Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
File: LWNPtoGAIUTwZMGxnxH2qudZbc8.mft (raw, json)
Hash identifier: 3nEHZ1IqjcBG2s3IzAmz5mAfJnvKA9pzg7SQyIvrZt0=
Subject key identifier: 93:B0:BE:AF:B4:35:84:B6:06:AC:91:37:95:6E:38:E2:49:5A:F3:77
Authority key identifier: 2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
Certificate issuer: /CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Certificate serial: 019D39AE87C07606BEE130F836766823508A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
Manifest number: 0B86
Signing time: Sun 29 Mar 2026 13:00:32 +0000
Manifest this update: Sun 29 Mar 2026 13:00:32 +0000
Manifest next update: Mon 30 Mar 2026 13:00:32 +0000
Files and hashes: 1: 8r5CCMNCOrF5UeZm--M1-L2_aNE.roa (hash: 5uZrQi9goTIW1VoDg15afLwiKtYpkz/EDyqXcTbpQqo=)
2: LWNPtoGAIUTwZMGxnxH2qudZbc8.crl (hash: RXtFsgEU6krTe43MdF49fNPR8fOPl0i8BuOqKFODS6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:87:c0:76:06:be:e1:30:f8:36:76:68:23:50:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Validity
Not Before: Mar 29 13:00:32 2026 GMT
Not After : Mar 30 13:00:32 2026 GMT
Subject: CN=93b0beafb43584b606ac9137956e38e2495af377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:0c:ae:e9:3a:97:af:57:36:ea:fc:33:7d:
64:91:a6:82:5e:c4:2b:8e:3e:f1:4d:f8:3b:04:64:
d4:02:0d:8e:21:e0:67:71:0d:81:48:54:dc:ce:4c:
35:d7:21:85:4f:9d:8c:0a:bd:61:2c:09:89:0f:13:
7b:a8:c5:b9:a8:a3:9e:49:de:62:51:e8:07:ff:a4:
f8:ec:7c:89:7f:85:bd:83:42:f7:3c:22:51:be:48:
df:c3:a1:d3:62:a0:60:76:ca:9a:0d:42:cb:8b:8d:
02:35:c8:1d:88:51:71:d1:0b:59:ea:1a:85:53:aa:
8a:08:93:4d:81:a1:80:e1:ab:88:07:3c:3f:3e:1d:
80:3d:4d:b2:39:0e:c8:18:c3:0a:ff:a1:91:23:6f:
11:4d:91:62:99:3c:d5:20:5b:a3:ae:3b:60:83:0f:
da:2f:63:cd:53:cc:a7:99:7f:e6:98:00:ba:51:b0:
20:8a:72:19:e9:91:2e:e0:7c:f6:d6:9e:9e:3a:20:
5d:c0:2c:39:b3:dc:9b:c3:55:3f:03:03:a4:bf:91:
e3:4c:c1:71:2b:6a:c9:ad:88:3b:19:e0:00:a3:69:
53:89:44:32:23:8e:be:c1:b6:49:2a:07:d2:1a:d7:
eb:8c:79:d5:41:f0:fb:54:7c:52:b3:45:b9:b5:74:
33:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B0:BE:AF:B4:35:84:B6:06:AC:91:37:95:6E:38:E2:49:5A:F3:77
X509v3 Authority Key Identifier:
keyid:2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9a:34:6d:83:ce:8a:ac:28:8c:c3:1d:27:99:77:52:42:52:
57:76:ed:58:31:cd:5a:12:f3:ef:8e:f1:bf:b3:8a:19:f1:09:
c9:d0:2d:4c:c1:9d:c4:3c:cd:2e:03:72:ce:10:7c:de:5a:06:
7e:ca:41:a5:f0:69:7e:6c:ef:6e:0b:97:56:39:1a:c1:1f:84:
37:d1:21:dd:cb:d9:27:34:d2:4c:75:f3:87:9f:7f:e0:6d:3f:
35:19:53:d6:fe:7e:46:78:88:60:24:1b:58:28:73:40:09:6a:
3c:fa:7f:5b:92:99:38:2c:3f:1e:82:7c:f0:65:e7:8b:4c:10:
fc:3b:c0:f6:5b:cf:0b:a7:b9:ce:12:ae:f4:25:48:56:eb:7a:
de:b1:72:cb:f8:91:90:9d:e8:eb:c7:89:21:43:7e:76:a4:00:
e5:2e:fa:16:3b:73:e6:24:d9:d5:11:3a:43:57:b4:f2:f0:c5:
f8:0b:ea:3d:d3:89:0d:ea:71:cd:bc:61:ea:7b:2d:8c:6d:12:
54:fd:0f:84:c8:d8:9c:26:a0:b3:b0:f1:56:b5:05:38:0d:48:
b2:48:e6:48:3a:8f:23:6e:d7:3c:d7:c3:c5:56:c0:2b:a0:54:
44:6d:0b:dd:39:b9:f1:6a:e7:b3:5f:b4:63:24:5b:4e:d1:3f:
1a:e9:ac:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:09 2026 by rpki-client