Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File: LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier: UnyAmtECOARl+WYTh698er1Azt05RlcuOExLGYLx+w4=
Subject key identifier: FA:4F:5A:3B:2D:89:09:46:11:FE:6B:62:26:37:69:9F:5F:E9:57:31
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer: /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial: 01A18C7877E63E80FFF7CE5025BB121E7811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number: 08D2
Signing time: Fri 30 Oct 2026 11:01:07 +0000
Manifest this update: Fri 30 Oct 2026 11:01:07 +0000
Manifest next update: Sat 31 Oct 2026 11:01:07 +0000
Files and hashes: 1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: gDYgAI7yMNGa089UYEQKGi/wNWmr3ASqoXuLzGZJJKs=)
2: v3xovZ6ex1RS8yXpvjTxnMF_a-4.roa (hash: x4aNx2jmSAXUPJWnM7IfmYiwoUK7G3tuxZu7KLeQ7ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:78:77:e6:3e:80:ff:f7:ce:50:25:bb:12:1e:78:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Validity
Not Before: Oct 30 11:01:07 2026 GMT
Not After : Oct 31 11:01:07 2026 GMT
Subject: CN=fa4f5a3b2d89094611fe6b622637699f5fe95731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:e8:b9:86:b8:ee:fb:9f:96:e1:3b:3f:9e:
0d:74:a0:55:d0:f3:cc:d6:29:d8:31:2c:52:f9:87:
21:a8:b8:b8:8a:85:b3:42:59:a1:13:76:ee:63:01:
5f:0c:fc:f4:89:70:f2:46:31:ec:34:3b:55:6b:ca:
b7:6a:4c:7c:4f:c8:50:b6:cb:bb:3f:3b:03:17:fe:
df:75:07:05:df:0a:a1:de:34:2a:2b:55:f2:30:2f:
f5:44:71:ad:8e:77:02:1e:cf:2a:6e:e9:e3:a0:db:
77:63:77:87:eb:38:ca:ab:22:a6:f7:4a:68:66:b3:
d9:78:ff:17:70:87:f5:77:11:60:d2:b9:a8:19:5e:
29:4b:b6:09:0f:65:a9:2d:32:f4:7f:db:6f:b5:9b:
8b:11:0c:7e:23:e5:2f:12:c1:63:ae:ca:47:0b:1c:
27:4e:38:c8:5a:ee:f3:1e:f2:7b:9a:5e:8f:a6:a3:
c0:03:00:ea:ec:4e:69:0c:1c:03:7d:62:0e:f7:57:
44:99:1d:7c:57:c6:bb:10:6a:b8:c3:3a:70:37:3c:
d0:75:3a:bc:ba:c3:d5:31:62:b0:1e:5b:32:98:10:
d8:bb:ae:50:70:3a:66:ea:14:9e:3c:d1:51:3e:42:
de:31:dc:a5:bf:87:11:4d:ed:ef:72:79:2b:fd:79:
b8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4F:5A:3B:2D:89:09:46:11:FE:6B:62:26:37:69:9F:5F:E9:57:31
X509v3 Authority Key Identifier:
keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:03:44:df:38:b8:7b:a9:4c:91:e8:db:25:1d:f3:91:f3:a9:
8b:93:3e:d4:0e:03:13:c3:b5:95:51:31:03:7d:fc:99:44:95:
f9:62:ed:3e:f3:11:67:fd:5d:60:9d:be:ba:40:6f:a9:24:e0:
d0:53:6f:4b:fb:d0:5b:8d:83:eb:37:7f:34:4a:07:a5:0e:aa:
d3:5e:c6:51:ab:bd:d1:c7:ca:d1:0e:3e:f7:fa:60:eb:a1:f0:
ff:95:22:87:1e:c2:65:cc:61:2e:10:e4:4f:41:38:7a:eb:23:
a1:a6:6c:1f:87:c8:bf:d7:d8:85:88:f0:c7:6a:a5:60:f5:db:
2f:84:44:68:4a:10:14:8c:9f:07:90:c3:e7:19:ca:bb:69:13:
c1:db:6a:bd:76:59:21:4a:4b:78:fe:31:64:10:50:8d:30:01:
f5:e4:9b:99:18:7b:30:e7:82:0b:ee:ea:b7:42:b7:a4:63:0d:
ca:28:04:0f:d8:f7:08:85:f4:e8:52:ac:ca:fa:16:73:0a:62:
da:c5:13:c9:19:4f:09:3e:e9:91:69:5f:99:c6:6d:a1:8d:63:
25:8e:f8:9a:7f:a4:5a:b6:fb:40:c0:e5:53:0b:85:74:3e:7a:
2f:72:9a:a0:c1:dd:a5:14:73:7e:fb:a2:25:24:d1:f9:f1:6e:
0e:1f:60:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:25:49 2026 by rpki-client