Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
File: LRwW9-pxCvReKzoR5iijjOZ7x6U.mft (raw, json)
Hash identifier: HDDByK/9KhUCZDqiQPKiidjb3M50FNgEPiN5HYB8CeE=
Subject key identifier: 79:B8:1F:6D:C8:28:9B:07:91:C2:7D:81:8E:ED:B6:79:69:D4:C4:18
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 01A17B4DB2AE3696869B04CC691C0CB5EFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
Manifest number: 02D1
Signing time: Tue 27 Oct 2026 03:00:51 +0000
Manifest this update: Tue 27 Oct 2026 03:00:51 +0000
Manifest next update: Wed 28 Oct 2026 03:00:51 +0000
Files and hashes: 1: 6H30vP-omZ3fXnYoSZ8Js7FCYcU.roa (hash: U7YWHf0fdvfrVufMy3qwWFihjJAwE1e+lVBT2+hUqLI=)
2: GKLH9FqR5ufpCylhCN6FbfGgLDY.roa (hash: 1rknG1DoHjPJltge0cSGVjsDeu8yylMyucM/PEibazg=)
3: LRwW9-pxCvReKzoR5iijjOZ7x6U.crl (hash: iLK5nxWPZoGkxZNEHlbI768b7QfM8U2XSeHctB6X0Do=)
4: P3i4srHpwiuIB0xPjqetdmYKV1c.roa (hash: 41gux4lPqzvf2MXN8KdsUBgT0iliFU3zKAin5mYwihg=)
5: PIgUPxi7GaHoTA2H6HevNvDWy3o.roa (hash: M5GWr7SAUmVX904a5g1oxNLpt0yF4PMPyRfvanFYdSs=)
6: RRuTgob8nWF_H0-2A1kaE1z7gDM.roa (hash: 1JL+wPq9FDdgxrK5s7w8LuDxomHYJw19S/iTZj0V9/A=)
7: c-gfBOVrZyn6lP4jJKNaWdm6LjE.roa (hash: 6byHWOTIIxT+xORgQVzfhtsCknwQL+MpV2rZ+6Zcr1U=)
8: h-LEeBovo9_xTnvgTCMjoI-XRoA.roa (hash: 0hEHKnX2me30T9rIQYzwV67j/t0e3ske2o+krCmE5io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:b2:ae:36:96:86:9b:04:cc:69:1c:0c:b5:ef:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: Oct 27 03:00:51 2026 GMT
Not After : Oct 28 03:00:51 2026 GMT
Subject: CN=79b81f6dc8289b0791c27d818eedb67969d4c418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:35:81:36:f3:55:65:a2:e9:82:43:fc:2c:
36:0f:a5:08:e6:17:ad:00:7e:4e:9e:d1:0b:ac:11:
1a:05:e3:f0:a4:65:cf:7d:22:7c:25:9c:07:c7:90:
52:43:2d:47:d0:b7:8d:76:a1:45:8e:64:20:e9:0b:
71:67:c4:63:e2:8a:76:2e:9e:39:7e:0d:2e:83:99:
08:50:ee:52:a9:67:9c:61:b5:3c:af:eb:c7:9d:64:
0d:93:42:55:49:fb:aa:da:93:34:79:5a:43:12:ad:
f3:48:11:64:3c:aa:96:2c:02:58:dc:4d:92:87:e7:
31:14:a3:d9:3a:9e:05:31:00:a7:34:b4:67:64:6a:
93:8c:9b:e9:6e:b9:87:fe:97:33:d9:f8:3f:d2:a5:
39:ac:f8:ce:f7:ce:b6:31:eb:87:6e:b2:45:16:1c:
c6:29:6a:09:60:76:2b:84:ca:5a:14:3c:4e:56:ca:
36:a3:24:fb:8d:07:22:d2:d9:7e:df:9c:81:51:9b:
81:1b:64:4e:54:36:a0:5b:5b:5e:67:3e:49:4d:ae:
5d:8c:f0:5e:dd:c6:78:cd:01:cb:ed:46:eb:71:e5:
4f:60:e0:57:d7:79:4e:99:ac:50:3c:be:80:41:f4:
8c:09:2b:03:cc:05:61:ed:07:f2:79:45:7d:62:fb:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B8:1F:6D:C8:28:9B:07:91:C2:7D:81:8E:ED:B6:79:69:D4:C4:18
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:af:f8:b6:ca:9c:10:08:b7:6b:c5:f3:c6:72:6f:b1:bc:a1:
2a:46:9d:e4:25:f1:f7:2f:d8:d3:76:e2:05:87:35:81:49:57:
f2:d1:67:9d:95:b9:c3:5b:79:b3:8e:f4:3d:4e:cb:1a:1d:df:
09:0c:ff:26:c1:24:b7:8e:01:41:c6:95:61:2b:81:ec:c9:58:
fb:df:cd:78:d6:dc:e5:de:07:e4:0b:85:02:60:27:93:a9:18:
eb:81:1e:1e:ea:32:6b:d6:3c:78:7d:79:4c:a2:61:5f:e5:05:
8a:ae:75:62:0d:3f:73:84:7f:27:af:13:59:87:41:ab:1e:5c:
f5:f0:9c:02:b2:d7:5f:d0:fa:c9:1a:e6:d0:d4:1e:4c:34:0e:
56:27:3f:4f:5a:48:ef:19:d8:6b:5c:eb:36:e4:d4:b6:be:32:
77:95:a3:71:b0:dd:2b:a7:4a:72:22:dd:3f:c0:ef:63:e9:94:
9f:af:b6:2f:c0:79:f3:70:11:da:55:c9:3f:2b:de:c9:08:00:
98:49:62:af:65:d5:09:81:4d:cd:ff:67:b9:a7:c2:d5:47:e1:
51:b9:04:4d:16:43:ec:dc:25:9d:81:8c:3a:f2:c2:9f:d3:5e:
2d:d1:f0:f2:fd:c4:8c:43:1c:48:48:ea:45:92:18:5c:7b:b7:
3b:0e:15:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:12:22 2026 by rpki-client