Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
File: lwaqkFRlWGQk84f9vYNki3LZRt4.mft (raw, json)
Hash identifier: eCfAbUOBNvoIDW7AkUX71GwLm4YU6Rddm5Ix+HKtKoo=
Subject key identifier: 84:C0:5A:FB:23:52:53:20:4D:87:5F:CF:9A:D4:95:61:BE:C8:C6:6C
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial: 019DCE63702DBEC9C4BE5AF759DD1C2A879D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 10:01:56 +0000
Manifest this update: Mon 27 Apr 2026 10:01:56 +0000
Manifest next update: Tue 28 Apr 2026 10:01:56 +0000
Files and hashes: 1: axFCojXUhSkytCN0atEZfj9fkA8.roa (hash: I3PEkjutyOX2FwIEMplxrCsf4ez6AG70VNxYovdKhQs=)
2: dp2gXrpfvOMg65Z1sl0IeonKbxM.roa (hash: 8Vzr1PEVztWf+5QEVA47vH/IaL1dnxwbEHxKX7SEwVU=)
3: lwaqkFRlWGQk84f9vYNki3LZRt4.crl (hash: +hqKV9HlE5M4bOf9Gfd2jaD6gscfygDdadRgJTE0ybU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:70:2d:be:c9:c4:be:5a:f7:59:dd:1c:2a:87:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
Validity
Not Before: Apr 27 10:01:56 2026 GMT
Not After : Apr 28 10:01:56 2026 GMT
Subject: CN=84c05afb235253204d875fcf9ad49561bec8c66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:60:7c:fb:0d:d1:d5:02:56:93:1a:8b:f5:
53:4c:25:30:6b:98:49:23:3d:86:e1:82:22:3c:2a:
06:82:21:fc:9c:cd:e7:87:fb:34:51:c1:4b:cb:cd:
d4:1b:89:c1:22:0b:29:16:00:d8:3a:74:a8:b6:6b:
23:9a:ca:dc:83:02:0b:f8:2b:f0:9b:ac:ba:c0:c3:
1f:f9:b4:e0:78:20:ef:fb:1e:af:55:64:c1:a5:91:
38:30:13:b6:74:76:25:65:02:28:75:db:60:e6:70:
63:5b:5d:c5:a3:1a:e0:94:33:6a:f9:12:c9:aa:38:
7c:00:6c:8d:d9:fc:d6:f3:21:dd:97:66:b4:ae:b5:
36:86:b2:32:2e:2c:b0:af:da:9f:a4:b1:b0:b9:88:
1c:82:91:8e:18:1e:4c:70:58:96:33:9a:b1:ec:27:
8f:65:de:3c:31:56:dc:8f:0b:40:39:e6:d2:35:a2:
28:a5:96:b4:4e:13:2f:95:91:6c:ed:ea:c4:6d:cc:
f4:fe:d2:fd:ee:59:12:f4:38:d9:a8:1f:86:08:4e:
5a:af:d5:d7:3c:18:2d:e8:f3:f4:81:8e:1c:7b:04:
76:a7:bc:8e:d4:c8:6b:42:40:ed:82:62:23:d9:4c:
e0:e8:8a:25:61:6e:7c:17:69:1f:5b:3c:41:50:52:
59:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C0:5A:FB:23:52:53:20:4D:87:5F:CF:9A:D4:95:61:BE:C8:C6:6C
X509v3 Authority Key Identifier:
keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:fb:74:45:fb:cf:70:bd:dc:e4:5a:06:f6:86:72:22:bf:df:
42:96:0e:8f:e8:a4:4a:29:d2:ba:ba:08:d3:f4:89:c4:b3:cf:
5a:ff:38:96:bb:dd:db:20:4a:55:df:83:62:1c:58:1b:91:6d:
