
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.mft
File: LWHdlSWcJozW425VvLLLzFNbCog.mft (raw, json)
Hash identifier: 9EMqmG7t+p+ImZ5b1vtFWW6CsFxyWbbzROjmB5CpoWs=
Subject key identifier: 2C:BD:29:7E:12:AC:F8:B1:B8:BD:03:F5:3E:DF:11:42:4C:C4:E6:9B
Authority key identifier: 2D:61:DD:95:25:9C:26:8C:D6:E3:6E:55:BC:B2:CB:CC:53:5B:0A:88
Certificate issuer: /CN=2d61dd95259c268cd6e36e55bcb2cbcc535b0a88
Certificate serial: 019FAA88732EDEAAC8D9F936B65E1726A924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWHdlSWcJozW425VvLLLzFNbCog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:36 +0000
Manifest this update: Tue 28 Jul 2026 21:01:36 +0000
Manifest next update: Wed 29 Jul 2026 21:01:36 +0000
Files and hashes: 1: LWHdlSWcJozW425VvLLLzFNbCog.crl (hash: mYzzfyUf3btUglzIIEeECagy4hXR19iFtVhAkzhXchg=)
2: su82rcXot9m4Oy9K0FlOPXjQokA.roa (hash: NI3FeLiF5hrONml+ClMirVnRKzwaGy4tC2KGOZ7IoK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWHdlSWcJozW425VvLLLzFNbCog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:73:2e:de:aa:c8:d9:f9:36:b6:5e:17:26:a9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d61dd95259c268cd6e36e55bcb2cbcc535b0a88
Validity
Not Before: Jul 28 21:01:36 2026 GMT
Not After : Jul 29 21:01:36 2026 GMT
Subject: CN=2cbd297e12acf8b1b8bd03f53edf11424cc4e69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:26:f5:8e:6f:69:35:d3:32:45:e1:68:b5:
55:f2:88:dd:60:79:4c:20:4e:c9:fd:69:9d:f5:9f:
62:91:1e:6b:b8:bc:8c:fa:95:e2:c4:33:54:f0:ef:
9e:58:20:57:44:5d:fb:38:9c:0c:ea:aa:cd:71:ff:
01:d6:3c:c0:be:d0:bf:4c:29:0e:9f:3f:c8:9f:05:
27:08:97:a4:02:e9:f9:e2:99:f2:f3:a4:a1:f0:dd:
a2:75:eb:c2:90:ca:b9:d3:ee:0c:45:bf:06:38:27:
15:7e:8e:ed:31:1d:69:f2:7b:48:2d:f4:12:24:f0:
da:6f:8c:5a:66:9a:9d:de:f6:85:d7:bd:76:33:9e:
10:ed:5b:51:e7:e4:bc:51:e7:8e:55:36:32:d2:06:
89:33:c7:09:ca:97:4e:b9:a5:f4:bb:1d:8c:95:72:
db:21:ed:cf:69:c9:c1:19:0c:49:c7:18:25:d1:d1:
45:fe:6e:a9:88:98:ec:06:8f:c6:79:9d:ec:a4:cc:
e1:c5:fb:37:79:d8:6a:40:2c:41:21:66:67:00:30:
22:5f:b3:58:ba:a1:9b:e9:96:d7:8a:95:a2:38:73:
2f:18:c2:4c:1f:30:92:52:4b:d0:85:9b:31:60:a9:
fa:1d:fc:39:99:f3:56:fc:8d:2d:da:27:e3:fd:22:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BD:29:7E:12:AC:F8:B1:B8:BD:03:F5:3E:DF:11:42:4C:C4:E6:9B
X509v3 Authority Key Identifier:
keyid:2D:61:DD:95:25:9C:26:8C:D6:E3:6E:55:BC:B2:CB:CC:53:5B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWHdlSWcJozW425VvLLLzFNbCog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f2:62:9e:49:da:f2:02:54:c1:68:30:35:fc:2d:66:d6:38:
