Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
File: LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft (raw, json)
Hash identifier: YTSP8J+mw+rVkIzJsdN5aEc3EdWtbKq0KGOHbr1/f2c=
Subject key identifier: 71:F7:AA:3A:66:8A:B7:FD:93:80:CF:C8:AA:72:3E:D0:61:4E:AB:64
Authority key identifier: 2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
Certificate issuer: /CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Certificate serial: 019D389BAA1577C2959BB66B0CD2475738C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 08:00:18 +0000
Manifest this update: Sun 29 Mar 2026 08:00:18 +0000
Manifest next update: Mon 30 Mar 2026 08:00:18 +0000
Files and hashes: 1: LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl (hash: 2yojeFC7Jk5slrxe5Hl04cOzNGv8YLzcynbBuFDFbA0=)
2: iH-W1KrCxFHlEwTj-N3qmKRJjJM.roa (hash: KY2lJTniA4rnCiE0KdvRBg56MPlz79jziBGeziSB/MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:aa:15:77:c2:95:9b:b6:6b:0c:d2:47:57:38:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Validity
Not Before: Mar 29 08:00:18 2026 GMT
Not After : Mar 30 08:00:18 2026 GMT
Subject: CN=71f7aa3a668ab7fd9380cfc8aa723ed0614eab64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d0:75:5f:04:db:1a:6c:62:ad:d3:78:b8:0b:
dd:c7:e4:cf:03:ee:e1:af:65:77:74:8c:15:9c:97:
7d:ee:c1:85:df:0b:68:98:d5:33:b7:1d:60:c9:fe:
c0:c0:fb:43:16:3d:83:48:11:3b:45:c8:e7:7b:a8:
b4:41:fc:e1:f7:01:3a:bd:7c:30:bd:9e:75:cf:2b:
5d:74:fa:36:81:19:c8:e8:ca:4c:71:3a:32:9b:93:
69:ca:49:dc:e9:12:1c:28:23:17:2d:85:27:3b:bd:
99:83:72:32:ad:96:de:27:63:4b:67:d7:13:20:2f:
c0:71:72:17:11:80:98:fa:35:8e:79:26:db:bf:9e:
4f:31:38:bf:81:05:df:36:19:93:33:be:3b:9d:b5:
48:27:a5:f4:55:17:d6:b1:bc:37:52:6d:bd:3e:2e:
79:46:e3:e7:e4:fd:2a:57:ca:86:0f:e5:04:6f:80:
f6:75:a2:d9:57:fe:b6:3f:aa:b9:58:42:50:7c:b6:
f5:8d:6e:86:c6:77:80:8e:b2:62:25:1c:5a:30:1a:
71:ac:73:20:42:62:6c:2b:4b:11:e1:80:c1:b2:75:
5c:34:88:dc:33:f0:10:5d:05:80:bb:9e:40:d3:c5:
16:be:2b:14:e6:1c:ca:c8:5c:28:76:cf:6d:ee:94:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F7:AA:3A:66:8A:B7:FD:93:80:CF:C8:AA:72:3E:D0:61:4E:AB:64
X509v3 Authority Key Identifier:
keyid:2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8f:0b:93:e9:37:49:d7:56:b7:6b:66:e9:52:41:dd:24:dd:
73:b5:78:45:05:95:57:84:28:ad:fb:64:30:74:16:8b:da:c3:
7d:e4:44:fd:b0:e1:da:bc:aa:65:b8:1a:75:b8:f5:7e:71:fb:
f4:5d:5a:12:42:a2:ce:d6:4f:cf:23:4e:3f:9b:5e:1c:d9:8c:
86:9e:29:59:90:fa:1c:98:ea:a7:ad:3b:3f:c3:97:7f:2f:ea:
a7:92:0a:dd:ad:1e:7e:75:9e:37:a1:53:5e:66:dd:4b:fd:84:
96:cb:2d:09:6e:a0:80:38:22:86:cd:2a:7a:09:e5:e2:ab:ad:
06:93:65:a7:fc:4e:54:79:1e:98:e2:84:30:28:e7:d4:a2:8b:
19:6b:93:a1:52:88:16:12:d2:55:19:54:ea:11:5e:07:c1:da:
52:7c:ae:7a:bd:0e:83:6d:a2:9f:8d:9e:a4:04:86:66:94:35:
07:9f:57:40:d1:7f:db:6b:c9:09:32:27:fe:2b:b9:4e:5c:16:
c2:f9:e3:a4:54:e6:17:b5:d0:55:b7:62:41:bc:b3:21:33:a9:
75:e8:1b:3a:58:d4:1a:12:40:14:f0:62:ff:60:e3:9e:ea:c3:
8b:6d:f3:2f:ba:50:7e:f5:99:14:5e:e8:de:cb:d1:23:b7:1f:
06:0d:6e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:17 2026 by rpki-client