90:cb:d1:dd:d6:5d:00:d7:83:cc:58:54:a0:38:44:b0:a2:f6:
e7:eb:20:31:23:17:b8:2c:93:62:49:2b:23:1e:48:17:34:5b:
e6:dc:54:61:52:62:ca:2b:f6:79:ab:dd:c6:2a:b7:f9:63:4e:
7f:10:b5:95:a4:2f:92:0c:7e:0a:43:82:71:51:17:00:48:89:
03:29:c2:0a:d9:29:0f:53:4b:84:91:ad:ef:9a:68:32:33:21:
de:da:7c:a2:e8:a7:91:43:7e:2d:07:a9:ed:93:7a:36:f4:91:
30:0d:d4:86:a9:9b:0c:f2:14:01:65:a3:cf:48:c5:30:25:96:
d3:78:f1:3b:14:21:f3:05:e2:05:d4:24:b5:d8:de:9a:27:ea:
34:84:4a:57:6d:9a:da:1b:47:7c:6d:76:81:cd:ad:46:da:ea:
96:0b:48:1d:6f:ee:03:ae:f3:90:c0:5c:ba:7e:4b:f3:7b:e4:
e0:8f:49:dc:8e:8b:f0:05:53:fb:d9:0c:68:c2:b1:31:41:5e:
dc:0b:8c:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OY3AtvsnEvlr3Wd0cKoedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MDZhYTkwNTQ2NTU4NjQyNGYzODdmZGJkODM2NDhiNzJk
OTQ2ZGUwHhcNMjYwNDI3MTAwMTU2WhcNMjYwNDI4MTAwMTU2WjAzMTEwLwYDVQQD
Eyg4NGMwNWFmYjIzNTI1MzIwNGQ4NzVmY2Y5YWQ0OTU2MWJlYzhjNjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmytgfPsN0dUCVpMai/VTTCUwa5hJ
Iz2G4YIiPCoGgiH8nM3nh/s0UcFLy83UG4nBIgspFgDYOnSotmsjmsrcgwIL+Cvw
m6y6wMMf+bTgeCDv+x6vVWTBpZE4MBO2dHYlZQIoddtg5nBjW13FoxrglDNq+RLJ
qjh8AGyN2fzW8yHdl2a0rrU2hrIyLiywr9qfpLGwuYgcgpGOGB5McFiWM5qx7CeP
Zd48MVbcjwtAOebSNaIopZa0ThMvlZFs7erEbcz0/tL97lkS9DjZqB+GCE5ar9XX
PBgt6PP0gY4cewR2p7yO1MhrQkDtgmIj2Uzg6IolYW58F2kfWzxBUFJZ2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITAWvsjUlMgTYdfz5rUlWG+yMZsMB8GA1UdIwQY
MBaAFJcGqpBUZVhkJPOH/b2DZIty2UbeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHdhcWtGUmxXR1FrODRmOXZZTmtpM0xaUnQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xY2YzZjAtYTAzNi00Yzc2LThiMDkt
NWM1MzViNzQ2MzUzLzEvbHdhcWtGUmxXR1FrODRmOXZZTmtpM0xaUnQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8xY2YzZjAtYTAzNi00Yzc2LThiMDktNWM1MzViNzQ2MzUz
LzEvbHdhcWtGUmxXR1FrODRmOXZZTmtpM0xaUnQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvt0RfvP
cL3c5FoG9oZyIr/fQpYOj+ikSinSuroI0/SJxLPPWv84lrvd2yBKVd+DYhxYG5Ft
kMvR3dZdANeDzFhUoDhEsKL25+sgMSMXuCyTYkkrIx5IFzRb5txUYVJiyiv2eavd
xiq3+WNOfxC1laQvkgx+CkOCcVEXAEiJAynCCtkpD1NLhJGt75poMjMh3tp8ouin
kUN+LQep7ZN6NvSRMA3UhqmbDPIUAWWjz0jFMCWW03jxOxQh8wXiBdQktdjemifq
NIRKV22a2htHfG12gc2tRtrqlgtIHW/uA67zkMBcun5L83vk4I9J3I6L8AVT+9kM
aMKxMUFe3AuMxA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 13:28:04 2026 by rpki-client