93:78:36:36:2c:ca:ec:16:bb:85:ec:5f:dc:b2:d2:dc:7f:f3:
f7:11:29:b8:c6:1c:fa:83:d9:d4:52:df:c2:fb:d4:11:43:8c:
d9:f0:96:83:16:0c:39:05:cd:7f:eb:2d:81:b7:9d:37:14:01:
b2:b4:3a:71:e7:a4:50:8b:5e:a9:4b:61:15:c3:3b:f3:f7:ff:
7b:75:ad:b7:3b:da:e9:7b:18:25:0c:fd:77:e4:02:5a:10:2c:
53:a1:05:8b:ab:24:60:4b:c1:f9:68:f5:cf:50:23:b9:84:d3:
6a:4e:a8:68:b3:15:e8:51:27:25:e4:00:a2:ab:2a:e3:58:61:
84:b5:74:72:51:a3:40:6c:c2:3d:b8:d8:c1:81:a8:e6:94:56:
0a:ad:a6:8e:02:7b:c7:33:8f:40:37:38:67:10:40:8f:37:b9:
d2:1c:06:c3:ab:fd:b1:90:d5:74:2b:be:e0:3d:db:57:6b:8e:
6d:78:22:2b:e2:77:82:40:63:60:b8:5c:57:4a:a0:e9:9c:b7:
d2:3d:6f:8c:9e:f2:c9:f2:86:9e:77:58:55:a7:c3:4f:cf:e2:
ab:d3:ad:f2:77:38:14:16:a6:eb:6d:1f:c0:0d:5e:70:4a:fa:
5a:9e:7d:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiHMu3qrI2fk2tl4XJqkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjFkZDk1MjU5YzI2OGNkNmUzNmU1NWJjYjJjYmNjNTM1
YjBhODgwHhcNMjYwNzI4MjEwMTM2WhcNMjYwNzI5MjEwMTM2WjAzMTEwLwYDVQQD
EygyY2JkMjk3ZTEyYWNmOGIxYjhiZDAzZjUzZWRmMTE0MjRjYzRlNjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotIm9Y5vaTXTMkXhaLVV8ojdYHlM
IE7J/Wmd9Z9ikR5ruLyM+pXixDNU8O+eWCBXRF37OJwM6qrNcf8B1jzAvtC/TCkO
nz/InwUnCJekAun54pny86Sh8N2idevCkMq50+4MRb8GOCcVfo7tMR1p8ntILfQS
JPDab4xaZpqd3vaF1712M54Q7VtR5+S8UeeOVTYy0gaJM8cJypdOuaX0ux2MlXLb
Ie3PacnBGQxJxxgl0dFF/m6piJjsBo/GeZ3spMzhxfs3edhqQCxBIWZnADAiX7NY
uqGb6ZbXipWiOHMvGMJMHzCSUkvQhZsxYKn6Hfw5mfNW/I0t2ifj/SKxtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCy9KX4SrPixuL0D9T7fEUJMxOabMB8GA1UdIwQY
MBaAFC1h3ZUlnCaM1uNuVbyyy8xTWwqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdIZGxTV2NKb3pXNDI1VnZMTEx6Rk5iQ29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84MGFlOGMtNWUxNy00MmZmLWFlYzUt
ZjA5MzFiMGQ0YWY4LzEvTFdIZGxTV2NKb3pXNDI1VnZMTEx6Rk5iQ29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84MGFlOGMtNWUxNy00MmZmLWFlYzUtZjA5MzFiMGQ0YWY4
LzEvTFdIZGxTV2NKb3pXNDI1VnZMTEx6Rk5iQ29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/Jinkna
8gJUwWgwNfwtZtY4k3g2NizK7Ba7hexf3LLS3H/z9xEpuMYc+oPZ1FLfwvvUEUOM
2fCWgxYMOQXNf+stgbedNxQBsrQ6ceekUIteqUthFcM78/f/e3Wttzva6XsYJQz9
d+QCWhAsU6EFi6skYEvB+Wj1z1AjuYTTak6oaLMV6FEnJeQAoqsq41hhhLV0clGj
QGzCPbjYwYGo5pRWCq2mjgJ7xzOPQDc4ZxBAjze50hwGw6v9sZDVdCu+4D3bV2uO
bXgiK+J3gkBjYLhcV0qg6Zy30j1vjJ7yyfKGnndYVafDT8/iq9Ot8nc4FBam620f
wA1ecEr6Wp59tQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:39 2026 by rpki-client