59:fb:2d:9b:ee:e9:36:
56:ab:fa:57:16:b5:91:12:d9:c6:b1:8a:22:34:a6:f9:64:be:
97:30:a1:4a:8a:c8:6c:e0:81:1b:ad:a0:04:d6:e6:ed:82:1f:
14:29:79:b0:55:37:bc:20:cc:40:e3:6d:a4:a6:ed:1c:ee:14:
85:c0:d2:e1:ce:07:2f:d7:57:0f:61:97:88:0f:b3:c7:ee:f2:
f8:4f:ca:10:19:27:13:27:bb:04:47:f6:9b:ad:89:bb:16:87:
0c:0c:75:61:3c:8a:91:47:d2:e0:c9:0f:ae:f3:5e:43:6e:13:
7f:45:81:cd:b4:01:5a:3b:49:49:d9:37:59:ea:db:75:c1:7a:
e1:8c:9f:6b:f9:93:2f:1b:8d:6b:39:1f:f8:8b:d3:c7:f3:c2:
ca:a5:ae:ab:5a:1a:ff:e6:cb:24:6b:80:88:14:91:3c:38:27:
a4:5c:f4:2c:18:f0:77:e7:aa:64:c0:41:33:73:e2:5b:a6:83:
aa:e0:81:a4:ca:d2:6e:10:dc:1d:6b:01:66:16:1d:0a:95:4e:
ef:6e:41:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:56 2026 by rpki-client